Information about the responsible body
The person responsible within the meaning of the General Data Protection Regulation and national data protection laws as well as other data protection regulations is
Ulm University of Technology
University of Applied Science
Prittwitzstrasse 10
D-89075 Ulm
The Ulm University of Technology is a corporation under public law. It is headed by the Rector Prof. Dr. Volker Reuter legally represented.
Telephone: +49 (0731) 96537-100
Fax: +49 (0731) 96537-120
Email: info@thu.de
Official data protection officer
Our official data protection officer is Prof. Dr. Markus Schäffter.
Email: datenschutzanwalt@thu.de
Telephone: +49 (0731) 96537-278
Fax: +49 (0731) 96537-120
Data processing as part of our website
Scope of processing personal data
As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services.
The collection and use of information directly relating to our users (name, contact details) is regularly only carried out with the consent of the user. An exception applies in cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
Legal basis for processing personal data
To the extent that we obtain the consent of the data subject for processing personal data, Article 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest on our part or that of a third party and if the legitimate interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 Paragraph 1 Letter f of the GDPR serves as the legal basis for the processing.
Data deletion and storage period
Personal data will be deleted or blocked as soon as the purpose for storage no longer applies and any statutory retention periods have expired.
Log data that is used to detect misuse or to maintain proper operation will be deleted or overwritten after 6 months at the latest.
Data processing to provide the website: Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the user's computer
(3) The user's Internet service provider
(4) IP address of the user, possibly also the DNS name
(5) Date and time of access
(6) URL of the website from which the user's system accesses our website
(7) URL of the website that is accessed by the user's system via our website
This data is temporarily stored in the log files of our IT systems. This data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.
The data listed is stored in the log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.
These purposes also include our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR.
Duration of storage / Data retention
The data will be deleted as soon as it is necessary to achieve the purpose of its collection
Possibility of objection and removal
The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no possibility of objection.
Use of cookies
Our website uses so-called cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require that the browser that is visiting the website can be identified even after a page change.
The following data is stored in the cookies and transmitted to our IT systems:
(1) Language settings
(2) Name of the end device
(3) Information about the browser
(4) Log-in information after registration
Legal basis for the use of cookies
The legal basis for the use of cookies is Art. 6 Para. 1 lit. f GDPR. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.
Duration of storage for cookies
The storage period depends on the type of cookie. We use so-called session cookies, which are deleted from the user's computer by the web browser after the web browser is closed or by logging out of our website via the corresponding link.
Note on the use of social media
The use of our offers is generally possible without explicitly providing personal data, but processing of personal data may be necessary. The processing of personal data is carried out in accordance with the EU General Data Protection Regulation (GDPR).
You find a detailed data protection information for social media here.
We take our role as a role model as a public educational institution very seriously and follow the following principles when using social media:
Tracking
The Ulm University of Applied Sciences does not use tracking services such as Facebook Pixel, Google Analytics, etc. Please note, however, that the processing, storage, deletion and use of personal data in social networks is the responsibility of the respective service provider and the Ulm University of Applied Sciences has no influence on this.
Possibility of objection and removal
The use of cookies serves to provide the website in a user-friendly manner and is important for the operation of the website. The user has no possibility of objection, but the possibility of preventing cookies from being saved by configuring the web browser accordingly.
Rights of the data subject
If we process data about you, you as the data subject have the following rights within the meaning of data protection law.
Right to information
You can request information from us as the operator of the website about the type, scope and purposes of the processing of personal data about you.
Right to rectification
If information about you is incorrect, you have the right to have this information rectified or completed.
Right to deletion or restriction of processing
If information is incorrect or incomplete or if you dispute the legality of the data processing, you can request that the relevant information be deleted, possibly with a restriction of use for the period of clarification. This is the case, for example, if the data is no longer required for the purpose for which it was collected at the time or if you revoked your consent at the time.
Right to object
If the data processing is based on consent, you have the right to revoke this at any time and with effect from the time of the objection. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the option of exercising your right of objection in an automated form.
Right to complain to a supervisory authority
You have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you violates data protection law. This may include the supervisory authority responsible for data protection for your place of residence and, if applicable, your place of work.
The supervisory authority to which the complaint was submitted will inform you, as the complainant, of the status and results of the complaint, including the possibility of legal redress.
