Who are we?
Ulm University of Applied Sciences is a public body, represented by a president, Prof. Dr. Volker Reuter.
You can reach us at:
Technische Hochschule Ulm
Hochschule für Angewandte Wissenschaften
Prittwitzstrasse 10
89075 Ulm
Web: www.thu.de
e-mail: info@thu.de
Telephone: +49 (0)731 96537-100
If you have any questions about data protection, please feel free to get in touch with our data protection officer:
Ulm University of Applied Sciences Data Protection Officer
Prof.Dr. Markus Schäffter
Tel.+49 731 96537-278
datenschutzbeauftragter@thu.de
You can find more detailed information in our Legal Information (Impressum)
Why are we present on social media?
We at Ulm University of Applied Sciences use social media (e.g. Facebook, Instagram, LinkedIn, Twitter, YouTube) for the following purposes:
Public relations (information about events, occurrences and activities):
Targeted contact with potential future students; Facebook, Instagram
Information about situations vacant and professorships: Facebook, XING, LinkedIn
Information about our courses, the further training we offer and diverse activities as a provider of education
What fundamental principles do we follow when using social media?
We use the services of social networks as supplementary information and communication channels i.e. as a matter of principle we do not provide content or services via external communication platforms which is not also available or usable via our website www.thu.de or via other communication channels (telephone, e-mail, contact forms).
As a matter of principle, we use the services of social networks without processing personal user data ourselves. Exceptions are always when you get in touch with us directly, for example, by leaving a comment and giving your username.
Overall, as a public educational institution, we take our responsibility to set an example very seriously. When using social media, we adhere to the following fundamental principles (specified in our privacy policy for the use of social media):
We do not use social media for processing orders. However, as the provider of content, through our choice of platform we bear a shared responsibility for data-protection-compliant treatment of user data by the platform operators.
We use the services of social networks as supplementary information and communication channels, i.e. as a matter of principle we do not provide content or services via external communication platforms which are not also available or usable via our website www.thu.de, or via other communication channels (telephone, e-mail, contact forms).
When recording and analyzing user data, we adhere to the data protection principles of data minimization, purpose limitation and storage limitation.
Data protection aspects are also a factor in our choice of platform provider.
We strive for the greatest possible transparency. We can always be clearly recognized as the provider of the content and we inform users about the purpose and scope of the processing of their personal data by social media.
We use the options available to us to protect the personal rights of users on social media as well. To achieve this, we consistently apply the options for the more data-protection-friendly settings offered by the information and communications platforms – and implement the technical and organizational protective measures available to us.
Why do we collect personal data?
The processing of personal data occurs essentially due to the following interests:
security interests, protection of the website
processing of contact queries, documentation of contact queries
Generating statistics for analyzing and improving our website and online offer.
Information provided on social media
Presentation the University of Applied Sciences and its educational offer to the general public
Marketing of other activities and events at the University of Applied Sciences
Optimization of the presentation of our content on your computer
To fulfill legal disclosure obligations for government bodies, including provision of information to the owners of copyrights and ancillary copyrights.
What personal data do we record from users of our content of the content we offer?
We record details about your person (name, contact data, degree program (if applicable)), whenever you get in touch with us via our contact form.
Furthermore, during electronic communication we must record your IP address in order to be able to exchange data via the internet.Furthermore, we collect data regarding your end device (operating system, screen size, language settings etc.) and the applications used, in order to adapt our information offer to your end device and to resolve any errors.
What personal data is collected by the communication platforms we use?
The external information and communication platforms we use record personal data for their own purposes, put information (cookies) on your end device or use the advertising-ID of your browser to identify you as a user and to recognize you again, in order to generate user profiles.
We try to avoid tracking and advertising as far as this is possible as a user of the platforms. This is why we use the "two click solution" for plug-ins etc. as a matter of principle, so that the user data is transferred only after they click the relevant link. Ulm University of Applied Sciences does not use Like buttons anywhere in our content!
To our knowledge, the providers of the social media channels we use process the personal data of users of their services, and in particular the following:
IP address and details about the end device, including the manufacturer, the operating system, the browser used and language settings
https cookies for maintaining the https session
Session cookies with information about the configuration
Tracking cookies, including Google Analytics: Facebook, Instagram
Advertising ID, advertising cookies: Facebook, Instagram
The time the website was called up
URL of the website used on the plug-in
Location-related information (for mobile end devices)
Device-related information (e.g. the operating system used and browser information)
Previously-visited websites for advertising purposes
Third-party data (e.g. e-mail addresses for recommendations)
If not otherwise specified, you can assume that the following technology is used for collecting data:
Cookies (e.g. permanent storage of your login data)
Log files (storage of the cookie data on the service's servers)
Analysis scripts (e.g. documenting the click behavior on the website)
Forwarding of posted links
Local data storage (e.g. permanent caching of images)
Use of social media plug-ins
How do we protect the personal rights of social media users?
We consistently apply the technical and organizational protective measures available to us. This includes data-protection-friendly defaults such as no-cookie plug-ins, not using "Like" buttons, using two-click solutions for unavoidable plug-ins, etc.
For more information about data-protection-friendly settings for your end device, please see the information provided in the attachment for the individual social media channels we use.
Legal basis
We process personal data on the basis of what is permitted by the following data protection
legislation:
- With the voluntary, informed and traceable consent of the user as per Art. 6 (1a) in connection with Art. 7 of the EU General Data Protection Regulation (GDPR): Information in contact forms, advertising and tracking cookies.
- For fulfillment of the public duties of our University of Applied Sciences, as per Art. 6 (1e) GDPR: Public relations work, targeted contact with potential future students, information about situations vacant and professorships: Information about location (IP address), contact data from contact forms, image and audio material from public events where individual people can be recognized.
- As far as the processing of personal data is necessary for fulfilling a legal obligation, Art. 6 (1c) GDPR serves as the legal basis.
- To ensure the operational reliability of our website and to optimize the display of the answers on your computer as per Art. 6 (1c) in connection with. Art. 32 (1) GDPR: IP address, information about the end device, https cookies.
- For filtering the information offered, particularly with regard to location details: IP address, language settings, cookies
- When processing personal data which is required for the fulfillment of a contract – where the affected person is one of the contracting parties – the legal basis is Art. 6(1b) GDPR. This also applies to processing operations which are required to implement pre-contractual measures.For example, the personal data of (potential) students and applicants for vacancies, teaching positions and professorships.
- If processing is necessary for our legitimate interests or those of a third party, and the legitimate interests, fundamental rights and freedoms of the affected person do not override the first-mentioned interest, Art. 6(1f) GDPR serves as the legal basis for processing.
For how long do we store personal data?
We will delete your personal data as soon as these are no longer needed for the relevant purpose – unless legal requirements for retention and provision of evidence make a longer storage period necessary.
Regarding contact data, we store your data for as the long as the relationship exists. We delete contact data regularly at the turn of the year after the contact period has finished.
We store the contents of communications for up to 5 years in line with the legally-applicable retention periods.
What rights do you have?
You have the right to information about the type, purpose and scope of the data processing we carry out. You have the right to further information about the processing of your personal data, if there are errors you have the right to deletion or correction, or limiting of the data-processing.You can withdraw any permissions you have given at any time (a special form is not required).
A simple e-mail to the e-mail address shown above is sufficient.
If you believe that our response to your data protection concerns is inadequate, you have the right to make a complaint to the responsible Data Protection Authority.
Attachment: Service providers used
Currently, Ulm University of Applied Sciences is active on the following social media channels and we use the following associated services:
Facebook
If you are logged into Facebook with your Facebook account, you can link the content of our website with your Facebook profile by clicking the Facebook links. This means Facebook is able to assign your visit to our website to your user account.We are not informed about the transferred data or its use by Facebook.For more information about the purpose and scope of data recording and its further processing and use by Facebook, as well as your rights, please read the Facebook Privacy Policy.
Facebook Pixel
This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.However, according to Facebook this data is also transmitted to the USA and to other third countries.
This means the behavior of the visitor to the website can be tracked after they have clicked on a Facebook advertisement and been forwarded to the website of the provider. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes, in order to optimize future advertising campaigns.The collected data is anonymous for us as the operator of the website – we can draw no conclusions about the identity of the user.However, Facebook stores and processes the data so that a connection to the relevant user profile is possible and Facebook can use the data for its own advertising purposes, in line with
Facebook's data use policy. This enables Facebook to place advertisements on Facebook pages and outside Facebook.We, as the website operator, have no influence upon the how the data is used.
The legal basis for the use of Facebook Pixel is Art. 6(1) lit. f GDPR. The website operator has a legitimate interest in effective marketing, including via the use of social media channels.As soon as the relevant permission is requested (e.g. consent to the storage of cookies), the data is processed exclusively in line with the legal basis described in Art. 6(1) lit. a GDPR. Consent can be revoked at any time.
You will find more information on protecting your privacy in Facebook's data protection information.
Google Maps
The THU website provides geographical information for contact and visiting purposes. The maps are based on the Google Maps API, provided by Google Inc., 1700 Amphitheatre Parkway, Mountain View, CA 94043, USA.When you call up the map service, Google can see your IP address, the language of the system and a variety of browser-specific details.External services such as Google Maps can only be used if the user gives their explicit permission.
The queried geographical positions are transmitted directly to the service. Your location may also be transmitted if you call up the website with a GPS-capable device.Other personal data are not transmitted to Google.
Instagram
Our website pages incorporate functions of the service Instagram, provided by Instagram LLC, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into Instagram with your Instagram account, you can link the content of our website with your Instagram profile by clicking the Instagram buttons.This means Instagram is able to assign your visit to our website to your user account.We are not informed about the transmitted data or its use by Instagram.For more information about the purpose and scope of the data collection, its further processing and the use of the data by Instagram, as well as your rights,
please read the data protection information provided by Instagram.
LinkedIn
Our website pages incorporate functions of the network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 Ireland. When you visit our pages, your browser creates a direct connection with the LinkedIn server. This means LinkedIn is informed that you have visited our page.If you click the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn can assign your visit to our website to your user account.We are not informed about the transmitted data or its use by LinkedIn.For more information about the purpose and scope of the data collection, its further processing and the use of the data by LinkedIn, as well as your rights, please read the data protection information provided by LinkedIn.
Twitter
Our website incorporates functions of the service Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, US. By using Twitter and the "Re-Tweet" function, the websites you visit are linked with your twitter account and other users will be informed about them.This means Twitter is able to assign your visit to our website to your user account.We are not informed about the transmitted data or its use by Twitter.For more information about the purpose and scope of the data collection, its further processing and the use of the data by Twitter, as well as your rights, please read the the data protection information provided by Twitter.
Xing
We run multiple groups in the XING social network. The operator of the website is New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany.
This offer is targeted at people who are already XING users. You can find the XING Privacy Policy here.
YouTube
We embed YouTube videos in extended data protection mode. The websites we use incorporate plug-ins from the Google-operated service YouTube, provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.When you visit our pages, your browser creates a direct connection with the YouTube server via the plug-in, for example, in order to display embedded videos.This means YouTube is informed that you have visited our page.
Please note: if you are logged into your YouTube account, YouTube can assign your visit to our website to your user account. If you do not want this to happen, please log out of your YouTube user account before visiting our website, or use an incognito tab (inprivate browsing).We ourselves have no knowledge of the user data collected by YouTube.
As a matter of principle, we use the option of data-protection-friendly embedding of YouTube videos. For more information about the purpose of the data collection, its further processing and the use of the data by YouTube, as well as your rights, please read the data protection information provided by YouTube.
