Data protection

Thank you for your interest in our organization. Data protection is of particular importance to Anhalt University of Applied Sciences.

General information on data processing

1 Extent of personal data processing

As a matter of principal, we process our users’ personal data only to the extent necessary in order to fulfil our tasks, in particular to provide a functional website and for the provision of our content and services. We only process personal data of our users after they have given their consent. An exception is made in those cases where prior consent cannot be obtained for legitimate reasons and where the processing is permitted by law.

 

2 Legal basis for the processing of personal data

Insofar as we have obtained the consent of the data subject for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.

When the processing of personal data is necessary for the execution of a contract in which the data subject is a contractual party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation in which the university is subject, Article 6(1)(c) GDPR serves as the legal basis.

In cases where vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

Insofar as the processing of personal data is necessary in the public interest or for the performance of our sovereign duties, Article 6(1)(e) GDPR in conjunction with §§ 4-9 Data Protection Act of Saxony-Anhalt (DSAG LSA) serves as the legal basis for the processing.

If the processing is necessary for the purpose of a legitimate interest pursued by Anhalt University or by a third party and this interest is not overridden by the interests, fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR is the legal basis for the processing.

3 Deletion of data and storage period

The personal data of the data subject will be deleted or locked once the purpose for which they have been stored ceases to apply. Personal data may be stored for a longer period if provided for by European or national legislators in EU regulations, laws or other rules to which the controller is subject. The data will also be locked or deleted once a storage period specified in the above-mentioned rules has expired, unless further retention of the data is necessary to enter into or fulfill a contract.

Name and address of the person responsible

The responsible authority in terms of the General Data Protection Regulation and other national data protection legislation is the:

Hochschule Anhalt
represented by the President,
Bernburger Straße 55
06366 Köthen
Germany
Email: marketing@hs-anhalt.de

Name and address of Data Protection Officer

Hochschule Anhalt
Datenschutzbeauftragter
Bernburger Straße 55
06366 Köthen
Germany
Email: dsb@hs-anhalt.de

Website provision and the generation of log files

1 Description and the scope the processing of data

Every time our website is accessed, Anhalt University of Applied Science’s system automatically collects data and information from the computer system of the user's computer.

During this process, the following data are collected:

  1. Information on the browser and version used
  2. The user's operating system
  3. The user’s Internet service provider
  4. The user’s IP address
  5. Date and time of access
  6. The websites from where the user's system accesses our website
  7. Websites that are called up by the user's system via our website
  8. The access status/HTTP status code
  9. The amount of data transmitted in each case
  10. Other similar data and information - with regard to the security of our information technology systems

The data are also stored in our system’s log files. These data are not stored together with any of the user’s other personal data.

2 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA.

3 The purpose of data processing

The temporary storage of a user’s IP address through the system is necessary in order to deliver the website to the user's computer. Therefore, the user's IP address must be stored for the duration of the session.

Log files are stored to ensure the functionality of the website. In addition, the data are used for the purpose of optimizing the website and ensuring the security of our information technology systems. The data are not evaluated for marketing purposes in this context.

4 Duration of storage

The data will be deleted as soon as they are no longer needed to achieve the purpose of their collection. In the case of collecting of data to provide a website, the data are deleted when the respective session has ended.

In the case of data storage in the log files, the data are deleted after seven days at the latest. Storage exceeding this is possible. In this case, the user’s IP addresses are deleted or alienated so that the user’s computer can no longer be identified.

5 Possibility of objection and removal

The collection of data for providing the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, it is not possible for the user to object. 

Use of essential and analysis cookies

1 Description and the scope the processing of data

Our website uses cookies. Cookies are text files that are saved in the user’s web browser or stored by the web browser on the user's computer system. When a user visits a website, a cookie may be stored in the user's operating system. These cookies contain a specific string of characters that enables a unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the user’s web browser can be identified even after leaving a webpage.

The following data are stored and transmitted in the cookies:

  1. Language settings
  2. Log-in information
  3. Settings for analysis cookies

We also use cookies on our website which allow an analysis of the users’ surfing behavior. We use the Google Analytics service for this purpose. The provider is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

The information generated by the cookies on your use of this website is usually transferred to a Google server in the USA and stored there.

Setting the cookie enables Google to analyze the use of our website. Each time you visit one of the individual pages of this website, the web browser on your end device is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Under this technical procedure, Google receives personal information, such as the data subject’s IP address. This is used by Google, among other things, to trace the origin of the users and the clicks and thus enable the generation of subsequent commission settlements. The personal data are stored by Google in the USA. Google may disclose these personal data, which were collected through the technical procedure, to third parties.

We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. Using this addition, the IP address of the data subject’s Internet connection is truncated and anonymized by Google, every time our website is accessed from a Member State of the European Union or from any other signatory country to the Agreement on the European Economic Area.

In addition to the standard functions, this website also uses the Google Analytics advertising functions. The Google Analytics advertising features implemented on this website include Google Analytics reports on performance by demographic characteristics and interests. We use first-party cookies (e.g., Google Analytics cookies) and third-party cookies (e.g., DoubleClick cookies) together to analyze in an anonymous and aggregated form which demographic characteristics and interests visitors to our website typically exhibit. We use this information to improve our web content.

When accessing our website, users are informed by an info banner about the use of cookies for analysis purposes and are referred to this data protection declaration. These cookies are only set after the user has given their consent.

2 Legal basis for data processing

 

Unless otherwise stated, the processing of personal data is carried out within the scope of our public duties (Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA) for the purposes of effective information and interaction with users.

The legal basis for the processing of the data is Article 6(1)(a) GDPR if users have given their consent.

For those exceptional cases in which personal data are transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

 

3 Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:

  1. Transfer of language settings
  2. Memorizing search terms
  3. Remember tracking settings

The user data collected through technically necessary cookies is not used to create user profiles.

The analysis cookies and the Google Analytics service are used to improve the quality of our website and its contents. The analysis cookies provide us with information on how the website is used and thus allow us to constantly improve its content.

4 Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site. For this reason, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies have been deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

After entering the website, the user is asked whether analysis cookies may be stored. These cookies are only stored after the user's consent. This way, another cookie is set on your system signaling our system which settings have been made. The settings made can be viewed and changed at any time via the navigation point "Cookie settings".

For more information on how user data are handled, please refer to Google's Terms of Use: http://www.google.com/analytics/terms/de.html, the Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

The data are deleted as soon as they are no longer required for our recording purposes. For analysis cookies this is the case after 14 months at the latest.

Contact forms and e-mail contact

1 Description and the scope the processing of data

There are contact forms on our website which can be used for electronically contacting Anhalt University of Applied Sciences. Should a user make use of this feature, the data entered in the form is transmitted to us and stored.

These data may be collected:

  1. Family name
  2. Email address
  3. Phone number
  4. Address
  5. Reason for contacting us

At the time the message is sent, the following data are also stored:

  1. The user’s IP address
  2. Date and time of transmission

The user's consent for the processing of data is obtained in the transmission process, and reference is made to this data protection regulation.

Alternatively, the user can contact us via the email address provided. In this case the personal data of the user transmitted with the e-mail will be stored.

These data are not shared with third parties in this context. The data will be used exclusively to process the conversation.

2 Legal basis for the data processing

The legal basis for the processing of the data is Article 6(1)(a) GDPR if users have given their consent.

The legal basis for the processing of data transmitted in the course of sending an email is Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA. If the email contact aims at concluding a contract, an additional legal basis for the processing is Article 6(1)(b).

3 The purpose of data processing

The personal data entered in the input form are processed solely for the purpose of processing the user's request. In the case of the user contacting us by email, this also constitutes a required legitimate interest in the processing of the data.

The other personal data processed during the transmission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4 Duration of storage

The data will be deleted as soon as they are no longer needed to achieve the purpose of their collection. In the case of personal data entered into the input mask of the contact form and those sent by email, the data will be deleted when the respective conversation with the user has ended. The conversation ends when it can be concluded from the information provided that the subject matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5 Possibility of objection and removal

The user has the opportunity to revoke their consent to the processing of their personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case the conversation cannot be continued.

To exercise these rights, please contact us by email at betroffenenrechte(at)hs-anhalt.de.

In this case, all of the user’s personal data stored in the course of the contact will be deleted.

Advertising measures with Google AdWords and Google Remarketing

1 Scope of the processing of personal data

We use Google AdWords to place internet advertising in the Google search engine and the Google advertising network. The provider is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdWords allows us to define keywords, which enable the display of advertising in the search engine for users’ keyword-specific search queries. Through automatic algorithms and the defined keywords, advertising can also be displayed on topic-relevant websites in the Google advertising network. If a user navigates to our website by clicking on an advertisement, Google will store a conversion cookie on the user’s device but this cookie is not used to identify the user.

We also use the AdWords function Google Remarketing, which enables us to display advertising to users who have previously visited our website.

This enables us to deliver user-related and interest-relevant advertising to the data subject.

1 Legal basis for the processing of personal data

 

For those exceptional cases in which personal data are transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google AdWords and Google Remarketing is Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA.

 

2 Purpose of data processing

We use Google AdWords and Google Remarketing to advertise our website through interest-relevant advertising in the Google search engine and on the websites of third parties.

3 Duration of storage

The data are deleted as soon as they are no longer required for our recording purposes.

A conversion cookie loses its validity after a maximum of 90 days.

4 Possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site. For this reason, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies have been deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

For more information on how user data are handled, please refer to Google's Terms of Use: http://www.google.com/analytics/terms/de.html, the Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

Integration of external services and third-party content

On our website we use third-party content or service providers for the purpose of incorporating their content and services. The processing of personal data by integrating them is based on Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA. The legal basis for the processing of the data is Article 6(1)(a) GDPR if the user has given their consent.

Technically, integration of content requires third party providers to have access to the following data of the website users: IP address of the device with which the website is accessed.Date and time of access Anhalt University of Applied Sciences endeavors to include only the content of third-party providers who use the data collected solely for the purpose of delivering the content. In addition, third party providers may collect further personal data (e.g. via invisible pixel tags) for statistical or marketing purposes and cookies may be stored on the user's end device. The following gives a detailed list of the external services and third-party content used on our website as well as the way personal data are processed.

  • Google Maps

    On this website geographical information is displayed for purposes of contacting and visiting Anhalt University. These are based on the Google Maps API as provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland . By using the map service, it is possible for Google to detect your IP address as well the language and other settings of your Web browser.The geographical locations requested from within the Navigator menu are directly transmitted to the service. When the site is accessed with a GPS-capable device, the geographical location of the user may be transmitted as well. Google is not provided with any other personal data.

    Google uses cookies. Information on the processing of data and its purposes are available and can be requested at at Google (https://policies.google.com/privacy). Google Maps is used to enable the quick location of places mentioned on the web pages.

    The legal basis for the integration of the service and the associated data transfer to Google is Article 6(1)(a) GDPR.

    By integrating the service, we are able to provide our users with geographical information for contact and travel purposes on this website . The integration of Google Maps serves as an orientation aid for visitors and thus increases user-friendliness.

    The integration of Google Maps does not lead to the collection of personal data by us.

    Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

    .Cookies are stored on the user's computer and transmitted to Google by the user. For this reason, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies have been deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

    To prevent Google Maps from running, you can disable JavaScript in your browser settings or install a JavaScript blocker (e . g.http://www.noscript.net). In this case, however, you will not be able to use our website, or only to a limited extent.

    For more information about Google's privacy settings, please see the following link: https://policies.google.com/privacy.

  • YouTube-Videos

    We have integrated YouTube videos into our online services. These videos are stored at www.youtube.com and can be played directly from our website. These videos are basically integrated in "extended privacy mode", which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on the transmission of these data.

    When you visit the website, YouTube receives information that you have visited the appropriate subpage of our website. In addition, the data mentioned under section 3 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged into or whether no user account exists. If you are logged in to Google, your data are directly linked with your account. If you do not wish YouTube to link the data collected via our website to your YouTube account, please log out of your YouTube account before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide advertising tailored to your needs and to inform other users of the social network about your activities on our website. This also results in establishing a connection to the Google DoubleClick network. You have a right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

    For more information about the purpose and extent of data collection and processing by YouTube, please see Google's privacy policy. This privacy policy will also provide you with further information on your rights and setting options to protect your privacy: policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, 

    https://www.privacyshield.gov/EU-US-Framework.
  • Google Fonts

    External fonts are integrated on this website. The web fonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and are implemented by a server call, usually a Google server in the USA. The transmission allows Google to determine the website visited, your IP address and the system language, as well as a variety of browser-specific information. For further information on the handling of user data see Google: (https://policies.google.com/privacy).

Newsletter

1 Description and the scope the processing of data

Our website gives you the opportunity to subscribe free-of-charge to newsletters. When registering for the newsletter, the data entered into the input mask is transmitted to us.

As a minimum, this includes the email address of the data subject. For legal reasons, using the double opt-in procedure, data subjects will be sent a confirmation email to the e-mail address provided. This serves to verify the authorization to receive the newsletter.

Depending on which newsletter you have subscribed to, further personal data may be collected, which you will independently enter into the input mask and are thereby informed about the collection.

In addition, the following data are collected during registration:

  1. IP address of the user’s computer
  2. Date and time of registration

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this data protection declaration.

Data processed for the dispatch of newsletters will not be passed on to third parties. The data will be used exclusively for sending the newsletter.

2 Legal basis for data processing

The legal basis for the processing a user’s data after registering for a newsletter and providing consent is Article 6(1)(a) GDPR.

3 The purpose of data processing

The user's email address is collected in order to send the newsletter.

The collection of other personal data during the registration process serves to prevent the misuse of the services or of the email address used.

4 Duration of storage

The data will be deleted as soon as they are no longer needed to achieve the purpose of their collection. The user's e-mail address is ,therefore, stored as long as the subscription to the newsletter is active.

The other personal data collected during the registration process are usually deleted after a period of seven days.

5 Possibility of objection and removal

The user may cancel their subscription to the newsletter at any time. For this purpose, every newsletter contains a link.

This also makes it possible to revoke the consent to store personal data collected during the registration process.

6 Newsletter tracking

Anhalt University of Applied Sciences’ newsletters contain so-called tracking pixels. Tracking pixels are thumbnail images embedded in emails which are transmitted in HTML format allowing log files to be created and analyzed. They enable statistical evaluation of successes or failures of online marketing campaigns. On the basis of the embedded tracking pixel, Anhalt University of Applied Sciences can establish if and when a data subject has opened an email and which links contained in the email the data subject has used.

Personal data collected via the tracking pixels contained in newsletters is stored and analyzed by the controller. This is done to optimize the newsletter service and to adapt the content of future newsletters to better match the interests of the data subject. This personal data will not be disclosed to third parties. A data subject may revoke their consent, which was given via the double-opt in procedure, to this data collection procedure, at any time. After the consent has been withdrawn, the controller will delete this personal data. Unsubscribing from receiving the newsletter is automatically regarded as a revokal of consent by Anhalt University of Applied Sciences.

7 Mailchimp Newsletter

For various newsletters we use the newsletter dispatch platform "Mailchimp". The supplier of Mailchimp is Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The newsletters using this service contain a specific reference.

When using Mailchimp, a recipient’s personal data is stored on the provider’s servers in the USA. This data are used for sending and evaluating the newsletter on our behalf. Mailchimp may also use the data to optimize or improve its services. The data of the data subject will not be used to contact them or to pass on their email addresses to third parties. Rather, the access metadata (operating system, browser, access time, IP address, language setting) is used to improve the service technically and economically. The newsletters sent by Mailchimp also use tracking pixels, which in this case, however, are retrieved by servers of the service provider.

The service provider is committed to protecting the data of the data subject, to processing it in accordance with the data protection provisions of the service and to not passing these data on to third parties. Further information about the processing of your personal data can be found in the privacy policy of Mailchimp: https://mailchimp.com/legal/privacy.

Video conferences, online meetings, webinars and screen sharing

1 Description and the scope the processing of data

Anhalt University of Applied Sciences uses its own platforms and applications, as well as services of other providers ("third party providers"), to conduct video and audio conferences, webinars and other types of video and audio meetings. When selecting third party providers and their services, we observe the legal requirements.

In this context, data of communication participants will be processed and stored on Anhalt University’s or third-party providers’ servers, as long as they are part of communication processes that involve Anhalt University of Applied Sciences. Such data may include, in particular, registration and contact data, visual and vocal contributions, as well as entries in chats and shared screen content.

If users are referred to platforms and applications of Anhalt University of Applied Sciences or third parties during the course of communication, business or other relations with us, usage data and metadata may be processed for security, service optimization or marketing purposes. We consequently ask you to observe the data protection information of the respective service used.

2 Legal basis for data processing

If we ask the data subjects for their consent to use third-party providers or certain functions (e.g. consent to the recording of conversations), the consent forms the legal basis for the processing (Article 6(1)(a) GDPR). Furthermore, their use can be a component of our pre-contractual services (Article 6(1)(b) GDPR). Other than that, user data are processed on the basis of our public responsibilities (Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA). In this context, we would also like to refer you to the information on the use of cookies in this data protection policy.

3 Purpose of data processing

Implementation of online courses, provision of infrastructure for online learning groups, contractual services and service, contact requests and communication, office and organizational procedures, direct marketing (e.g. by email or post).

3 Data types processed

  • Inventory data (e.g. names, addresses)
  • Contact details (e.g. email, telephone numbers)
  • Content data (e.g. text entries, photographs, videos)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

4 Data subjects

  • Students
  • Teaching staff
  • Employees
  • Communication partners
  • Users (e.g. website visitors, users of online services)

5 Services of the Anhalt University of Applied Sciences or the German Research Network (Deutsches Forschungsnetz)

  • DFNconf

    DFNconf: Conference service in the German Research Network by the Association for the Promotion of a German Research Network (Verein zur Förderung eines Deutschen Forschungsnetzes e.V.), Alexanderplatz 1, 10178 Berlin.


  • Jitsi Meet

    Jitsi Meet: Video conference service of Anhalt University of Applied Sciences based on Jitsi technology (https://www.jitsi.org). During use, personal data are transferred to servers at Anhalt University of Applied Sciences. In the interest of data economy, we process our users’ personal data only to the extent necessary to run Jitsi Meet and to ensure its functionality.

    • When Jitsi Meet is accessed, the log files are stored for seven days and subsequently deleted. In the event of an attack on the website and for reasons of obtaining and securing evidence, the above-mentioned data could be excluded from deletion until any possible illegal activities have been resolved.
    • In keeping with the function of Jitsi Meet, video and audio data and, when using the built-in chat function, textual information is transmitted to the respective other users participating in the same conference. Accordingly, users' personal data are only collected for the duration of using Jitsi Meet. This personal data are not stored on the server.

6 Third party services used

Applications and application procedures

We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means, particularly in cases where an applicant submits their application documents to the controller by electronic means, such as via email or by using an online form.

Where the controller enters into a contract of employment with an applicant, the transmitted data shall be stored for the purpose of administering the employment relationship and in line with the relevant legal provisions.

If Anhalt University of Applied Sciences does not enter into a contract of employment with the applicant and provided that there are no other legitimate interests of the university against deletion, the application documents will be automatically deleted three months after the applicant was notified of the decision. Other legitimate interest in this context may be burden of proof in proceedings under the General Act on Equal Treatment (AGG).

Events: Registrations, participant lists and image recording

1 Description and the scope the processing of data

 

a) Registration

On our website you may register for workshops, conferences and other events by filling in a form. Should a user make use of this feature, the data entered in the form are transmitted to us and stored by us.

These data may be collected:

  1. Family name
  2. Email address
  3. Phone number
  4. Address

At the time the registration is sent, the following data are also stored:

  1. The user’s IP address
  2. Date and time of transmission

The user's consent for the processing of data is obtained in the transmission process, and reference is made to this data protection regulation.

Alternatively, registration is possible using the email addresses provided. In this case, the personal data of the user transmitted with the email will be stored.

These data are not shared with third parties in this context. The data will be used exclusively to process the conversation.

b) Participant lists

For verification and accounting purposes, we are required to document events with participant lists. Such lists generally contain the following data:

  1. Family name
  2. Institution
  3. Signature

The participant lists can also be made available to the participants of the event. If you do not wish for your personal data to be made available, let us know this when registering for the event.

c) Image recording

Please be aware that we take photos and, if necessary, video recordings to document the events. Provided that the images/recordings meet the requirements of § 23 German Art Copyright Act (KUG), we reserve the right to publish individual images/recordings on our website, in the social media or other publications of Anhalt University. If you do not wish to be photographed or the photographs to be published, please let us know prior to the event.

2  Purposes and legal bases of data processing

Unless otherwise stated, your personal data will be processed within the scope of our public responsibilities (Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA). Regarding the publication of recordings, §§ 22, 23 German Art Copyright Act (KUG) are also applicable.

The legal basis for the processing of the data is Article 6(1)(a) GDPR if users have given their consent.

If the email contact has the purpose of concluding a contract, the legal basis for the processing is Article 6(1)(b) GDPR.

3 Recipient

Unless otherwise regulated, we will not specifically pass on your data. However, be aware that in the event of photos published on the website or social media, the data can be accessed worldwide.

Lists of participants can be passed on to third-party funding bodies. Funding from third parties: Landesverwaltungsamt Sachsen-Anhalt, Dessauer Straße 70, 06118 Halle (Saale)

4 Duration of storage

Anhalt University will process and store your data only for the time required to fulfil the purpose of the storage, or when this is mandated by European laws or regulations or laws and regulations of other legislators to which the controller is subject.

The additional personal data collected during the transmission process will be deleted after a period of seven days at the latest.

5 Possibility of objection and removal

The user has the opportunity to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case the conversation cannot be continued.

To exercise these rights, please contact us by email at betroffenenrechte(at)hs-anhalt.de.

In this case, all of the user’s personal data stored in the course of the contact will be deleted.

Social media appearances

1  Description and scope of data processing

Anhalt University of Applied Sciences maintains social media appearances to interact with the users active on these platforms and to inform them about our university.

This may involve user data being processed outside the territory of the European Union and may entail risks for users, such as the enforcement of data subjects' rights. We advise service providers certified under the Privacy Shield that they are committed to comply with EU data protection standards.

The processing of users' personal data is regularly carried out for market research and advertising purposes. The platform operators can create user profiles which are used for the distribution of individualized advertising measures within and outside the platform. This is essentially implemented by storing cookies on the user's end devices. In addition, the data may also be stored outside the device used by users.

2 Legal basis for data processing

Unless otherwise stated, the processing of personal data is carried out within the scope of our public duties (Article 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA) for the purposes of effective information and interaction with users.

The legal basis for the processing of the data is Article 6(1)(a) GDPR if users have given their consent. Such consents can be requested from the respective service provider to the user.

Purpose of processing, duration of storage, possibility of objection and removal

Reasons for the relevant processing of personal data, the duration of their storage, the possibilities of objecting to the processing are to be considered individually depending on the provider and are subject to continuous adjustments made by the providers.

This information can be viewed in detail at the respective service provider and is linked below.

The service providers are those that can most effectively process requests for information and the enforcement of user rights, since only the providers have access to the user data and can take appropriate measures and provide information. If required, we will support you with your request.

  • Facebook/Instagram

    We use the technical platforms and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information services offered.

    We would like to inform you that any usage of our Facebook and Instagram pages and their functions is entirely your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information offered via these pages on our website.

    When visiting our Facebook or Instagram pages, Facebook records your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the pages, with statistical information about the use of the pages. Facebook provides more information on this at the following link: http://de-de.facebook.com/help/pages/insights

    The data collected about you in this context will be processed by Facebook Ltd. and may be transferred to countries outside the European Union. The information Facebook receives and how this is used is described in general terms in Facebook's data use guidelines. These guidelines also provide you with information on how to contact Facebook and how to set up ads.

    In what way Facebook uses the data from visits to Facebook an Instagram pages for its own purposes, to what extent activities on a Facebook or Instagram page are assigned to individual users, how long Facebook stores these data and whether data from a visit to a page is passed on to third-parties is not conclusively and clearly by Facebook and is not known to us.

    When you access a Facebook or Instagram page, the IP address assigned to your device is transmitted to Facebook. According to Facebook information, this IP address is anonymized (for "German" IP addresses). Facebook also stores information about the devices of its users (e.g. as part of the "login notification" function); Facebook may thus be able to assign IP addresses to individual users.

    While logged on to Facebook or Instagram as a user, a cookie containing your user ID is located on your device. This enables Facebook to track your visit to this page and how you have used it.

    This also applies to all other Facebook or Instagram pages. Via buttons integrated into websites, Facebook is able to record your visits to these websites and link them to your profile. This data can be used to offer content or advertising tailored to your needs. If you wish to avoid this, you should log out of the services or deactivate the "stay logged in" function, delete the cookies present on your device, close and restart your browser. This is how Facebook information that can directly identify you can be deleted. This allows you to use our Facebook and Instagram pages without revealing your user ID. When accessing interactive features of the pages (Like, Comment, Share, News, etc.), a login screen of the service appears. Once you have logged in Facebook will again be able to recognize you as a distinct user. For information on how to manage or delete existing information about yourself, visit the following Facebook support pages: https://de-de.facebook.com/about/privacy

    As the provider of the information services, we do not collect or process any other data generated by your use of our services.

     

    Further Information

  • Google/YouTube

    (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

  • LinkedIn

    (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

  • Twitter

    (Twitter International Company, Attn: Data Protection Officer, 1 Cumberland Place, Fenian Street, Dublin 2, Ireland)

  • WhatsApp

    (WhatsApp Ireland Limited , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Rights of the data subject

If your personal data are being processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

  • Right to access in accordance with Art. 15 GDPR: You have the right to request information as to whether or not we are processing personal data concerning you.
  • Right to rectification according to Art. 16 GDPR: You have the right to obtain the rectification and/or completion of inaccurate or incomplete personal data concerning you.
  • Right to erasure in accordance with Art. 17 GDPR: You have the right to request that the controller delete your personal data without undue delay, e.g. if the data are no longer necessary for the purposes for which they were collected or if they are processed unlawfully.
  • Right to object according to Art. 21 GDPR: On the grounds relating to your particular situation, you have the right to object to the processing of your personal data at any time,
  • Right to lodge a complaint according to Art. 77 GDPR: You have the right to lodge a complaint with the Saxony-Anhalt State Commissioner for Data Protection (Landesbeauftragter für den Datenschutz Sachsen-Anhalt) if you believe that the processing of your personal data violates the GDPR.

To assert your rights under Art. 15 - 21 GDPR, please contact betroffenenrechte(at)hs-anhalt.de or the postal address given above.