Thank you for your interest in our organization. Data protection is of particular importance to Anhalt University of Applied Sciences.
1. Scope of processing of personal data
We generally only process our users' personal data to the extent necessary to fulfill our tasks, in particular to provide a functional website and our content and services. Furthermore, the processing of our users' personal data generally only occurs with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
If we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. If personal data is necessary to fulfil a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If the processing of personal data is necessary to fulfil a legal obligation to which the university is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or of another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis. If the processing of personal data is in the public interest or for the performance of our sovereign tasks, Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which they were stored no longer applies. Storage may also occur if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.
Name and address of the person responsible
The controller within the meaning of the General Data Protection Regulation and other national data protection laws is:
Anhalt University of Applied Sciences
Represented by the President
Bernburger Straße 55
06366 Köthen
Germany
Email: marketing(at)hs-anhalt.de
Name and address of the data protection officer
Anhalt University of Applied
Sciences Data Protection Officer
Bernburger Straße 55
06366 Köthen
Germany
Email: dsb(at)hs-anhalt.de
The data protection officer is the contact person for all data subjects with any issues related to the handling of personal data. Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
- Right to information according to Art. 15 GDPR: You have the right to request information as to whether personal data concerning you is being processed.
- Right to rectification according to Art. 16 GDPR: You have the right to rectification or completion if personal data concerning you is incorrect or incomplete.
- Right to erasure pursuant to Art. 17 GDPR: You can request that the controller immediately erase personal data concerning you, including if the data is no longer necessary to fulfil the purpose or if the processing is unlawful.
- Right of objection according to Art. 21 GDPR: You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
- Right to lodge a complaint pursuant to Art. 77 GDPR: You have the right to lodge a complaint with the State Commissioner for Data Protection of Saxony-Anhalt if you believe that the processing of personal data concerning you violates the GDPR.
To assert your rights under Articles 15 - 21 GDPR, please contact Betroffenenrechte@hs-anhalt.de or the postal address provided above.
Data breach
Have you identified any breaches of personal data?
Information about the university website hs-anhalt.de
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
- The access status/HTTP status code
- The amount of data transferred
- Other similar data and information to protect our information technology systems
The data is also stored in our system's log files. This data is not stored together with other personal user data.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. Furthermore, we use the data to optimize the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session ends.
If the data is stored in log files, this will be the case after seven days at the latest. Longer storage is possible. In this case, the users' IP addresses will be deleted or distorted, making it impossible to identify the accessing client.
5. Possibility of objection and removal
The collection of data to provide the website and the storage of data in log files are essential for the operation of the website. Therefore, the user has no right to object.
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. These cookies contain a characteristic string that allows the browser to be uniquely identified when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after changing pages.
The following data is stored and transmitted in the cookies:
- Language settings
- Log-in information
- Settings for analysis cookies
We also use cookies on our website that enable us to analyze user browsing behavior. For this purpose, we use Google Analytics, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
By setting the cookie, Google is enabled to analyze the use of our website. Whenever one of the individual pages of this website is accessed, the Internet browser on your device is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google receives knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements. The personal data is stored by Google in the USA. Google may pass this personal data collected via the technical procedure on to third parties.
We use the "_gat._anonymizeIp" add-on for web analysis via Google Analytics. This add-on shortens and anonymizes the IP address of the data subject's internet connection if our website is accessed from a member state of the European Union or another state party to the Agreement on the European Economic Area.
In addition to standard features, this website also uses Google Analytics Advertising Features. The Google Analytics Advertising Features implemented on this website include Google Analytics Demographic and Interest Reporting. We use first-party cookies (e.g., Google Analytics cookies) and third-party cookies (e.g., DoubleClick cookies) together to anonymously and aggregately evaluate the demographic characteristics and interests of our website visitors. We use this information to improve our web offerings.
When visiting our website, users are informed about the use of cookies for analysis purposes via an information banner and referred to this privacy policy. These cookies are only set after the user has given their consent.
2. Legal basis for data processing
Unless otherwise stated, personal data is processed within the scope of our public duties (Art. 6 Para. 1 lit. e GDPR in conjunction with Sections 4-9 DSAG LSA) for effective information and interaction with users.
The legal basis for the processing of data is Art. 6 (1) (a) GDPR if the user has given his consent.
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Framework, www.dataprivacyframework.gov/list .
3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These require that the browser be recognized even after changing pages.
We need cookies for the following applications:
- Adoption of language settings
- Remembering search terms
- Remembering tracking settings
The user data collected through technically necessary cookies is not used to create user profiles.
We use analytics cookies and the Google Analytics service to improve the quality of our website and its content. These analytics cookies allow us to learn how the website is used and thus continuously optimize our offering.
4. Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted from there to our website. Therefore, you, as the user, have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, you may no longer be able to fully use all of the website's functions.
After entering the website, the user is asked whether analysis cookies may be stored. These cookies are only stored after the user has given their consent. This creates an additional cookie on your system that signals to our system which settings have been configured. The settings can be viewed and changed at any time via the Cookie Settings navigation item.
Further information on how user data is handled can be found in Google's terms of use: http://www.google.com/analytics/terms/de.html , the data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html , and the data protection declaration: http://www.google.de/intl/de/policies/privacy .
The data will be deleted as soon as it is no longer needed for our recording purposes. For analysis cookies, this is the case after 14 months at the latest.
1. Description and scope of data processing
Our website contains contact forms that can be used for electronic contact. If a user uses this option, the data entered in the input form will be transmitted to us and stored.
This data can be collected, for example:
- Name
- Email Address
- Telephone number
- Address
- Reason for contact
At the time the message is sent, the following data is also stored:
- The user's IP address
- Date and time of transmission
Your consent to the processing of the data will be obtained during the sending process and reference will be made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data will not be shared with third parties. The data will be used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for the processing of data is Art. 6 (1) (a) GDPR if the user has given his consent.
The legal basis for processing data transmitted when sending an email is Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
3. Purpose of data processing
The processing of personal data from the input form serves solely to process the contact. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input mask and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Possibility of objection and removal
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
To exercise these rights, please contact us by email at Betroffenenrechte@hs-anhalt.de .
In this case, all personal data stored during the contact process will be deleted.
1. Scope of processing of personal data
We use Google AdWords to place online advertising in the Google search engine and the Google advertising network. The provider is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
With Google AdWords, we can define keywords that enable ads to be displayed in the search engine for users' keyword-specific searches. Using automatic algorithms and the defined keywords, ads can also be displayed on topic-relevant websites in the Google advertising network. If a data subject navigates to our website by clicking on an advertisement, Google stores a conversion cookie on that person's device, which is not used to identify the person.
We also use the AdWords function Google Remarketing, which allows us to display advertisements to users who have previously visited our website.
This enables us to deliver user-related and interest-relevant advertising to the data subject.
2. Legal basis for the processing of personal data
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Framework, www.dataprivacyframework.gov/list . The legal basis for the use of Google AdWords and Google Remarketing is Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA.
3. Purpose of data processing
We use Google AdWords and Google Remarketing to promote our website through interest-relevant advertising in the Google search engine and on third-party websites.
4. Duration of storage
The data will be deleted as soon as it is no longer required for our recording purposes.
A conversion cookie expires after a maximum of 90 days.
5. Possibility of objection and removal
Cookies are stored on the user's computer and transmitted from there to our website. Therefore, you, as the user, have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, you may no longer be able to fully use all of the website's functions.
Further information on how user data is handled can be found in Google's terms of use: http://www.google.com/analytics/terms/de.html , the data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html , and the data protection declaration: http://www.google.de/intl/de/policies/privacy .
1. Description and scope of data processing
On our website, you can subscribe to our free newsletter. When you register for the newsletter, the data you provide in the form will be transmitted to us.
In a minimum, this concerns the email address of the data subject. For legal reasons, data subjects will receive a confirmation email using the double opt-in procedure to the specified email address. This serves to verify authorization to receive the newsletter.
Depending on the newsletter received, further personal data may be collected, which the data subjects enter independently into the input mask and are thus informed about the collection.
In addition, the following data is collected during registration:
- IP address of the accessing computer
- Date and time of registration
Your consent to the processing of your data will be obtained during the registration process and reference will be made to this privacy policy.
In connection with data processing for sending newsletters, no data will be passed on to third parties. The data will be used exclusively for sending the newsletter.
2. Legal basis for data processing
The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 (1) (a) GDPR if the user has given his or her consent.
3. Purpose of data processing
The purpose of collecting the user’s email address is to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address will therefore be stored as long as the newsletter subscription is active.
The other personal data collected during the registration process will generally be deleted after a period of seven days.
5. Possibility of objection and removal
The affected user can cancel their newsletter subscription at any time. A corresponding link is provided in each newsletter for this purpose.
This also allows you to revoke your consent to the storage of personal data collected during the registration process.
6. Newsletter-Tracking
The Anhalt University of Applied Sciences' newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows for statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixel, Anhalt University of Applied Sciences can determine whether and when an email was opened by a data subject and which links in the email were accessed by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the controller in order to optimize newsletter delivery and to better tailor the content of future newsletters to the interests of the data subject. This personal data will not be passed on to third parties. Data subjects are entitled to revoke the separate declaration of consent given via the double opt-in procedure at any time. After revocation, this personal data will be deleted by the controller. Anhalt University of Applied Sciences automatically interprets unsubscribing from the newsletter as a revocation.
7. Mailchimp-Newsletter
We use the newsletter distribution platform "Mailchimp" for various newsletters. The provider of Mailchimp is Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The use of this service is explicitly marked in these newsletters.
When using Mailchimp, recipients' personal data is stored on the provider's servers in the USA. This data is used to send and evaluate the newsletter on our behalf. Mailchimp may also use the data to optimize or improve its services. The data of the data subjects will not be used to contact them or to pass on their email addresses to third parties. Instead, the access metadata (operating system, browser, access time, IP address, language setting) is used to technically and economically optimize the service. The newsletters sent by Mailchimp also use tracking pixels, which in this case, however, are retrieved from the service provider's servers.
The service provider is committed to protecting the data of those affected, processing it in accordance with the service's privacy policy, and not sharing it with third parties. Further information on the processing of your personal data can be found in Mailchimp's privacy policy: https://mailchimp.com/legal/privacy
The service provider (The Rocket Science Group LLC d/b/a Mailchimp Intuit Inc.) has submitted to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/list).
We use content or service offerings from third-party providers on our website to integrate their content and services. The processing of personal data through the integration of these is based on Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 of the DSAG LSA (German Data Protection Act). The legal basis for the processing of data is Art. 6 (1) (a) GDPR, provided the user has given their consent.
For the technical implementation of the integration, it is necessary that the third-party providers collect at least the following data from the site users:
- IP address of the calling device
- Date and time of access
Anhalt University of Applied Sciences strives to only integrate content from third-party providers who use the collected data solely to deliver the content. Furthermore, third-party providers may collect additional personal data (e.g., via invisible pixel tags) for statistical or marketing purposes and store cookies on users' devices. The external services and third-party content used on our website and how they process personal data are presented in detail below.
Google Maps
This website displays geographical information for contact and directions purposes. This information is based on the Google Maps API, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access the map service, Google can determine your IP address and the system language, as well as various browser-specific information. The requested geographical positions are transmitted directly to the service from the browser menu. When you access the page with a GPS-enabled device, the location can also be transmitted. No other personal data is transferred to Google.
Google uses cookies. The data processing procedures and the purposes of the processing can be requested and viewed directly from Google (https://policies.google.com/privacy). Google Maps is used to ensure that the locations mentioned on the website can be quickly found.
The legal basis for the integration of the service and the associated data transfer to Google is Art. 6 (1) (a) GDPR.
By integrating this service, we are able to provide our users with geographical information for contact and directions purposes on this website. The integration of Google Maps serves as an orientation aid for visitors and thus increases user-friendliness.
By integrating Google Maps, we do not collect any personal data.
Google processes your data in the USA and has submitted to the EU-US Privacy Framework (https://www.dataprivacyframework.gov/list).
Cookies are stored on the user's computer and transmitted from there to Google. Therefore, you as the user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, you may no longer be able to fully use all of the website's functions.
To prevent Google Maps from running, you can deactivate JavaScript in your browser settings or install a JavaScript blocker (e.g., http://www.noscript.net ). However, in this case, you will not be able to use our website, or only to a limited extent.
For more information about Google's privacy settings, please visit the following link: https://policies.google.com/privacy .
YouTube-Videos
We have integrated YouTube videos into our online offering. These videos are stored on www.youtube.com and can be played directly from our website. These are generally integrated in "extended data protection mode," meaning that no data about you as a user is transferred to YouTube if you do not play the videos. The data mentioned in paragraph 2 is only transferred when you play the videos. We have no influence over this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified under 3. of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your YouTube profile, you must log out before activating the button. YouTube saves your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. This also leads to a connection being established with the Google DoubleClick network. You have the right to object to the creation of these user profiles; to exercise this right you must contact YouTube.
Further information on the purpose and scope of data collection and processing by YouTube can be found in Google's privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: policies.google.com/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Framework (https://www.dataprivacyframework.gov/list).
We offer a chatbot for study advice on this website. For this purpose, we use moin.ai from knowhere GmbH (Steinhöft 9, 20459 Hamburg). To the extent that knowhere GmbH has access to personal data, it acts as a processor for us. If a user uses this study advice, the data entered into the chat is transmitted to the service provider and processed.
knowhere GmbH, in turn, uses the services of various subcontractors to provide its services. Further information about knowhere GmbH's subcontractors can be found at https://www.moin.ai/subunternehmer . The chatbot used here does not use Google Dialogflow technology.
The legal basis for the processing of data that is processed in the course of using the chat is Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA.
We process the personal data from the chat history to process contact requests for information about studying at our university and to improve the service. This also includes fulfilling our public duties. The other personal data processed during chat use also serves to improve the service. Furthermore, this metadata helps us prevent misuse of the service and ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the chat conversation, this is 365 days after the end of the respective conversation with the user. The additional personal data collected during the sending process will be pseudonymized or anonymized immediately after transmission and then also stored for up to 365 days for further processing.
Further information on data processing and your options for restricting the processing operations concerning you can be found in the data protection declaration of knowhere GmbH at https://www.iubenda.com/privacy-policy/59451072 .
Information on digital services at Anhalt University of Applied Sciences
1. Description and scope of data processing
The Anhalt University of Applied Sciences maintains a presence on social media in order to interact with users active there and to inform them about our university.
User data may be processed outside the European Union, which can pose risks for users, such as the enforcement of data subject rights. We point out that service providers certified under the Privacy Shield are committed to complying with EU data protection standards.
Users' personal data is regularly processed for market research and advertising purposes. Platform operators may create user profiles that are used to distribute personalized advertising measures both within and outside the platform. This is generally achieved by storing cookies on users' devices. Furthermore, the data may also be stored outside of the devices used by users.
2. Legal basis for data processing
Unless otherwise stated, personal data is processed within the scope of our public duties (Art. 6 Para. 1 lit. e GDPR in conjunction with Sections 4-9 DSAG LSA) for effective information and interaction with users.
The legal basis for processing the data, if the user has given their consent, is Article 6 (1) (a) GDPR. Such consent can be requested from the user by the respective service provider.
3. Purpose of processing, duration of storage, possibility of objection and removal
The purposes of the respective processing of personal data, the duration of storage, and the options for objecting to processing must be considered individually depending on the provider and are subject to constant adjustments by the provider.
This information is available in detail from the respective service provider and is linked below.
Service providers are also best placed to handle requests for information and the assertion of user rights, as only they have access to user data and can take appropriate action and provide information. We will support you with your request if you still need help.
4. Facebook and Instagram
For the information services offered, we use the technical platforms and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
We would like to point out that you use our Facebook and Instagram pages and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, and rating). Alternatively, you can also access the information provided on these pages on our website.
When you visit our Facebook or Instagram pages, Facebook records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the site operator, with statistical information about site usage. Facebook provides further information on this at the following link: http://de-de.facebook.com/help/pages/insights
The data collected about you in this context will be processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information Facebook receives and how it is used in its data usage guidelines. There you will also find information about how to contact Facebook and the options for setting up advertisements.
How Facebook uses the data from visits to Facebook and Instagram pages for its own purposes, to what extent activities on a Facebook or Instagram page are assigned to individual users, how long Facebook stores this data and whether data from a visit to a page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.
When you access a Facebook or Instagram page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for "German" IP addresses). Facebook also stores information about its users' devices (e.g., as part of the "login notification" function); this may allow Facebook to assign IP addresses to individual users.
If you are currently logged in to Facebook or Instagram, a cookie with your user ID is stored on your device. This allows Facebook to track that you visited this page and how you used it.
This also applies to all other Facebook or Instagram pages. Buttons integrated into websites allow Facebook to record your visits to these websites and assign them to your profile. Based on this data, content or advertising can be offered to you. If you want to avoid this, you should log out of the services or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This deletes Facebook information that can be used to directly identify you. This allows you to use our Facebook and Instagram pages without revealing your user ID. When you access interactive features on the pages (like, comment, share, message, etc.), a login screen for the service appears. After logging in, you will be recognizable to Facebook as a specific user. Information on how to manage or delete information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy
As the provider of information services, we do not collect or process any additional data from your use of our services.
Further information
- Full data policy: https://de-de.facebook.com/full_data_use_policy
- Facebook Data Usage Policy: https://www.facebook.com/about/privacy/
- Opt-Out Facebook: https://www.facebook.com/settings?tab=ads
- Data usage guidelines / opt-out Instagram: http://instagram.com/about/legal/privacy/
- Privacy Framework: https://www.dataprivacyframework.gov/list (Meta).
5. Google My Business and YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- Privacy Policy: https://policies.google.com/privacy
- Opt-Out: https://adssettings.google.com/authenticated
- Privacy Framework: https://www.dataprivacyframework.gov/list
6. LinkedIn
(LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
- Privacy Policy/Opt-Out: http://www.linkedin.com/legal/privacy-policy
- Privacy Framework: https://www.dataprivacyframework.gov/list
7. Twitter (X)
(Twitter International Company, Attn: Data Protection Officer, 1 Cumberland Place, Fenian Street, Dublin 2, Ireland)
- Privacy Policy: https://twitter.com/de/privacy
- Opt-Out: https://twitter.com/personalization
1. Description and scope of data processing
Anhalt University of Applied Sciences uses its own platforms and applications, as well as services from other providers ("third-party providers") to conduct video and audio conferences, webinars, and other types of online collaboration. We comply with legal requirements when selecting third-party providers and their services.
In this context, data of communication participants is processed and stored on servers of the university or third-party providers, insofar as this data is part of communication processes with Anhalt University of Applied Sciences. This data may include, in particular, registration and contact details, visual and vocal contributions, as well as entries in chats and shared screen content.
If users are referred to platforms and applications of Anhalt University of Applied Sciences or third-party providers as part of their communication, business, or other relationships with us, usage data and metadata may be processed for security, service optimization, or marketing purposes. We therefore ask you to observe the privacy policy of the respective service used.
2. Legal basis for data processing
If we ask the data subjects for their consent to the use of third-party providers or certain functions (e.g. consent to the recording of conversations), the legal basis for processing is consent (Art. 6 (1) (a) GDPR). Furthermore, their use can be part of our (pre-)contractual services (Art. 6 (1) (b) GDPR). Otherwise, user data is processed on the basis of our public tasks (Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA). In this context, we would also like to refer you to the information on the use of cookies in this data protection declaration.
3. Purpose of data processing
Conducting online courses, providing infrastructure for online learning groups, contractual services and support, contact requests and communication, office and organizational procedures, direct marketing (e.g. by email or post).
4. Types of data processed
- Inventory data (e.g. names, addresses)
- Contact details (e.g. email, telephone numbers)
- Content data (e.g. text entries, photographs, videos)
- Usage data (e.g. websites visited, interest in content, access times)
- Meta/communication data (e.g. device information, IP addresses)
5. Persons affected
- Students
- teachers
- Employees
- Communication partner
- Users (e.g. website visitors, users of online services)
6. Cisco WebEx
Messenger and conference software
Processing of personal data when participating in web meetings with Cisco Webex
7. DFNconf
Conference service in the German Research Network (DFN) provided by the Association for the Promotion of a German Research Network (VDF), Alexanderplatz 1, 10178 Berlin. This service uses the technologies Pexip (https://www.pexip.com) and Adobe Connect (https://www.adobe.com/de). Privacy policy: https://www.conf.dfn.de/datenschutz/
8. Jitsi Meet
Video conferencing service of Anhalt University of Applied Sciences based on Jitsi technology (https://www.jitsi.org). When used, personal data is transmitted to servers of Anhalt University of Applied Sciences. In the spirit of data minimization, we process our users' personal data only to the extent necessary to provide Jitsi Meet and ensure its functionality.
When accessing Jitsi Meet, data is stored in log files for seven days and then deleted. In the event of an attack on the website, the above-mentioned data may be excluded from deletion for evidentiary purposes until any illegal activity has been resolved.
According to the functionality of Jitsi Meet, video and audio data, and when using the built-in chat function, text information, are transmitted to the other users of the same conference. Users' personal data is therefore collected only for the duration of Jitsi Meet's use. This personal data is not stored on the server.
9. Zoom
Messenger and conference software; service provider: Zoom Video Communications, 55 Almaden Blvd, San Jose, California (95113), USA.
- Website: https://www.zoom.us/de/
- Privacy Policy: https://www.zoom.us/docs/de-de/privacy-and-legal.html
- Privacy Framework (ensuring data protection standards when processing data in the USA): https://www.dataprivacyframework.gov/list
10. Miro
Online collaboration platform; service provider: RealtimeBoard Inc. dba Miro, 201 Spear Street, Suite 1100, San Francisco, California (94105), USA.
- Website: https://miro.com/
- Privacy Policy: https://miro.com/legal/privacy-policy/
- Privacy Framework (ensuring data protection standards when processing data in the USA): https://www.dataprivacyframework.gov/list
- EU standard contractual clauses (implemented in the data processing agreement): https://miro.com/legal/customer-data-processing-addendum/
1. Description and scope of data processing
Personal data is collected that is required to conduct surveys, in particular the evaluation of courses.
2. Legal basis for data processing
The legal basis for the processing is the performance of tasks assigned to us in the public interest or in the exercise of official authority, in accordance with Art. 6 (1) (e) GDPR in conjunction with Section 17 EvaO of the Anhalt University of Applied Sciences.
3. Purpose of data processing
The processing is carried out to conduct and evaluate surveys to record and identify opinions, in particular for the further development of studies and teaching.
The data collected varies depending on the survey content. The following data is regularly processed for course evaluation.
From teachers:
- Name
- University email address
- Name of the course
From students in online evaluation:
- University email addresses (when sending invitations to TAN-supported surveys)
- IP Address
It is guaranteed that no connection can be established between the survey results, the IP addresses and email.
Paper evaluations do not collect any personal student data. However, handwritten comments could potentially identify a person. Therefore, the anonymity of the survey cannot be fully guaranteed.
Data will only be passed on to external reviewers in an anonymized, aggregated form for teaching evaluation purposes.
In addition, each time the Evasys website is accessed, data and information are automatically collected from the accessing computer's computer system so that the service can be provided. The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
- The access status/HTTP status code
- The amount of data transferred
- Other similar data and information to protect our information technology systems
This data is also stored in our system's log files. This data is not stored together with other personal user data.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data from participants and instructors will be deleted one semester after the data subject leaves the program, and no later than three years later. Metadata collected during use (server logs) are generally deleted after a period of seven days. We also refer to the data protection information provided by the EvaSys manufacturer (Electric Paper Evaluationssysteme GmbH): https://www.evasys.de/main/unternehmen/information-zum-datenschutz-nach-dsgvo.html .
5. Possibility of objection and removal
The general information on data subject rights applies. To assert your rights under Articles 15–21 GDPR, please contact Betroffenenrechte(at)hs-anhalt.de or the postal address provided above.
1. Description and scope of data processing
The voting server, based on the open source software LimeSurvey, provides all committees at Anhalt University of Applied Sciences with a tool for conducting self-organized, digital, secret votes. The voting server is operated using the open source software LimeSurvey and is available exclusively for digital voting. In addition to the voting server, there is a survey server, also based on Limesurvey, which is set up for academic, student, and other purposes. Further information on LimeSurvey as a survey tool can be found at https://www.hs-anhalt.de/hochschule-anhalt/service/digitale-dienste/umfragetool-limesurvey.html .
2. Legal basis for data processing
The legal basis for the processing is the performance of tasks assigned to us in the public interest or in the exercise of official authority, in accordance with Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA in conjunction with Section 67a HSG LSA for votes in Senate meetings.
3. Purpose of data processing
The data processing serves to conduct secret votes and to collect opinions within the framework of scientific research projects.
For voting and surveys with LimeSurvey, the following data is regularly processed by students, teachers and other university members:
- Name first Name
- University email address; address if applicable
- Content data (voting results, selection, entries)
- Time of voting
Secret ballots with anonymized responses must be selected by the poll creator . This ensures that no connection can be established between the voting result and the person who cast the vote.
In addition, each time the voting and survey server is accessed, data and information are automatically collected from the accessing computer's computer system so that the service can be provided. The following data may be collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
- The access status/HTTP status code
- The amount of data transferred
- Other similar data and information to protect our information technology systems
The personal data collected is stored exclusively internally on servers of Anhalt University of Applied Sciences. Data and results are only shared anonymously.
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data from surveys will be deleted no later than six months after the survey has been completed.
5. Possibility of objection and removal
The general information on data subject rights applies. To assert your rights under Articles 15–21 GDPR, please contact Betroffenenrechte(at)hs-anhalt.de or the postal address provided above.
1. Description and scope of data processing
Anhalt University of Applied Sciences operates department-specific teaching and communication platforms with the support of the software provider Incom GmbH, Weddigenweg 42, 12205 Berlin. Personal data is collected and processed by Incom. A data processing agreement has been concluded with Incom GmbH. The use of Incom is voluntary and not required to pass any coursework or examinations.
2. Legal basis for data processing
The legal basis for the processing is the performance of tasks assigned to us in accordance with Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA.
3. Purpose of data processing
The operation of the platforms ensures contemporary teaching, study organization, and presentation. Data processing thus serves, in particular, to provide modern teaching support.
The following data is processed for registration:
- First and Last Name
- Email Address
- password
- User group (students, employees, etc.)
When used, the following data is optionally processed:
- Custom content (posts, photos, comments, messages, etc.)
- profile picture
- Study program
- Websites
- Twittername
Incom offers functions to make the specified data visible only to limited circles.
In addition, each time the platform is accessed, data and information are automatically collected from the computer system of the accessing computer so that the service can be provided. The following data is collected:
- Session cookies to maintain login status and remember language selection
- Tracking cookie via Piwik (anonymized) to evaluate visitor access
- Protocol data / server log files (IP address, date and time of access, etc.)
- Device information (device type, operating system) to get an overview of active logins on different devices
4. Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Users can also request deletion of their account in their user profile. This will delete the profile and anonymize all posts.
5. Possibility of objection and removal
The general rights of data subjects apply. To assert your rights under Articles 15–21 GDPR, please contact Betroffenenrechte(at)hs-anhalt.de or the postal address provided above. Alternatively, you can request your right to information and your right to erasure directly via your user profile.
Anhalt University of Applied Sciences offers all university members an interface to OpenAI's artificial intelligence (ChatGPT). The interface is accessible at gpt.hs-anhalt.de using your personal university login credentials. The login credentials, or so-called user-related data, remain with the university and are never transmitted to OpenAI.
All users have been informed in the terms of use that they are not allowed to enter any personal data into the command line. Should you nevertheless submit personal data as a request/prompt to the artificial intelligence, this input data will be collected by Anhalt University of Applied Sciences and transmitted to OpenAI to answer the request. Anhalt University of Applied Sciences does not store the input data on its website. Anhalt University of Applied Sciences also does not establish a connection between a request and the respective person. OpenAI stores the input data for a maximum period of 30 days to detect possible misuse. The input data will not be used for training purposes.
The legal basis for the processing of personal data when providing the interface to OpenAI is the performance of tasks assigned to us in accordance with Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA. If personal data has been transmitted to OpenAI in inquiries, it will be processed by OpenAI in the USA. Data transfer to a third country (here the USA) is based on standard contractual clauses in accordance with Art. 46 (2) (c) GDPR, which are implemented in OpenAI's Data Processing Agreement (https://openai.com/policies/data-processing-addendum/).
Anhalt University of Applied Sciences uses a media database provided by AdmiralCloud AG (headquarters at Gustav-Meyer-Allee 25, 13355 Berlin, Germany). In this context, personal data is collected and processed by AdmiralCloud. A data processing agreement has been concluded with AdmiralCloud GmbH.
The legal basis for the processing is the performance of the tasks assigned to the university in accordance with Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 of the DSAG LSA. The operation of the media database serves the efficient management, archiving, and professional presentation of media content.
The following data is processed for voluntary registration:
- First and Last Name
- Email Address
- password
The media (images, videos, etc.) uploaded to the media database, including metadata (media title, file name, copyright notice, etc.), may contain personal data.
In addition, AdmiralCloud automatically collects data and information from the accessing computer's system each time the media database is accessed in order to provide the service. The following data is collected:
- Session cookies to maintain login status
- Usage statistics to analyze visitor access
- Protocol data / server log files (IP address, date and time of access, etc.)
- Device information (device type, operating system) to get an overview of active logins on different devices
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Users can request the deletion of their uploaded media and their account.
Anhalt University of Applied Sciences provides a reporting portal through which whistleblowers can securely report potential legal violations, grievances, or other concerns. In order to appropriately investigate a report and, if necessary, take appropriate action, the personal data contained in the report will be processed. The legal basis is Article 6 (1) (c) in conjunction with Section 10 of the HinSchG (Federal Protection of Human Rights).
The report can be made confidentially or anonymously. In the case of a confidential report, the following information will be collected from the whistleblower:
- First and last name (mandatory)
- Land
- Job title
- Telephone
The data will be deleted as soon as the notification is completed, taking into account any statutory retention periods.
The reporting portal is provided with the help of LegalTegrity GmbH as the data processor. A data processing agreement has been concluded with LegalTegrity GmbH.
Various departments of Anhalt University of Applied Sciences (e.g., University Sports, Library) use the anny.co platform, provided by anny GmbH, Cäcilienstraße 30, 50667 Cologne, to book appointments. For the planning, implementation, and, if necessary, follow-up of the appointment, the following personal data is collected and processed from the person making the appointment:
- First and Last Name
- Email Address
- Address, if necessary
- Payment details if booking is subject to a fee
Unless otherwise stated, personal data is processed within the scope of our public duties (Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA) for the effective organization of events/appointments. The legal basis for processing the data, if the user has given their consent, is Art. 6 (1) (a) GDPR.
The appointment data is stored for us on the servers of anny.co, whose privacy policy can be viewed at https://anny.co/privacy . A data processing agreement has been concluded with anny GmbH.
The data you enter will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Mandatory legal provisions—in particular, retention periods—remain unaffected.
Information on further processing activities of the university
1. Description and scope of data processing
a) Registration
On our website, we offer you the opportunity to register for workshops, conferences, and other events via a form. If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored.
This data can be collected, for example:
- Name
- Email Address
- Telephone number
- Address
At the time of sending the registration, the following data will also be saved:
- The user's IP address
- Date and time of transmission
Your consent to the processing of the data will be obtained during the sending process and reference will be made to this privacy policy.
Alternatively, registration is possible using the provided email addresses. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data will not be shared with third parties. The data will be used exclusively for processing the conversation.
b) Attendance lists
For verification and billing purposes, we are required to document events with participant lists. Such lists generally contain the following data:
- Name
- Institution
- Signature
The participant lists may also be made available to event attendees. If you do not wish this, please let us know when registering for the event.
c) Image recordings
Please note that we will be taking photographs and, if necessary, video recordings to document the events. Provided the recordings meet the requirements of Section 23 of the German Copyright Act (KUG), we reserve the right to publish individual recordings on our website, our internal media database, social media, or other publications of the Anhalt University of Applied Sciences. If you do not wish to be photographed or the recordings published, please notify us prior to the event.
2. Purposes and legal basis of data processing
Unless otherwise stated, your personal data will be processed within the scope of our public duties (Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA). When publishing recordings, Sections 22 and 23 KUG also apply.
The legal basis for the processing of data is Art. 6 (1) (a) GDPR if the user has given his consent.
If the email contact is aimed at concluding a contract, the legal basis for processing is Art. 6 (1) (b) GDPR.
3. Recipient
Unless otherwise agreed, we will not share your data with third parties. However, please note that if photos are published on the website or social media, the data may be accessible worldwide.
Image and video recordings are managed in an internal media database. The media database is provided by AdmiralCloud AG. A data processing agreement has been concluded with this provider.
Participant lists may be shared with third-party funders. Funding provider: State Administration Office of Saxony-Anhalt, Dessauer Straße 70, 06118 Halle (Saale).
4. Duration of storage
HS Anhalt processes and stores your data only for the period necessary to achieve the purpose of storage or as far as this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Possibility of objection and removal
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
To exercise these rights, please contact us by email at Betroffenenrechte@hs-anhalt.de .
In this case, all personal data stored during the contact process will be deleted.
We collect and process applicants' personal data for the purpose of processing the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits relevant application documents to us electronically, for example, by email or via a web form on the website.
If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
If the university does not enter into an employment relationship with the applicant, the application documents will be automatically deleted three months after notification of the rejection decision, provided that no other legitimate interests of the university conflict with such deletion. Other legitimate interests in this sense include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).
We collect and process personal data to process procurement procedures, in particular the names and contact details of the employees of potential contractors. The legal basis for this processing is Art. 6 (1) (b) GDPR (contractual or pre-contractual measures). We pass on the information you provide to third parties involved in the procurement procedure (planning offices, architects, engineers, structural engineers, and, if applicable, experts and lawyers) for processing. In the event of disputes, the data will also be passed on to the relevant procurement boards and/or courts. The processes relating to the respective procurement procedure will be stored for the duration of the processing and, beyond that, for the duration of the limitation period and the statutory retention periods.
