Pri­vacy Policy

^{The German version of this document is the only legally binding version. This English translation is for your convenience only.} 

This privacy policy applies to the following websites:
www.hs-neu-ulm.de
www.hnu.de

It also applies to the following websites insofar as we assume responsibility for processing personal data:
Facebook: https://www.facebook.com/HochschuleNeuUlm
Instagram: https://www.instagram.com/hochschule_neu_ulm/
LinkedIn: https://www.linkedin.com/school/hochschule-neu-ulm/
Twitter: https://twitter.com/hs_neu_ulm
Xing: https://www.xing.com/companies/hochschuleneu-ulm
Youtube: https://www.youtube.com/channel/UCSm55exzvDBeusbAErPkesw

General

Data protection is both our priority and our legal obligation.

In order to ensure adequate protection of personal data during transmission, HNU uses suitable, state-of-the-art encryption methods (e.g. SSL/TLS) and secure technical systems.

JavaScript is the active component used for the websites. If JavaScript is deactivated in the browser, the user will not be informed at present. The website is functional without JavaScript, but with the following restrictions:

1. Interactive photo galleries (“sliders”) are not visible. Instead, a white area appears.
2. Contact forms are visible, but errors may occur in data validation.
3. The application portal is not functional.
4. The Matomo web analysis is not functional.

Responsible institution

Neu-Ulm University of Applied Sciences
Wileystraße 1
89231 Neu-Ulm
Germany

Tel: +49 (0) 731/9762-0
Email: info@hnu.de
 

The Neu-Ulm University of Applied Sciences is a public corporation. It is legally represented by its president, Prof Dr Uta M Feser.

Contact information for the Data Protection Officer

Data Protection Officer
Wileystraße 1
89231 Neu-Ulm
Email: dsb[at]hnu[dot]de

Purposes of and legal basis for the processing of personal data

Public relations – the responsibility of universities of applied sciences

In meeting our obligation as a university of applied sciences in accordance with Art. 2(6) of the Bavarian Higher Education Act (Bayerisches Hochschulgesetz, BayHSchG) and Art. 4 (1.1 and 1.2) of the Bavarian Act to Promote Electronic Government (Bayerisches E-Government-Gesetz, BayEGovG), we make our general and administrative services available on our website, as well as information for the public about our activities. The legal basis for processing your personal data for this purpose is Art. 6 (1e) and (3) of the General Data Protection Regulation (GDPR), Art. 4 (1) of the Bavarian Data Protection Act (Bayerisches Datenschutzgesetz, BayDSG) in combination with Art. 2 (6) of the Bavarian Higher Education Act (BayHSchG).
 

Social Media

One component of our public relations work is social media. Here our aim is to provide and exchange information, tailored to specific target groups, Art. 2 (6) BayHSchG. We enable quick, electronic means of contact and immediate communication via the medium of your choice, Art. 5 (1.2) of the Telemedia Act (Telemediengesetz, TMG).

We report content and inquiries that infringe on the rights of others or that constitute a criminal or regulatory offence, or that contradict legal or contractual duties of conduct, to the relevant authorities or social media platform providers and react with measures such as blocking or deleting. 

Communication

If you would like to contact us, this website provides several options. You may contact us via mail, telephone, email or fax (contact details for the respective contact people are given), or you may submit an inquiry using the online forms provided. We use your data solely for the purpose of responding to your request. Should further processing of your data be necessary, we will request your consent. The legal basis for this type of data processing is Art. 6 (1a) of the GDPR.

Newsletter

If there are specific topics at HNU that interest you, you may register to receive corresponding newsletters on our website. You will need to consent to the processing of your data via a double opt-in procedure. The legal basis for this type of data processing is Art. 6 (1a) of the GDPR.

Registration for various events and seminars

You may register for events and seminars taking place at HNU via our website. Depending on the particular event, the legal basis for the processing of data is either Art. 6 (1e) and (3) GDPR, Art. 4 (1) BayDSG, Art. 27 of the BayDSG or your consent (Art. 6 (1a) GDPR). For exhibitors, lecturers, etc., the legal basis can be Art. 6 (1b) GDPR. We use your data for the planning and execution of the respective events.

Library

Applications for library use from external parties can be submitted via our website. Further information is available in the library’s privacy policy.

Application Portal

Applications can be submitted on our website via a separate application portal. The relevant information on data protection can be found in the Terms of Use for the Application Portal.

Other purposes

We use cookies, log files, statistics from social media platform providers and the web analysis tool Matamo to compile business statistics, carry out organisational studies, check or maintain our web services and ensure network and information security in accordance with Art. 6 (1) BayDSG, § 13 (7) TMG, Art. 11 (1) BayEGovG. Insofar as the purpose for the processing is not affected, we make personal data anonymous or pseudonymous.

Other data categories and processing

Administration and editing
Function identifiers and personal identifiers are created with access protection mechanisms for administration and editing purposes, and changes made to these identifiers are recorded.

Log file data

When you visit this or other websites, you transmit data to our server via your internet browser. The following data is recorded for purposes of communication when there is an active connection between your internet browser and our server:

• Data and time of the request
• Name of the requested file
• Site from which the file was requested
• Access status (e.g. file transferred, file not found)
• Web browser in use and screen resolution, as well as operating system in use
• Complete IP address of the requesting computer
• Volume of transferred data

Cookies

The basic functions of our website can be used without cookies.
Login cookie
Cookies are issued for logins. These cookies are only used during a particular browser session and are not stored for a longer period of time.

Photographs

HNU collects photographic documentation at events and meetings within the scope of our press and public relations activities, in which guests may be visibly recognisable. At such events, there will be notices posted to inform the attendees. The legal basis for taking personal photographs is the authorisation norm of Art. 4 (1) of the Bavarian Data Protection Act (BayDSG) and for the corresponding publication, the authorisation norm of Art. 5 (1.1.1) of the BayDSG. HNU weighs its interests in publication for public relations purposes against the basic right of the persons depicted in the photographs to informational self-determination. If HNU determines that there is a legitimate interest for excluding the publication which is worthy of protection, the corresponding photographs will not be published. You have the right to object to the taking or publication of photographs at any time.

Matomo

We use the Matamo Tracker to improve the quality of our online services. If you do not wish to be tracked, please use the “do not track” function of your browser. No cookies will be stored.

Recipients or categories of recipients of personal data

If you use our social media channels and websites, the respective platform providers will also be processing your personal data.

Our IT service providers may also receive your personal data within the context of performing tasks laid out in our contracts with them. In order to ensure the security of our data processing systems, however, we do not disclose the names of our service providers.

It is possible that data will be forwarded to the relevant supervisory and auditing authorities to exercise the respective control rights. 

Social Media

Pursuant to the Court of Justice of the European Union (CJEU) case no. C210/16, we share the responsibility for data protection on our social media sites with the respective social media platform providers. We believe that this also has an impact on the new General Data Protection Regulation.

The use of our social media channels is also subject to the regulations of:

• Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. Click here for Facebook’s privacy policy.
• Xing SE, Dammtorstraße 30, 20354 Hamburg, Deutschland. Click here for Xing’s privacy policy.
• Linkedin, Unlimited Company Wilton Place, Dublin 2, Irland. Click here for LinkedIn’s privacy policy.
• Instagram, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. Click here for Instagram’s privacy policy. 
• Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Click here for Google’s privacy policy.
• Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. Click here for Twitter’s privacy policy.

All of our social media platform providers are publicly certified under the EU-US Privacy Shield, ensuring a legally adequate level of protection for personal data:

Facebook, Inc.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (opens in a new window)

Twitter Inc.
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active (opens in a new window)

Youtube (Youtube LLC) und Google+ unter Google LLC
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active (opens in a new window)

LinkedIn, Coporation

https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active#participation (opens in a new window)

In general, we do not integrate social media plugins. However, the website may occasionally include videos from the external video platform YouTube. We would like to point out that clicking the play button on a video may already trigger a transfer of personal data.

This is independent of whether or not the user has a membership with the respective social network. This data may be used to create a personal profile.

We have no control over the processes that are triggered. By clicking the play button, you automatically leave the area that we control and for which we are responsible. We strongly advise that you observe the data protection regulations and settings of the respective provider.

Storage duration for personal data

Data is only stored for the period of time required in connection with legal retention periods in order to maintain regular operations.

If the processing of data is based on your consent, we will delete your data at the very latest when you revoke your consent, providing that there are no legal regulations prohibiting this.

Administration and editing
Personalised administration and editorial access to our website will be deactivated once the respective employee has left HNU or has changed their area of responsibility.

Log files
As a rule, all personal data is stored for a maximum of seven days.

Cookies
This website uses cookies for technical operation of the website. Cookies are deleted after the session is terminated.

Communication
Mail, email and social media posts and messages will be deleted six years after the end of the year in which they have been sent/posted.

Social Media

If you communicated with us via social media with the knowledge of the public or parts of the public, you have the right to define the duration of the publication or request its deletion. We will delete the data within our area of responsibility in compliance with archive law. If we still have copies of the data in our possession after deletion, they will be restricted in their processing and stored in accordance with the statutory storage obligations, taking into account archive law.

Your rights

Pursuant to the General Data Protection Regulation, you have the following rights:

You have the right to receive information about any data related to your person that has been saved (Art. 15 GDPR).

You have the right to have incorrect data corrected (Art. 16 GDPR).

Providing that the legal requirements are fulfilled, you have the right to request that your data be deleted or that the use thereof be restricted or to object to the processing of your data (Art. 17, 18 and 21 GDPR).

If you have consented to the processing of your data or if a data processing contract exists and the data processing is carried out by automatic means, you may have the right to data portability (Art. 20 GDPR).

If you choose to exercise the rights stated above, the public authorities will assess whether the statutory requirements for doing so have been fulfilled.

If the processing of your data is based on consent, you have the right to revoke that consent for the future at any time. Provided that there are no legal reasons to the contrary, the data in question will be deleted immediately.

You also have the right to submit a complaint to the Bavarian State Commissioner for Data Protection (Der Bayerische Landesbeauftragte für den Datenschutz, BayLfD).

PO Box 22 12 19
80502 Munich
Wagmüllerstraße 18
80538 Munich
Tel: 089 212672-0
Fax: 089 212672-50
poststelle@datenschutz-bayern.de
 

Further information concerning our privacy policy

We reserve the right to periodically adapt this privacy policy to ensure its constant compliance with current legal requirements or to reflect changes to our services, e.g. when new services are introduced. The new privacy policy will then apply for your next visit.

If additional information concerning data protection is required for individual processing operations, you will find the necessary information on the relevant pages.

If you have any questions, you can contact the Data Protection Officer or send an email to: info@hnu.de.