Data protection on the homepage of the HFT Stuttgart

1. general information

We are pleased that you are visiting our website and would like to point out that when you visit our website, data is also processed where a personal reference cannot be completely excluded. If you log into the protected area as a registered user, the personal reference is sometimes also desired. Why this is so and to what extent we collect which data from you on which legal basis and when we delete this data again, we would like to explain to you in the context of this data protection declaration.

The principle of data economy is important to us: personal data is therefore only collected and processed by us in technically necessary circumstances and in accordance with this data protection declaration. Your data will not be sold to third parties by us, nor will it be passed on to third parties by us. Registered users can log in to various protected areas of our website. For data processing in the respective protected areas, please refer to the separate data protection declarations and the information on the data processing carried out by us.

2. Responsible person and data protection officer

Responsible for the processing of personal data in the context of the use of this website is:

HFT Stuttgart
Schellingstr. 24
D-70174 Stuttgart 
rektorat(at)hft-stuttgart.de

As data protection officer is appointed:

Maximilian Musch
Telefon: +49 (0)7542 949 2102
datenschutz(at)hft-stuttgart.de
 

3. Provision of the website and creation of log files

When you call up a website, your browser regularly transmits data from your calling up device to the web server, such as the IP address to which the website is to be sent.

In detail, the following data record is collected for each retrieval and stored in the log files of our system:

  • Name of the retrieved file
  • Date and time of retrieval
  • Message whether the retrieval was successful
  • URL of the referring page
  • Browser type and version
  • Operating system

The full IP address of the computer from which the request was sent is not stored. Personal user profiles can therefore not be created.

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must be stored for the duration of the session. The legal basis for the temporary storage of the data and for logging in the log files is Art. 6 para. 1 lit. e DSGVO (in conjunction with § 2 LHG). The provision of information on our website also serves to inform the public about what is going on in our institution and to advise and support students and other interested persons about the content, structure and requirements of a course of study.

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

4. Processing and use of personal data within the scope of registration on our website

A prerequisite for the use of non-public areas of the website is the existence of a user account. Please note for data processing in the respective protected areas, the separate data protection declarations as well as the information on the data processing carried out by us, which you will receive when you register.

 

5. Forms and web-based services

If the opportunity for the input of personal or business data (email addresses, name, addresses) is given, the input of these data takes place voluntarily. The use of all offered services is - as far as technically possible and reasonable - also permitted without the provision of such data or by providing anonymous data or a pseudonym. Which data are collected and processed in detail is informed at the corresponding forms or web services. The data will be processed for the purpose indicated in the form or web service. Data will only be passed on to third parties on the basis of a legal permit or if you have authorised us to do so with your qualified consent.

Data processing is based on the user's consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

The data will be deleted as soon as they are no longer required for the purpose of their collection and no retention obligations prevent their deletion. This applies in particular in the event that you revoke your consent. We would like to point out at this point that you can withdraw your consent at any time. The revocation of consent shall not affect the lawfulness of the data processing carried out up to the time of the declaration of revocation.

 

6. Contact by letter/fax/e-mail/telephone

The purpose of opening the above-mentioned communication channels is to enable contact to be established with all interested parties. Be it, for example, to present factual inquiries, to ask for information, to submit applications, to file complaints. In addition, we use these communication channels, among other things, to make announcements to employees, to address invitations to events or to enable press enquiries. The surname, first name and address of the person concerned are regularly processed; the possibility of contacting the LfDI BW anonymously is unrestricted. The legal basis for the processing is Article 6(1)(e) DSGVO in conjunction with §§ 2, 12 LHG.

Recipients of personal data are regularly public authorities, companies and private individuals who, within the scope of the tasks and powers of the university according to § 2 LHG in conjunction with Article 6(1)(e) of the DPA, this information shall be transmitted.

The HIS eG campus management software we use is hosted by the Hochschulservicezentrum Baden-Württemberg.

The data will be deleted as soon as they are no longer necessary for the purpose of their collection and there are no retention obligations to the contrary or the documents are not taken over by the National Archives. In the case of enquiries, this is regularly the case when the facts and circumstances addressed in them have been conclusively clarified.

7. Use of cookies

When you visit our homepage, so-called cookies are automatically set. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when you return to the website.

Cookies can be provided with an expiration time. We primarily use so-called session cookies. These are automatically deleted when you close your browser. You can block the storage of cookies by us by blocking the setting of cookies by our website in your browser. In this case, however, the functions controlled by the cookies can no longer be used. You also have the option of viewing the cookies stored in your browser and deleting individual cookies.

We use the cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. Some functions cannot be offered without the use of cookies. The user data collected through technically necessary cookies is not used to create user profiles. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. e DSGVO.

The following data is stored and transmitted in the cookies:

  • Language settings
  • Log-in information

If you have set up a user account on our website and you have activated the "Remember Me" or "Stay logged in" function when you log in, a permanent cookie (for 30 days) will be set in the browser of your end device, which ensures that our website will recognize you the next time you visit it. This cookie can be deleted at any time via the settings in your browser.

We also use cookies on our website, which enable an analysis of the surfing behaviour of the users. For details please refer to the subitem Web Analysis using Matomo. The analysis cookie is used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and are thus able to constantly optimize our offer.

Rights of data subjects

They have a right of access (Art. 15 DSGVO) and a right of rectification (Art. 16 DSGVO) or deletion (Art. 17 DSGVO) or restriction of processing (Art. 18 DSGVO) or a right to object to processing (Art. 21 DSGVO) and a right to data transferability (Art. 20 DSGVO).

Further information on the right of information and the right of deletion can be found here

https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2013/02/DSK-Kurzpapier-6-Auskunftsrecht.pdf

https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2017/08/DSK_KPNr_11_Recht-auf-Vergessenwerden.pdf

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You also have a right of appeal to the data protection supervisory authority LfDI Baden-Württemberg.

Do you have questions regarding the collection, use or processing of your personal questions? Do you want to make use of your right of information or your right to correct, block or delete your data? Or would you like to object to the use of your data or revoke an already given consent?

Then please contact our data protection officer Maximilian Musch.

You can reach him by e-mail at: datenschutz(at)hft-stuttgart.de

If you wish to report a data protection incident or a data protection violation at the HFT to the university management and the HFT data protection officer, please use the following e-mail address:

datenschutzvorfall(at)hft-stuttgart.de

8. statistical evaluations with Matomo (formerly PIWIK)

We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness and thus to be able to fulfil our tasks according to § 2 LHG even better. The processing of data for this purpose is based on the legal basis of Art. 6 Para. 1 lit. e DSGVO.

For this purpose the program uses so-called cookies. These are text files which are stored on your PC to analyse how our website is used by you. The information generated by the cookies about your use of our website is stored on the servers of the HFT in Stuttgart. The IP address is anonymised immediately after processing and before it is saved.

The data is deleted as soon as it is no longer required for our recording purposes. We delete the data after 30 days. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree with the storage and analysis of the data from your visit, you can object to the storage and use of the data at any time by clicking on the "Cookie settings" link in the footer of this website.

9. Social media

Our website uses plugins from the YouTube site operated by Google. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Youtube uses cookies, among other things, to collect video statistics, prevent fraud and improve user experience. The operators of the website receive statistical values from the YouTube cookies for the retrieval of individual videos embedded in the website without a reference to the respective user

This website uses embedded YouTube videos in advanced privacy mode. This means: Youtube does not store cookies for a user who visits a website with an embedded Youtube video, but does not click on the video to start playback. If the Youtube video is clicked, Youtube may store cookies on the user's computer. However, no personal cookie information is stored for embedded video playback.

If you are logged in to your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how we handle user data, please see the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy

Functions of the service Instagram are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA integrated. If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our sites with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/

The content on our sites can be shared on social networks such as Facebook, Twitter, Google+, Xing and LinkedIn. No plugins from these providers are integrated into our pages, which are made available through the social networks Facebook, Google or Twitter. An automatic transmission of user data to the operators of these platforms does not take place on our pages.

 

10. Newsletter and broad communication (with tracking)

On our website, users have the option of subscribing to our newsletter or any notifications via various channels (hereinafter referred to as newsletter). Within the scope of the legal provisions, we only send newsletters to recipients who have consented to receive the newsletter or if we are entitled to do so on the basis of another legal basis. We use a selected service provider to send our newsletter. To subscribe to a newsletter from us, it is necessary to provide an e-mail address. Depending on the newsletter, we may collect additional data such as first and last name, gender, organization/company, course of study, final semester. This enables us to provide the newsletter with a personal address. Our newsletter, if transmitted on the basis of consent, is only sent after the so-called double opt-in procedure has been completed. If website visitors decide to subscribe to our newsletter, they will receive a confirmation e-mail, which serves to prevent the misuse of false e-mail addresses and to exclude that a simple, possibly accidental click triggers the sending of the newsletter. The subscription to our newsletter can be terminated at any time for the future. An unsubscribe link (opt-out link) for exercising the revocation or objection is included at the end of each newsletter.

In addition, we are obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store the IP address as well as the time of subscription and unsubscription.

Newsletter tracking

Our newsletters are partly designed in such a way that it is possible for us to gain insights into the reading behavior of our subscribers. This enables us to use a so-called web beacon or a tracking pixel, which reacts to interactions with the newsletter, for example, whether links are clicked, the newsletter is opened at all or at what time the newsletter is read. For technical reasons, this information can be assigned to individual subscribers, but we receive anonymized statistics from our service provider. Category data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times), degree program and graduation semester, if applicable.

Purposes of processing: marketing, public relations, analysis and evaluation of the success of the campaign, alumni work, e.g., to maintain contact with alumni

Legal basis for externals: consent (Art. 6 para. 1 lit. a) DSGVO); legal basis for alumni: the use of personal data for alumni information in the context of sending newsletters and invitations to events, etc. is carried out within the framework of quality assurance and task fulfillment of the university (further development of teaching) as well as the associated teaching evaluation statutes and thus on the basis of Art. 6 para. 1 lit. e) DSGVO, Art. 6 para. 3 DSGVO in conjunction with § 5 para. 4 LHG; § 12 para. 1 LHG.

Recipient: Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany Privacy policy: https://www.inxmail.de/datenschutz

11. registration for events and functions of the HFT Stuttgart

We offer the opportunity to register for HFT Stuttgart events and functions. The information collected by us and required for the organization of the event is marked as mandatory. The provision of additional data is voluntary. If we commission external service providers for the registration procedure, they are obliged to process data in accordance with our instructions and are named below as recipients of the data.

Data categories: Master data (e.g. name, address), contact data (e.g. email address, postal address), degree program and semester of graduation, if applicable, transaction data (bank details, invoices, payment history), meta and communication data (e.g. device information, IP addresses).

Purposes of processing: Public relations, alumni work, e.g. to maintain contact with alumni, invitation and registration for graduation ceremonies, etc.

Legal basis: The legal basis for the data processing of registrants is the initiation and execution of the contract pursuant to Art. 6 para. 1 lit. b) GDPR or consent pursuant to Art. 6 para. 1 lit. a) GDPR. The use of personal data for alumni information in the context of sending newsletters and invitations to events, etc. is carried out in the context of quality assurance and fulfillment of the university's tasks (further development of teaching) as well as the associated teaching evaluation statutes and thus on the basis of Art. 6 para. 1 lit. e) GDPR, Art. 6 para. 3 GDPR in conjunction with § 5 para. 4 LHG; § 12 para. 1 LHG.

For the registration procedure and the sending of invitation letters or newsletters, the following service providers are used on our instructions:

Recipient: Jotform LTD 25 Cabot Square, London E14 4QZ, United Kingdom Third country transfer: Takes place on the basis of an adequacy decision Privacy policy: https://www.jotform.com/privacy/

Recipient: eveeno, Andreas Bothe, Ellenbogen 8, 91056 Erlangen, Germany Third country transfer: Does not take place Data protection: https: //eveeno.com/de/privacy

Recipient: Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany Third country transfer: Does not take place Privacy policy: https://www.inxmail.de/datenschutz

Social media utilization concept HFT Stuttgart