Data protection is particularly important to us. We process your personal data (hereinafter referred to as "data") in accordance with legal requirements and aim to do so in a transparent manner. Therefore, we would like to briefly explain in the following data protection notice which data we process, for what purposes and on what legal basis. You will also receive information about contact persons and your rights in connection with data processing.
Name and contact details of the controller:
Leuphana University of Lüneburg
represented by the President
Universitätsallee 1
21335 Lüneburg
Contact details of the data protection officer:
Leuphana University of Lüneburg
- Data Protection Officer -
Universitätsallee 1
21335 Lüneburg
Email: dsb@leuphana.de
Purposes, circumstances and legal basis of data processing:
1) We use your contact details (title, name, email address, telephone number) to perform tasks in the public interest, organise events and excursions to promote international cooperation in higher education and exchanges between German and foreign universities, taking into account the interests of foreign students. Data processing is necessary for the performance of this task.
The legal basis for this processing is Section 3 sentence 1 No. 1 Niedersächsisches Datenschutzgesetz (NDSG), Art. 6 para. 1 sentence 1 letter e, para. 2 and 3 General Data Protection Regulation (GDPR) in conjunction with Section 3 para. 1 sentence 1 No. 5 Niedersächsisches Hochschulgesetz (NHG).
2) We also use your status ((international) students, (international) Master's students, (international) doctoral candidates and (international) exchange students, employees) as well as your degree programme and language level for the needs-based design of individual events or excursions and thus also to promote international cooperation and exchange in higher education in the best possible way and to take your interests as a foreign student into account. Data processing is necessary for the fulfilment of this task.
The legal basis for this processing is Section 3 sentence 1 No. 1 NDSG, Art. 6 para. 1, letter e, para. 2 and 3 GDPR in conjunction with Section 3 para. 1, sentence 1 No. 5 NHG.
3) If you participate in an event via video conference, you can do so via Zoom. If you participate via your own device, we process the following meeting data via Zoom to provide the service: topic and duration of the meeting, start and end (time) of participation , description of the meeting (optional), chat status, participant IP addresses, Mac addresses and other device IDs, if applicable; approximate location for establishing a connection to the nearest data centre; device/hardware information such as device type, operating system type and version, client version, camera type, microphone or speaker, type of connection and, if applicable, audio and video data, provided you share/turn on your camera and microphone. Your chosen username, audio and video data may be displayed to other participants. Please note that when you download the application, Zoom may collect data over which we have no control. For more information from Zoom on this, please visit:
zoom.us/de-de/privacy.html
We use Zoom's end-to-end encryption as far as possible so that Zoom itself cannot view the content of the video session. In individual cases, e.g. when using breakout rooms, this may not be available.
We process this data in order to enable you to participate interactively via video conference as part of the promotion of international cooperation in higher education and exchange between German and foreign universities, taking into account the interests of foreign students. The legal basis for this processing is Section 3 sentence 1 No. 1 NDSG, Art. 6 para. 1 letter e, para. 2 and 3 GDPR in conjunction with Section 3 para. 1 sentence 1 No. 5 NHG.
In this context, we would like to point out that some of this data may also be processed by Zoom in the USA. For more information, please see the section "Transfer to third countries" below.
4) We use your contact details, your status ((international) student, (international) Master's student, (international) doctoral candidate and (international) exchange student, employee and external), your degree programme and your language level if you wish to register for language courses. Data processing is necessary for the performance of the contract concluded between you and us. The legal basis for data processing is Art. 6 para. 1 letter b GDPR.
General information:
Even if you do not exercise your rights listed below, your data will only be stored for as long as is necessary for the above-mentioned purposes. This does not apply if a longer storage or retention period is required by law or is necessary for the enforcement of legal claims within the statutory limitation periods. If data is only stored for the aforementioned purposes, access to the data is limited to the extent necessary for this purpose.
We generally keep your data to ourselves and only make it available to those employees who need it for their work in the context of performing their tasks. This does not apply if we are legally obliged to disclose it. In addition, we reserve the right to have some of these activities, such as the provision of a video conferencing system, carried out by third-party providers, provided that they offer sufficient guarantees that appropriate technical and organisational measures will be implemented in such a way that data processing is carried out in accordance with legal requirements and the protection of your rights is ensured. We use the following third-party provider to provide the video conferencing system: Zoom - San Jose Headquarters, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA
We would like to inform you that the provision of your data in accordance with sections 1-3 is neither legally nor contractually required. If you do not provide your data, this means that you will not be able to register for an event or excursion.
We would also like to inform you that the provision of data in accordance with section 4 is necessary for the fulfilment of the contract. If you do not provide your data, this will mean that the contract cannot be concluded. For the sake of completeness, we would like to inform you that a contractual relationship that has been established but cannot be implemented may give rise to further civil law claims on our part.
Automated decision-making, including profiling within the meaning of Art. 22 para. 1 and 4 GDPR, does not take place.
Transfer to third countries:
We use service providers such as Zoom for the above-mentioned processing. We would like to point out that data may be processed outside the European Union when transferred to the aforementioned service providers.
The use of the services affected in this way is therefore based on standard contractual clauses in accordance with Art. 46 para. 2 letter c GDPR with regard to the exceptional transfer to a non-European third country. In addition, we have taken special protective measures.
Your right to object pursuant to Art. 21 GDPR:
You have the right to object at any time to the processing of personal data concerning you in accordance with sections 1-3 for reasons arising from your particular situation.
In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Your other rights:
You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of data processing, the recipients of the data and the storage period.
If incorrect data is processed, you can request that we correct this data immediately. If the legal requirements under Articles 17 and 18 GDPR are met, you also have the right to have the data deleted immediately or to restrict its processing. Please note that restricted processing of the data may not be possible under certain circumstances.
Furthermore, under the conditions of Art. 20 GDPR, you can exercise your right to data portability with regard to section 4.
For all other data processing, please contact the following to exercise your rights:
Leuphana University Lüneburg
International Centre
Anja Stegert
Universitätsallee 1
21335 Lüneburg
Email: anja.stegert@leuphana.de
If you have any further questions, please contact our data protection officer.
If you have any complaints regarding data protection, please contact
Den Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.
Email: poststelle@lfd.niedersachsen.de
