Graduation ceremony: Privacy Policy
Privacy Notice in accordance with articles 13 and 21 GDPR
We are committed to data protection. We process your personal data (hereinafter referred to as “data”) in accordance with statutory requirements and seek to do so in a transparent manner. This Privacy Notice briefly explains what data we process, for what purposes and on what legal basis. It also provides information on contact people and your rights in relation to data processing.
Name and contact details of the Controller:
Leuphana Universität Lüneburg
represented by the president
Universitätsallee 1
21335 Lüneburg
Contact details of the Data Protection Officer:
Leuphana Universität Lüneburg
- Data protection officer -
Universitätsallee 1
21335 Lüneburg
E-mail: datenschutz@leuphana.de
Purposes and legal bases of data processing
1) We will use your name, contact details and general information about your degree course (student ID number, degree programme, study cohort, student status) to plan the event according to need and thus to observe the principle of economy as set out in Section 7 (1) of the Budgetary Regulations (LHO). This makes data processing necessary. The legal basis for this processing is point (c) of Art. 6(1) as well as Art. 6(2) and (3) of the General Data Protection Regulation (GDPR) in conjunction with the aforementioned provision.
2) If you register, we will use your name for creating a guest list for admission control in order to fulfil the task of ensuring that order is maintained during the event by exercising our domiciliary rights, which is in the public interest. Data processing is required for the performance of this task. The legal basis for this processing is Section 3 sentence 1 no. 1 NDSG [Lower Saxony Data Protection Act], point (e) of Art. 6(1) as well as Art. 6(2) and (3) GDPR in conjunction with Section 37 (3) sentence 1 NHG [Lower Saxony University Education Act].
3) In addition, photographs will be taken at the event on which the participants may appear. We will use individual images to perform the public-interest task of informing the public, on our website and possibly also on social media, about the University’s fulfilment of its duties. Data processing is required for the performance of this task. The legal basis for such processing is also Section 3 sentence 1 no. 1 NDSG, point (e) of Art. 6(1) as well as Art. 6(2) and (3) GDPR in conjunction with Section 3 (1) sentence 1 no. 10 NHG.
4) Furthermore, we will take group photos of the graduates of the individual degree programmes and provide them to the relevant programme cohort on our website with password protection. The basis for such data processing is your freely granted consent. If you take part in such group photos in the indicated area, we assume that you give your consent to the data processing described in this paragraph. The legal basis is point (a) of Art. 6(1) GDPR.
5) In addition, we will take individual pictures of the certificate presentation upon request, which we will provide on our website, with passport protection, jointly with the group pictures of the relevant programme cohort. This will also be done on the basis of the voluntary consent you give by checking the relevant box when registering for the event. The legal basis for this data processing is point (a) of Art. 6(1) GDPR.
General information
Even if you do not exercise the rights below, we will only store your data for as long as is necessary for the above-mentioned purposes. This shall not apply if a longer storage or retention period is required under statutory provisions or is necessary for the enforcement of rights within the statutory limitation periods. If data is only still stored for the above-mentioned purposes, access to such data shall be restricted to the extent necessary for said purposes.
We shall not disclose your data to outside parties and shall only make them available to those members of staff who require them in the fulfilment of their duties. This shall not apply if we are legally required to disclose such data.
Please note that the provision of your data is neither a statutory nor a contractual requirement. If you do not provide your data, you may not be able to participate in the event or your eating habits may not be taken into account when planning the buffet.
No automated decision-making, including profiling, as set out in article 22(1) and (4) GDPR takes place.
Your right to object pursuant to article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
In this case, we shall stop processing such data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or processing is for the establishment, exercise or defence of legal claims.
Your other rights
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to those personal data. Alongside a copy of the data, this right of access also includes the purposes of data processing, the recipients of the data and the period for which data are to be stored.
You also have the right to obtain from us, without undue delay, the rectification of any inaccurate personal data concerning you. Where the legal conditions set out in article 17 and/or 18 GDPR are met, you are also entitled to obtain the immediate erasure or restriction of processing of the data. Please note that the restricted processing of data may be impossible under certain circumstances.
To exercise the above rights, please contact:
Leuphana Universität Lüneburg
Maria Schloßstein
Universitätsallee 1
21335 Lüneburg
E-mail: datenschutz.ps@leuphana.de
If you have any further questions, please contact our data protection officer.
For any complaints concerning data protection, please contact
Die Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover
E-mail: poststelle@lfd.niedersachsen.de