Data protection

We are committed to data protection. We process your personal data (hereinafter referred to as “data”) in accordance with statutory requirements and seek to do so in a transparent manner. This Privacy Notice briefly explains what data we process, for what purposes and on what legal basis. It also provides information on contact people and your rights in relation to data processing.

Name and contact details of the Controller:
Leuphana Universität Lüneburg
vertreten durch den Präsidenten
Universitätsallee 1
21335 Lüneburg

Contact details of the Data Protection Officer:
Leuphana Universität Lüneburg
- Datenschutzbeauftragter -
Universitätsallee 1
21335 Lüneburg
E-Mail: dsb@leuphana.de

Purpose and legal basis of data processing:

1. Sending newsletters

We use your email address, your subject preferences, the time of your registration and your confirmation, together with your IP address and, optionally, your name, for the purpose of sending you our newsletter. The only mandatory information is your email address. This data processing is carried out for the purpose of registering and sending the newsletter of the Professional School at Leuphana University Lüneburg in order to send you information, information material and events of the Professional School on the study programmes you have selected on the basis of your voluntary consent. The provision of further, separately marked data is voluntary and is used to address you personally.

In addition, when sending the newsletter, we evaluate your user behaviour in order to tailor the design of future newsletters to the interests of our recipients. To this end, we evaluate the following information:

• Email opens/reads
• Time of opening
• Links clicked within an email
• If applicable, browser used to open the email
• If applicable, device on which the email was opened
• Tracking of opt-ins/opt-outs
• If applicable, individual ID in links

We use this information to improve our newsletter by measuring reading behaviour and your response, e.g. views and clicks on links.

For technical reasons, the IP address is transmitted to our server each time the newsletter or links in the newsletter are accessed, but is only stored in pseudonymised form.

For this evaluation, the emails sent contain so-called tracking pixels, which are single-pixel image files that are loaded from our server onto your device as soon as you open the email to read it. All links in our newsletters are redirected via our server, and your click on the specific link is recorded, stored and used to measure success. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record whether and when you read our newsletters, which links you click on and which personal topic preferences you have specified. We link this data to your email address and an ID in order to personalise future newsletters for you.

Such tracking is not possible if you have disabled the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you manually display the images or click on links in the newsletter, the above-mentioned tracking will take place.

The storage of or access to information in your terminal equipment is carried out in accordance with Section 25 (1) sentence 1 Alt. 1 of the German Act on Data Protection and Privacy in Telecommunications and Telemedia (TDDDG).

The legal basis is therefore Art. 6 (1) sentence 1 letter a of the General Data Protection Regulation (GDPR).

2. Newsletter registration

We use the so-called double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 7 days, your information will be blocked and deleted after two months at the latest. For this purpose, the times of registration and confirmation are stored together with your IP address. This is done for the purpose of verifying your registration and to be able to investigate any possible misuse of your personal data. The legal basis for this data processing is Art. 6 (1) sentence 1 letter c) GDPR in conjunction with Art. 5 (2) and Art. 7 (1) GDPR.

General information:

Even if you do not exercise your rights listed below, your data will only be stored by us for as long as is necessary for the above-mentioned purposes. This does not apply if a longer storage or retention period is required by law or is necessary for the enforcement of legal claims within the statutory limitation periods.

If data is only retained for the aforementioned purposes, access to the data is limited to the extent necessary for this purpose. We generally keep your data to ourselves and only make it available to those employees who need it for their work in the context of performing their duties. This does not apply if we are legally obliged to disclose it.

In addition, we reserve the right to have some of these activities, such as the administration and dispatch of the newsletter, carried out by third-party providers, provided that they offer sufficient guarantees that appropriate technical and organisational measures will be implemented in such a way that data processing is carried out in accordance with legal requirements and the protection of your rights is ensured. In this regard, we have concluded a data processing agreement with Leuchtfeuer Digital Marketing GmbH, Immengarten 16-18, 30177 Hanover. 

We would like to inform you that the provision of your data is neither legally nor contractually required. If you do not consent to the processing of your data, this will not have any negative consequences for you.
Automated decision-making, including profiling within the meaning of Art. 22 (1) and (4) GDPR, does not take place.

Your right to revoke your declaration of consent

You have the right to revoke your consent to receive newsletters, including their analysis, at any time with future effect. This means that the legality of the processing that took place on the basis of your consent until revocation remains unaffected. The declaration of revocation can be made informally and does not require any justification. If you revoke your consent, you will not suffer any disadvantages.

You can revoke your consent at any time by clicking on the link provided in every newsletter email.

Your other rights:

You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of data processing, the recipients of the data and the storage period.

If incorrect data is processed, you can request that we correct this data immediately. If the legal requirements under Articles 17 and 18 of the GDPR are met, you also have the right to have the data deleted immediately or to restrict its processing. Please note that restricted processing of the data may not be possible under certain circumstances.

Furthermore, you can exercise your right to data portability under the conditions set out in Article 20 of the GDPR.

To exercise the above rights, please contact:

Leuphana Universität Lüneburg
Maria Schloßstein
Universitätsallee 1
21335 Lüneburg
E-mail: datenschutz.ps@leuphana.de

If you have any further questions, please contact our data protection officer.

If you have any complaints regarding data protection, please contact a data protection authority of your choice.

The following authority is directly responsible for Leuphana University Lüneburg:
Der Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.
E-mail: poststelle@lfd.niedersachsen.de