Data protection

Privacy Notice in accordance with articles 13 and 21 GDPR

We are committed to data protection. We process your personal data (hereinafter referred to as “data”) in accordance with statutory requirements and seek to do so in a transparent manner. This Privacy Notice briefly explains what data we process, for what purposes and on what legal basis. It also provides information on contact people and your rights in relation to data processing.

Name and contact details of the Controller:
Leuphana Universität Lüneburg
vertreten durch den Präsidenten
Universitätsallee 1
21335 Lüneburg

Contact details of the Data Protection Officer:
Leuphana Universität Lüneburg
- Datenschutzbeauftragter -
Universitätsallee 1
21335 Lüneburg

Purpose and legal basis of data processing:

  1. We process your contact details (name, address and e-mail address) in order to send you material about courses and events offered by Leuphana Professional School. The legal basis for such processing is article 6(1)(e) GDPR in conjunction with section 3 par. 1 no. 10 NHG [Lower Saxony University Education Act].
  2. We use your registrations details (name and e-mail address) to plan introductory and other events for people interested in studying at Leuphana. Data processing is required for this purpose. The legal basis for that processing is article 6(1)(1)(c), (2) and (3) of the General Data Protection Regulation (GDPR).
  3. We use your e-mail address to send you regular updates about upcoming events and courses at the Professional School. The legal basis for such processing is section 3, no. 1 NDSG [Lower Saxony Data Protection Act], article 6(1)(1)(e), article 6(2) and article 6(3) GDPR in conjunction with section 3 par. 1, no. 10 NHG.

General information:

Even if you do not exercise the rights below, we will only store your data for as long as is necessary for the above-mentioned purposes. This shall not apply if a longer storage or retention period is required under statutory provisions or is necessary for the enforcement of rights within the statutory limitation periods. If data is only still stored for the above-mentioned purposes, access to such data shall be restricted to the extent necessary for said purposes.

We shall not disclose your data to outside parties and shall only make them available to those members of staff who require them in the fulfilment of their duties. This shall not apply if we are legally required to disclose such data.

Please note that the provision of your data is neither a statutory nor a contractual requirement. If you do not provide your data, this may mean that you will be unable to participate in the event in question.

No automated decision-making, including profiling, as set out in article 22(1) and (4) GDPR takes place.

Your right to object pursuant to article 21 GDPR:

Where we process your data as set out in 2), you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.

In this case, we shall stop processing such data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or processing is for the establishment, exercise or defence of legal claims.

If and to the extent that we process your data for direct marketing (cf. point 2 of Purposes and legal bases of data processing above), you have the right to object, at any time and without providing reasons, to the processing of personal data concerning you for the purposes of such marketing. If you object to processing for the purposes of direct marketing, the data in question will no longer be processed for those purposes.

Your other rights:

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to those personal data. Alongside a copy of the data, this right of access also includes the purposes of data processing, the recipients of the data and the period for which data are to be stored.

You also have the right to obtain from us, without undue delay, the rectification of any inaccurate personal data concerning you. Where the legal conditions set out in article 17 and/or 18 GDPR are met, you are also entitled to obtain the immediate erasure or restriction of processing of the data.

Please note that the restricted processing of data may be impossible under certain circumstances.
To exercise the above rights, please contact:

Leuphana Universität Lüneburg
Maria Schloßstein
Universitätsallee 1
21335 Lüneburg

If you have any further questions, please contact our data protection officer.

For any complaints concerning data protection, please contact
Die Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.