Privacy Policy pursuant to Art. 13 and 21 GDPR
Data protection is important to us. We process your personal data (hereinafter referred to as “data”) in accordance with the legal provisions and would like to do so in a transparent manner. We would therefore like to outline in this privacy policy which data we process, as well as for what purposes and based on which legal provisions we do so. We will also provide you with information about contact partners and on your rights in connection with data processing.
Name and contact details of the controller:
Leuphana Universität of Lüneburg
represented by its president
Universitätsallee 1
21335 Lüneburg
Contact details of the data protection officer:
Leuphana Universität of Lüneburg
- data protection officer -
Universitätsallee 1
21335 Lüneburg
E-Mail: dsb@leuphana.de
Purposes and legal bases of data processing:
1) Business communication Professional School
We use your e-mail address, name data (salutation, title, first name and surname), function and department, the name of your institution or company, your business contact details (postal address, telephone and fax number) for communication with you in the context of the services and tasks of the Professional School at Leuphana. The activities include:
- providing information and sending invitations to events, workshops and seminars
- communicating and maintaining contact with potential and existing business and cooperation partners
We use the data you provided when you contacted us or requested advice about the Professional School's offers and services by email, phone or in person, or when you registered for our events (information or networking events), if necessary together with contract master data (order data, contractual relationship, contractual interest), in order to answer your specific enquiry or to be able to communicate with you regarding a cooperation or continuing education agreement, its implementation or continuation.
The processing of your data is necessary for the performance of tasks carried out in the public interest, to cultivate and develop the sciences and arts through further education, in particular through cooperation between the university and companies in the field of professional development. The legal basis for such processing is section 3 first sentence no. 1 Lower Saxony Data Protection Act (NDSG), Art. 6(1) point (e), para. 2 and 3 of the General Data Protection Regulation (GDPR) in conjunction with § 3 para. 1 sentence 1 no. 1 of the Lower Saxony Higher Education Act (NHG).
2) Events e-mail distribution list
If you register for one of our events, we use your e-mail address and your name data (salutation, title, first and last name) in an e-mail distribution list to inform you regularly about similar upcoming events at the university, particularly in the areas of research, teaching, studies, continuing education and knowledge and technology transfer. The data is stored in a central contact database of the service centre. The legal basis for this processing is § 3 sentence 1 no. 1 NDSG, Art. 6 para. 1 sentence 1 letter e, para. 2 and 3 GDPR in conjunction with § 3 para. 1 sentence 1 no. 10 NHG. You have the option to object to receiving emails at any time without giving reasons. If you no longer wish to receive our emails, you will find information on how to unsubscribe in every email.
3) Initiation of Cooperations
We use name and contact details that are used for business communication that you have published on websites, in social media or in publications. We would like to get in touch with you. We would like to inform you about our projects and, if necessary, propose a specific collaboration. If the cooperation is related to university cooperation in the field of science, teaching and research, we will, with your consent, also pass on the data internally to the Leuphana cooperation service responsible for this in order to be able to contact you directly with regard to further cooperation with the university. This is necessary for the fulfilment of this task, which is in the public interest. The legal basis for this processing is § 3 sentence 1 no. 1 NDSG, Art. 6 para. 1 sentence 1 letter e, para. 2 and 3 GDPR in conjunction with § 3 para. 1 sentence 1 no. 1 and no. 4 NHG. You have the option to object to being contacted at any time without giving reasons. If you no longer wish to receive our emails, you will find information on how to object in each email.
4) Contact storage for cooperations on recommendation
If, in individual cases, we have received non-publicly available name and business contact details from you (e-mail address, postal address, telephone/fax number, function and department, the name of your institution or company, social media presence) on the recommendation of an employee of Leuphana, we will store your data in our database for the purpose of initial contact within the scope of our activities (see section 1). We will inform you of this by e-mail upon admission.
The contacting is necessary for the fulfilment of tasks in the public interest to maintain and develop the sciences and arts through continuing education, in particular through cooperation between universities and companies in the field of continuing professional development. The legal basis for this processing is § 3 sentence 1 no. 1 NDSG, Art. 6 para. 1 sentence 1 letter e, para. 2 and 3 GDPR in conjunction with § 3 para. 1 sentence 1 no. 1 NHG. You can object to being contacted at any time without giving reasons. If you no longer wish to receive our emails, you will find information on how to object in each email.
General information:
If we have not received your data directly from you, it has been transmitted to us by your employer, we have taken it from publicly accessible sources (e.g. websites, public information in social networks, public print publications) or, in individual cases, it has been forwarded to us by Leuphana employees.
Even if you do not make use of your rights below, your data will be stored by us for up to 5 years from the end of the year in which we first included you in our database or in which you last contacted us. This does not apply if a longer storage or retention period is required by law or is necessary for the enforcement of rights within the statutory limitation periods. If data is only stored for the aforementioned purposes, data access is limited to the extent necessary for this purpose.
We generally keep your data to ourselves and only make it available to those employees who need it for their work as part of the fulfilment of their duties. This does not apply if we are legally obliged to pass it on. We also reserve the right to have some of these activities, such as maintaining a contact database, carried out by third-party providers, provided that they offer sufficient guarantees that suitable technical and organisational measures are implemented in such a way that data processing is carried out in accordance with legal requirements and guarantees the protection of your rights. We have concluded an order processing contract for the contact database with the following provider: SmartWe World AG, CAS-Weg 1-5, 76131 Karlsruhe.
We would like to inform you that the provision of your data is neither legally nor contractually required. If you do not provide your data, this may mean that you will not be able to participate in information from the knowledge and technology transfer or about events and suitable cooperation opportunities.
Automated decision-making including profiling within the meaning of Art. 22 (1) and (4) GDPR does not take place.
Your right to object pursuant to Art. 21 GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If we process your data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing, without having to provide any justification. If you object to processing for direct marketing purposes, the data will no longer be processed for these purposes. You will find a link at the end of each email to unsubscribe from the mailing list without giving reasons.
Your other rights:
You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of the data processing, the data recipients and the storage period.
If incorrect data is processed, you can demand that we correct this data immediately. If the legal requirements according to Art. 17 or 18 GDPR are met, you also have the right to immediate erasure or restriction of processing of the data. Please note that it may not be possible to restrict the processing of data.
To exercise your above-mentioned rights, please contact
Leuphana Universität of Lüneburg
Maria Schloßstein
Universitätsallee 1
21335 Lüneburg
E-mail: datenschutz.ps@leuphana.de
If you have any further questions, our data protection officer will be happy to advise you.
If you have any data protection complaints, please contact a data protection authority of your choice. The authority directly responsible for Leuphana University of Lüneburg is
Die Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.
E-mail: poststelle@lfd.niedersachsen.de