Privacy Policy pursuant to Art. 13 and 21 GDPR
Data protection is important to us. We process your personal data (hereinafter referred to as “data”) in accordance with the legal provisions and would like to do so in a transparent manner. We would therefore like to outline in this privacy policy which data we process, as well as for what purposes and based on which legal provisions we do so. We will also provide you with information about contact partners and on your rights in connection with data processing.
Name and contact details of the controller:
Leuphana Universität of Lüneburg
represented by its president
Universitätsallee 1
21335 Lüneburg
Contact details of the data protection officer:
Leuphana Universität of Lüneburg
- data protection officer -
Universitätsallee 1
21335 Lüneburg
E-Mail: dsb@leuphana.de
Purpose and legal basis for data processing
General handling of studies
1) As part of commencing your studies or by participating in advanced training sessions at the Professional School of the Leuphana University Lüneburg, we will collect general information about your person for our student data base, such as name, contact details, basic and detailed information about your studies, course-specific data, data on degree titles, information about employer and profession as well as information related to financial support, information about the current progress of studies, and your meal preferences. The purpose of such data processing is general student administration for matriculation, participation in lectures and examinations, and for the use of university facilities, meaning that this data processing is required for us to be able to fulfil our tasks in accordance with the public interest.
The legal basis for such processing is section 3 first sentence no. 1 Lower Saxony Data Protection Act (NDSG), Art. 6(1) point (e), (2) and (3) General Data Protection Regulation (GDPR) in conjunction with section 17 clause 1 first sentence Lower Saxony University Education Act (NHG).
2) We will be using your name, your e-mail address, and information about your degree to match your student profile to our online learning platform Moodle. Moodle supports and helps with the administration of learning management and is therefore required for maintaining and developing science and art through university studies. The legal basis for this processing is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 3, section 3 clause 1 first sentence no. 1 NHG.
3) We will use your name, matriculation number, title, and degree course for the analysis of general reflection questions that are used to prove your academic accomplishments and for subsequent lectures. This form of data processing is necessary for us to be able to carry out our public task as a university. The legal basis is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 1 NHG.
Participation in special events
4) If you register for general advance training events, we will use your name, title, contact details, your degree course and possibly your e-mail address and billing address. This use of your personal data is also necessary for us to be able to carry out our tasks in accordance with the public interest. The legal basis for this processing is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 1 first sentence 1 NHG.
5) If you would like to avail yourself of the career coaching we offer, we will process your name, personal details, contact details, general information about your degree course and progress so far as well as meal preferences. This data processing is required for carrying out our public task of supporting research and training through studying. The legal basis is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 3, section 3 clause 1 first sentence no. 1 NHG.
6) If you would like to participate in events related to the studies (such as a graduation ceremony), it will be necessary to process your name, contact details, general information about your course and progress so far as well as meal preferences. The legal basis is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 3, section 3 clause 1 first sentence no. 1 NHG.
7) Furthermore, photos and video footage will be shot in connection with our studies-related events, which may show the participants. We use these photos and videos on the Leuphana website and in social media channels in order to inform the public of how the tasks of the university in accordance with the public interest are carried out. Data processing is required for the performance of this task. The legal basis for this processing is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 3 clause 1 first sentence 1 no. 1 NHG.
Marketing and alumni work
8) We conduct degree course surveys to continue to improve our offer. We may need your address and information about your experience with our in-service degree courses and advance training options for this purpose. The legal basis for this data processing is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 2 first sentence 1 NHG.
9) We will process your name, personal data, and your general degree information for alumni work. This data processing is required for maintaining contact with you as an alumnus after completion of your studies. The legal basis for this data processing is section 3 first sentence no. 1 NDSG, Art. 6(1) point (e), (2) and (3) GDPR in conjunction with section 17 clause 1 first sentence 1 NHG.
10) Furthermore, we will use your personal data, education data, information on support, employer and profession as well as degree course data for the justified interest of organising our offer in a strategically sensible manner and to customise our marketing measures accordingly. The legal basis for data processing is Art. 6 (1) point (f) GDPR.
Accreditation and statistics
11) We will use the general and detail information about your degree course for the accreditation of our degree courses and therefore for performing our legal obligation pursuant to section 6 clause 2 second sentence NHG. This data processing is required for the qualitative assessment of our range of studies. The legal basis for this processing is Art. 6(1) point (c), (2) and (3) GDPR in conjunction with section 17 clause 3 NHG in conjunction with the above regulation.
12) Furthermore, we will use your personal details, education details, general degree course and degree title information to prepare statistics and therefore to comply with our obligation pursuant section 3 University Statistics Act (HStatG). Data processing is required for the preparation of mandatory statistics. The legal basis for this processing is Art. 6(1)point (c), (2) and (3) GDPR in conjunction with the aforementioned regulation.
General Information:
Even if you do not exercise the rights below, we will only store your data for as long as is necessary for the above-mentioned purposes. This shall not apply if a longer storage or retention period is required under statutory provisions or is necessary for the enforcement of rights within the statutory limitation periods. If data is only still stored for the above-mentioned purposes, access to such data shall be restricted to the extent necessary for said purposes.
We shall not disclose your data to outside parties and shall only make them available to those members of staff who require them in the fulfilment of their duties. This shall not apply if we are legally required to disclose such data. We also reserve the right to have some of these activities carried out by third-party providers if such providers provide sufficient safeguards to ensure that suitable technical and organisational measures are implemented in such a way that data processing complies with the legal requirements and the protection of your rights is guaranteed.
Please note that the provision of your data is neither a statutory nor a contractual requirement, with the exception of data processing subject to clauses 11 and 12. If you do not provide these data, you will not be able to make use of the offer of the Professional School of Leuphana University.
No automated decision-making, including profiling, as set out in article 22(1) and (4) GDPR takes place.
Your right to object pursuant to article 21 GDPR:
Where we process your data as set out in sections 1 to 10, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
In this case, we shall stop processing such data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or processing is for the establishment, exercise or defence of legal claims.
Your other rights:
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to those personal data. Alongside a copy of the data, this right of access also includes the purposes of data processing, the recipients of the data and the period for which data are to be stored.
You also have the right to obtain from us, without undue delay, the rectification of any inaccurate personal data concerning you. Where the legal conditions set out in article 18 GDPR are met, you are also entitled to obtain the immediate restriction of processing of the data. Please note that the restricted processing of data may be impossible under certain circumstances. Where we process your data pursuant to clauses 1 to 10, you furthermore have the right to obtain the immediate erasure of your data pursuant to Art. 17 GDPR.
To exercise the above rights, please contact:
Leuphana Universität of Lüneburg
Maria Schloßstein
Universitätsallee 1
21335 Lüneburg
E-mail: datenschutz.ps@leuphana.de
If you have any further questions, please contact our data protection officer.
For any complaints concerning data protection, please contact
Die Landesbeauftragte für den
Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.
E-mail: poststelle@lfd.niedersachsen.de