Privacy Notice - Student Services

Data protection is of particular importance to us. We process your personal data (hereinafter “Data”) in accordance with legal requirements and are committed to doing so in a transparent manner. Therefore, in the following privacy notice, we would like to briefly explain what data we process, for what purposes, and on what legal basis. You will also find information about who to contact and your rights regarding data processing.

PURPOSES AND LEGAL BASIS OF DATA PROCESSING:

1. We use the data collected from you during the application process to carry out the task in the public interest of administering the admission and enrollment procedures for studies at Leuphana University Lüneburg. Data processing is necessary for the fulfillment of this task. This involves processing activities No. 1, 4, and 5 of the data listed in the appendix. Details regarding the data collected, the specific purposes, and the legal bases can be found in the attached appendix. For this purpose, you will also need a myCampus account in the central campus management system. Further information regarding this account can be found in the myCampus Privacy Policy. The processing is carried out in the performance of the task, which is in the public interest, of allocating study places at Leuphana University Lüneburg to applicants. The legal basis for this processing is Section 3, Sentence 1, No. 1 of the Lower Saxony Data Protection Act (NDSG), Art. 6(1)(e), (2), and (3) of the General Data Protection Regulation (GDPR) in conjunction with § 17(1) of the Lower Saxony Higher Education Act (NHG) and § 12 of the Data Protection Regulations of Leuphana University Lüneburg (DSO), as well as the relevant admission and enrollment regulations.
2. If you are awarded a place at the university, we will use the data collected during the application process to fulfill the public interest task of enrolling you at Leuphana University Lüneburg and to perform administrative tasks during your studies. Data processing is necessary for the fulfillment of this task. This involves the corresponding processing operations Nos. 1 through 6, 8, 10, and 15 of the data listed in the attached appendix. Details regarding the data collected, the purposes, and the specific legal bases can be found in the attached appendix. The processing is carried out in the performance of the task in the public interest of administering all enrolled students at Leuphana University Lüneburg. The legal basis for this processing is § 3(1)(1) NDSG, Art. 6(1)(1)(e), (2), and (3) GDPR in conjunction with § 17 NHG in conjunction with § 17 of the Enrollment Regulations of Leuphana University Lüneburg (I-Regulations).
3. We also use data to fulfill our legal obligations, such as reporting requirements based on social security, residency, or statistical regulations. For this purpose, the processing operations listed in the appendix under Nos. 3, 7, 9, and 17 are required. The legal basis for these processing activities is Article 6(1)(c), (2), and (3) of the GDPR in conjunction with the respective legal basis specified in the appendix.
4. To the extent that you, as a student, are a member of the university, you may participate in university self-governance, particularly through elections. We therefore process your data to fulfill the task in the public interest of providing you with the opportunity to participate in the self-governance of Leuphana University Lüneburg in the form of university elections and self-governing bodies. This involves the processing operations No. 12 through 15 of the data listed in the attached appendix. Details regarding the data collected, the purposes, and the specific legal bases can be found in the attached appendix. Data processing is necessary for the fulfillment of these tasks. The legal basis for this processing is § 3(1)(1) NDSG, Art. 6(1)(1)(e), (2), and (3) GDPR in conjunction with § 17(1)(1) NHG and § 16(2) NHG.

If you are offered a place at the Professional School, you can find further information about the Professional School’s data processing practices at the following link:
https://www.leuphana.de/professional-school/datenschutz.html

If you participate in tests and selection procedures for bachelor’s degree programs as part of the application process, you can find further information regarding the College’s data processing at the following link:
https://www.leuphana.de/college/bewerbung/zulassungsverfahren/anmeldung-auswahltage/datenschutzhinweise-auswahltage.html

Even if you do not exercise the rights listed below, we will only store your data for as long as is necessary for the purposes mentioned above. This does not apply if a longer storage or retention period is required by law or is necessary for the enforcement of legal claims within the statutory limitation periods. If data is retained solely for the aforementioned purposes, access to the data is limited to the extent necessary for that purpose.

We generally keep your data to ourselves and make it available only to those employees who need it to perform their duties. This does not apply if we are legally obligated to disclose the data. In addition, we reserve the right to have certain activities performed by third-party providers, provided that they offer sufficient guarantees that appropriate technical and organizational measures are implemented so that data processing is carried out in accordance with legal requirements and ensures the protection of your rights.

We would like to inform you that the provision of your data is neither legally nor contractually required. If you do not provide your data, this may result in your inability to pursue your studies or exercise your participation rights, or to do so only partially.

In accordance with our legal obligations regarding data processing under Section 3, you are required to provide the data specified therein, unless we already have this data on file. If you do not provide your data, this may result in your inability to take up your place at the university, or we may be required to inform data recipients such as health insurance companies or registration authorities of the failure to provide the data.

Automated decision-making, including profiling within the meaning of Art. 22(1) and (4) of the GDPR, does not take place.

To the extent that your data is processed, you have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation.

In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

You have the right to request information from us regarding the processing of your personal data. In addition to a copy of the data, this right to information also covers the purposes of the data processing, the recipients of the data, and the retention period.

If incorrect data is being processed, you may request that we correct this data immediately. If the legal requirements under Articles 17 or 18 of the GDPR are met, you also generally have the right to the immediate deletion or restriction of processing of the data. Please note that restricted processing of the data may not be possible under certain circumstances.

To exercise your rights as described above, please contact:

Leuphana University of Lüneburg
Studierendenservice
Mr. Heiko Kaddik
Universitätsallee 1
21335 Lüneburg, Germany

Email: heiko.kaddik@leuphana.de

If you have any further questions, our Data Protection Officer will be happy to assist you.

For complaints regarding data protection, please contact a data protection authority of your choice.

The authority directly responsible for Leuphana University Lüneburg is:

Der Landesbeauftragte für den 
Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hanover, Germany

Email: poststelle@lfd.niedersachsen.de