The controller under the General Data Protection Regulation and other national data protection laws of the member countries and other data protection regulations is the: President of Mainz University of Applied Sciences, Lucy-Hillebrand-Straße 2, D-55218 Mainz, Germany: firstname.lastname@example.org
Data protection officer of Mainz University of Applied Sciences, Lucy-Hillebrand-Str. 2, D-55218 Mainz, Germany: email@example.com
We fundamentally process personal data of our users only insofar as this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users regularly only takes place with the user's consent. An exception applies in those cases in which prior consent cannot be obtained for genuine reasons and the processing of the data is permitted by legal regulations.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing procedures that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c of the GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh said interest, Art. 6 para. 1 letter f of the GDPR serves as the legal basis for processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. The data may also be stored if the European or national law-makers have provided for this in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. These are temporarily stored in a something called a log file. This data is not stored together with other personal data of the user. The following data is collected: IP address of the requesting computer, Date and time of access, Name and URL of the retrieved file, Website from which access is made (referrer URL), The browser used and, if applicable, the operating system of your computer as well as the name of your access provider
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f of the GDPR.
The data is stored in log files to ensure the functionality of the website. In addition, the data is used for the optimization of our website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted, so that an identification of the requesting client is no longer possible.
The collection of data in order to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.
The user data collected by technically necessary cookies is not used to create user profiles. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f of the GDPR.
There is a contact form on our website which can be used for making contact electronically. If a user takes advantage of this possibility, the data entered in the input form will be transmitted to us and stored. This data is: Name, Email address, Message
At the time the message is sent, the following data is also stored: IP address of the accessing computer, Date and time of registration, User agent of the sender. Your consent is obtained for the processing of the data as part of the sending process and reference is made to this data protection declaration. Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted by email will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of data is Art. 6 para. 1 lit. a of the GDPR if the user has given his or her consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f of the GDPR. If the email contact is intended to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b of the GDPR.
The processing of the personal data from the input form is used solely for the purpose of establishing contact. In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input form of the contact form and the data sent by email, this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the possibility to revoke his or her consent to the processing of personal data at any time. If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. The user can send his or her objection by e-mail to firstname.lastname@example.org All personal data stored in the course of contacting us will be deleted in this case.
The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f of the GDPR.
The processing of users' personal data enables us to analyze the surfing habits of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 para. 1 lit. f of the GDPR. By anonymizing the IP address, the users' interest in protecting their personal data is sufficiently taken into account.
The data will be deleted as soon as it is no longer required for our logging purposes. In our case, this will be the case after 180 days.
You have the right:
— to request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
— to request without undue delay the rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 of the GDPR;
— to request the erasure of your personal data stored by us in accordance with Art. 17 of the GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
— to request, pursuant to Art. 18 of the GDPR, the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse the erasure of the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection against the processing in accordance with Art. 21 of the GDPR;
—to receive your personal data that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 of the GDPR or to request its transfer to another controller.;
— in accordance with Art. 7 para. 3 of the GDPR, to revoke your consent to us at any time. As a consequence of this, we are no longer allowed to continue the processing of data based on this consent in the future and
— to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR. You can usually contact the supervisory authority of your regular place of residence or university location.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the withdrawal.
Notwithstanding any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority of your workplace or the place of suspected infringement if you believe that the processing of personal data concerning you is in violation of the GDPR.
The right to lodge a complaint pursuant to Article 13 of the GDPR shall be asserted before the supervisory authority responsible for Mainz University of Applied Sciences: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, LfDI, The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Postfach 3040, D-55020 Mainz, Germany