Data Privacy Policy – Studierendenwerke NRW
In the context of the use of our web pages personal data are processed. In this text we inform you, which personal data we collect, how we process them, and which data protection rights you are entitled to. We observe the regulations on data protection. We reserve the right to adapt this privacy policy to changed legal regulations or to changed business processes at any time.
1. Who is responsible for the data processing within these websites and to whom can I contact?
Responsible for the website is the
Arbeitsgemeinschaft Studierendenwerke NRW
c/o Kölner Studierendenwerk
Universitätsstraße 16
D-50937 Köln
Editor and contact: Olaf Kroll
Phone: +49 221-94265103
E-Mail: arge@studierendenwerke-nrw.de
For more information about us, please refer to the imprint and the contents of this website. For questions we are at your disposal.
2. Which sources and data do we use?
We process personal data that we receive from our website visitors (hereinafter: “you”) when using our website. There is no obligation to provide data in this Website.
3. What do we use to process your data and on what legal Basis?
We process personal data in accordance with the provisions of the General Data Protection Regulation DSGVO and other data protection regulations. For details, see the following sections.
4. Collection and processing of server logfile data
If you use our website, an automatic collection and storage of data takes place in so-called server log files (log data) by our provider. The device you use to access the Internet automatically sends to us the following information: the IP address of the device you are using for Internet access, the date and time of use, the name of the file retrieved, and the operating system of the device you are using browser used (browser type and version), previously visited website (referrer URL), name of your internet access provider. The purpose of the collection and processing of this data is to enable the technical establishment of the connection and the use of our web pages. Another purpose is to ensure the security and stability of our website offer, to allow the technical administration, and to evaluate the web visits for internal statistical purposes and to improve our Internet offerings. A systematic check of log file data (log data) is only carried out if, on the basis of concrete evidence, the legitimate suspicion of unlawful use exists.
The data protection legal basis for this is Article 6 (1) (b) GDPR, because the websites you are visiting are to be displayed in our common interest, and Article 6 (1) (f) GDPR, because the statistical evaluation and the control in case of illegal Use constitute a legitimate interest. At the latest after seven days, these data will be deleted from us insofar as they could enable a personal reference, so that at the latest from this point in time we only use anonymous statistical data for website use.
5. Will your data be shared with third parties?
Your data will not be disclosed to third parties except as described in detail in the other bullet numbers in this privacy policy and with the following exceptions:
· Disclosure to third parties, if you have given your consent.
· Passing on to authorities and public authorities if we are required to do so by law, and redirected to the extent necessary for us to enforce any legal claim arising out of a contractual relationship with you.
· A transfer of your data to third parties takes place within the scope of order processing, insofar as this is necessary in order to have a service or data processing activity otherwise performed by ourselves performed by one or more contractors selected by us. This task-based transfer of individual tasks to other companies serves the efficiency, speed and profitability of our service portfolio. We use processors from the following categories: Web providers and IT service providers.
Legal basis of these data Transfers:
The legal basis is Article 6 (1) (a) GDPR as far as you have given us your consent. You may revoke your consent at any time with future effect, but we point out that we reserve the right to continue the data processing in whole or in part, if in addition to the consent of another legal basis for this data processing is given.
The legal basis for a data transfer to authorities or public authorities is Art. 6 (1) (c) GDPR, because this only takes place if we are legally obliged to do so.
The legal basis for the assignment of tasks to other companies is Art. 6 (1) (f) DSGVO with our legitimate interest in the efficiency, speed and efficiency of our service portfolio, in conjunction with Art. 28 DSGVO (order processing).
6. What is the function of hyperlinks on our Website?
For your optimal information, you will find links on our pages that refer to other websites. If you use external links, this privacy policy does not extend to it. Please inform yourself on the websites of the other providers about the privacy statements provided there. We have no influence on the compliance with data protection and security regulations by other providers or changes of the linked websites. At the time of linking, we were not aware of any violations of applicable law on the linked websites. If you notice any legal violations or other negative features of linked websites, we ask for appropriate information in order to draw conclusions.
The legal basis for this offer of hyperlinks on our website is Article 6 (1) (f) GDPR with our legitimate interest in a user-friendly website offer. No data is stored by us in connection with this application.
7. What rights can you Claim?
a) Right of revocation of consent
You can revoke any consent given to us in the processing of your personal data at any time with future effect by sending us a message. This also applies to the revocation of declarations of consent, which were issued to us before the validity of the GDPR, ie before May 25, 2018. You will find our contact data for your revocation at the beginning of this privacy policy or in the imprint. Please note that the revocation only works for the future. Processing that occurred before the revocation is not affected. As a precautionary measure, we point out that even after your revocation of consent, all or part of our data processing may take place if there is another legal basis for doing so.
b) Right to information, correction, cancellation and other rightsRechte
Each data subject has the right to information under Article 15 of the GDPR, the right of correction under Article 16 GDPR, the right to cancellation under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply.
For further questions on personal data or complaints, you can contact us at any time, either to the known contact person of our company, or to our data protection officer, the contact details of the data protection officer can be found at the beginning of this privacy policy. In addition, there is a right of appeal to a competent data protection supervisory authority pursuant to Article 77 DSGVO i.V.m. § 19 BDSG, for example, at the State Commissioner for Data Protection and Freedom of Information LDI NRW, Kavalleriestr. 2 – 4, 40213 Dusseldorf.
c) Information about your right of objection under Article 21 GDPR
Case-specific right of objection
You have the right at any time, for reasons arising out of your particular situation, to prevent the processing of personal data concerning you pursuant to Article 6 (1) (e) of the GDPR (Data Processing in the Public Interest) and Article 6 (1) (f) GDPR ( Data processing on the basis of a balance of interests) takes place, objecting; this also applies to a profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you object, we will no longer process your personal information unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
Recipient of a contradiction
The objection can be form-free with the subject “objection” stating your name, your address to our contact address, this can be found at the beginning of this privacy policy or in the imprint.
8. Cookies
We use on our site so-called cookies to recognize multiple uses of our offer, by the same user / Internet access holder. Cookies are small text files that your Internet browser stores and saves on your computer. They serve to optimize our website and our offers. These are mostly so-called “session cookies”, which are deleted after the end of your visit.
The information obtained in this way serves to optimize our offers and to give you easier access to our site.
You can prevent the installation of cookies by setting your browser accordingly; however, we point out that in this case you may not be able to fully use all functions of our website.
The legal basis is Article 6 (1) (f) of the GDPR with our legitimate interest in designing a user-friendly, comfortable website.
9. Google Web Fonts
This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you use must connect to Google’s servers. As a result, Google learns that our website has been accessed via your IP address. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/
If your browser does not support web fonts, a default font will be used by your computer.
The legal basis for the use of Google Web Fonts is Article 6 (1) (f) of the GDPR with our legitimate interest in a uniform and appealing presentation of our online offers
10. How can you get more Information?
If you would like further information, you are welcome to contact the address given at the beginning of this Privacy Policy. We’re here to help.