Directive on data protection

The following privacy policy applies to the use of the website www.uni-koblenz.de (hereinafter referred to as this/our website).

The University of Koblenz attaches great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This statement describes how and for what purpose your data is collected and used and what options you have in connection with the collection and use of your personal data.

By using this website, you consent to the collection, use and transfer of your data in accordance with this privacy policy.

1 Responsible body

The controller for the collection, processing and use of your personal data within the meaning of the GDPR is

University of Koblenz

Universitätsstraße 1, D-56070 Koblenz
Phone: +49 261 287-0
Fax: +49 261 287-1600

E-mail: service@uni-koblenz.de

If you wish to object to the collection, processing or use of your data by us in accordance with this privacy policy as a whole or for individual measures, you can address your objection to the above-mentioned office.

You can save and print out this privacy policy at any time.

2 General use of the website

2.1 Access data

We collect information about you when you use this website. We automatically collect information about your usage behaviour and your interaction with the website and register data about your end device. We collect, store and use data about every access to our online offering (so-called server log files). The access data includes

Name and URL of the retrieved file

File date and time of access

Amount of data transferred

Notification of successful retrieval (HTTP response code)

Browser type and version, operating system

Referrer URL (i.e. the previously visited page)

IP address and requesting provider

We reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g. if you use one of our services. We also store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website. We also store the date of your last visit as part of your account (e.g. when registering, logging in, clicking on links, etc.).

2.2 Legal basis and storage duration

The legal basis for data processing in accordance with the above paragraphs is Art. 6 para. 1 letter f GDPR. Our interests in data processing are, in particular, to ensure the operation and security of the website, to analyse the way in which visitors use the website and to simplify the use of the website.

Unless specifically stated, we only store personal data for as long as is necessary to fulfil the purposes pursued.

3 Your rights as a data subject affected by data processing

Under the applicable laws, you have various rights with regard to your personal data. If you wish to assert these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address given in section 1.

Below you will find an overview of your rights.

3.1 Right to confirmation and information

You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to receive information from us free of charge about the personal data stored about you, together with a copy of this data. You also have the right to information about:

the purposes of processing

the categories of personal data that are processed

the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations

where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period

the origin of personal data collected by third parties and used by us, insofar as this information is available

the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing

the existence of a right to lodge a complaint with a supervisory authority

the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.

If the personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

3.2 Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data was collected, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

3.3 Right to erasure ("right to be forgotten")

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

You withdraw your consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.

You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 (2) GDPR.

The personal data was processed unlawfully.

The deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.

The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If we have made the personal data public and if we are obliged to delete it in accordance with Art. 17, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing that you have requested them to delete all links to this personal data or copies or replications of this personal data.

3.4 Right to restriction of processing

You have the right to demand that we restrict processing if one of the following conditions is met:

The accuracy of the personal data is contested by you. Processing may then be restricted for a period of time that enables us to verify the accuracy of the personal data.

The processing is unlawful and you have objected to the erasure of the personal data and have instead requested the restriction of the use of the personal data.

We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims

You have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of our university override yours.

3.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where

the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and

the processing is carried out by automated means.

When exercising your right to data portability pursuant to Art. 20 para. 1, you have the right to obtain that the personal data be transferred directly by us to other controllers, insofar as this is technically feasible.

3.6 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

3.7 Automated decisions including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

3.8 Right to withdraw consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time, provided that this is not permitted or required by a higher-ranking law.

3.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful.

4 Data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities. To secure your data, we maintain technical and organisational security measures that we continually adapt to the state of the art.

Your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) coding system, but would like to point out that data transmission on the Internet can have security gaps (e.g. when communicating by e-mail). Complete protection of data against access by third parties is not possible.

Furthermore, we cannot guarantee that our website will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are carefully backed up on a regular basis.

5 Automated decision-making

Automated decision-making based on the personal data collected does not take place.

6 Transfer of data to third parties, no data transfer to non-EU countries

In principle, we only use your personal data within our university. If and insofar as we involve third parties in the fulfilment of contracts (such as service providers), they will only receive personal data to the extent that the transfer is necessary for the corresponding service. In the event that we outsource certain parts of data processing (so-called order processing), we contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subjects. Data transfer to bodies or persons outside the EU beyond the cases mentioned in this declaration does not take place and is not planned.

7 Online forms

Personal data that you may send to us via contact forms, registration forms and similar subpages of our website via our servers will only be accepted with your consent and will only be used for the purpose stated in the forms. Please note the corresponding information in the forms.

In all forms, only the personal data that is absolutely necessary is collected. The personal data is usually stored in the database of the content management server and is accessible to the responsible employees of the University of Koblenz. If the purpose of the data collection is to make the data accessible to other members of the University of Koblenz, the principle of data minimisation is observed. Your data will not be passed on to third parties unless this is explicitly stated in the form.

Your personal data will be deleted after the purpose has been fulfilled, unless you have given your consent for further contact.

You can revoke your consent at any time for the future. To do so, please contact the responsible organisation. Your data will then be deleted immediately

8 Plausible analytics

We use the web analytics tool Plausible Analytics to understand how our website is used and to improve it. Plausible does not set any cookies, does not store any information in the browser and generally does not collect any personal data.

Here you can find more information about Plausible and the data protection of this tool.

9 YouTube

YouTube components are integrated on our website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on these videos, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube LLC (hereinafter referred to as YouTube). YouTube is a subsidiary of Google LLC.

Each time one of the individual pages of our website is accessed on which a YouTube component (YouTube video) has been integrated, the Internet browser on the user's end device is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when they access a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.

The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

The University of Koblenz has an online presence on the social networks Facebook, Twitter, Instagram, Xing, Linkedin and YouTube.

We would like to point out that when visiting these profiles, user data may be processed outside the European Union, resulting in a lower level of data protection. If you have any data protection concerns in this regard, please do not visit these profiles.

The processing of users' personal data is based on our legitimate interest in providing effective information to users and communicating with users in accordance with Art. 6 (1) (f) GDPR. If the users are asked by the respective platforms for consent to the data processing described above, the legal basis for the processing is Art. 6 para. 1 letter a and Art. 7 GDPR.

The corresponding data processing is carried out by the external operators of these social networks and on the basis of their privacy policies. Please inform yourself there about the corresponding processing modalities.

For requests for information and the assertion of rights, we would like to point out that these should best be asserted directly with the operators of the social networks, as only they have access to user data and can act accordingly. If necessary, we can support you in exercising your rights by making a similar request if you ask us to do so.

Facebook (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)

Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)

Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

11 Data protection officer

If you have any questions or concerns about data protection, please contact our data protection officer:

University of Koblenz - Data Protection Officer
Konstantin Wagner
Universitätsstraße 1
56070 Koblenz

Phone: +49 261 287-2860
Fax: +49 261 287-100-2860

E-mail: datenschutz(at)uni-koblenz.de

12 Changes to the privacy policy

We reserve the right to amend our privacy policy from time to time to ensure that it always complies with current legal requirements or to reflect changes to our services in the privacy policy. We recommend that you read this privacy policy regularly to keep up to date with the protection of the personal data we collect. By continuing to use the service, you agree to this privacy policy and its updates.

13 Validity

The Privacy Policy is currently valid and was last amended on 04 January 2023.