Introduction
The use of this website may involve the processing of personal data. In order to make these processes comprehensible to you, we would like to give you an overview of these processes with the following information. In order to ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Responsible
If you have any questions or suggestions regarding this information or would like to contact us regarding the assertion of your rights, please address your request to:
Studierendenrat der BTU Cottbus-Senftenberg
Hubertstraße 15
03044 Cottbus
E-mail address:
office@stura-btu.de
Phone number: +49 355 69 2200
General information on data processing, legal bases and storage duration
General information on data processing
We process personal data in compliance with the applicable data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of a legal permit. When using this website, we only process personal data with your consent (Art. 6 Para. 1 Letter a) GDPR), to fulfill a contract of which you are a party or at your request to carry out pre-contractual measures (Art. 6 Para. 1 Letter b) GDPR), to fulfill a legal obligation (Art. 6 Para. 1 Letter c) GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 Para. 1 Letter f) GDPR).
Duration of storage
Unless the following information states otherwise, we only store the data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention requirements can result in particular from commercial or tax regulations.
Automated data processing of the server
Processing of server log files
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, requested page, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f) DSGVO. This processing serves the technical administration and security of the website. The stored data is deleted unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason.
Hosting
Hetzner
The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter Hetzner).
Details can be found in the privacy policy of Hetzner .
The use of Hetzner is based on Art. 6 Para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable possible presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or the access to information on the end device of the user (e.g. device fingerprinting) in the sense of the TTDSG. The consent can be revoked at any time.
Data processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection contract required by law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Cookies
We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server. In particular, we use short-lived cookies ("temporary cookies") for the security of our website. These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie (usually 2 hours). If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 (1) f) DSGVO. This processing serves our legitimate interest in making our website more user-friendly, more effective as well as more secure. You can delete the cookies in the security settings of your browser at any time. You can generally object to the use of cookies through your browser settings.
Rights of the data subject, right to lodge a complaint
Your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Art.15 DSGVO and § 34 BDSG, you have the right to request information about whether and to what extent we process personal data about you or not.
- You have the right to request that we correct your data in accordance with Art. 16 DSGVO.
- You have the right to demand that we delete your personal data in accordance with Art. 17 DSGVO and § 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
- You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and to transfer this data to another controller.
- You have the right to object to any processing based on the legal basis of Article 6 (1) (e) or (f) DSGVO in accordance with Article 21 (1) DSGVO. If we process personal data about you for the purpose of direct marketing, you may object to this processing in accordance with Article 21 (2) and (3) of the GDPR.
If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) DSGVO. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
Complaint to a supervisory authority
If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.