In this privacy notice, we inform you about how we process your personal data in connection with the organization and administration of study participants in the Applied Psychology program. For additional information on how we handle your personal data, please see the general privacy policy on our website: https://www.rwu.de/kontakt/datenschutz
Name and Address of the Data Controller
Data controller within the meaning of Art. 4(7) of the GDPR:
Ravensburg-Weingarten University of Applied Sciences
Doggenriedstraße 70
D - 88250 Weingarten
Represented by: Rector Professor Dr.-Ing. Thomas Spägele
Tel: 0049 (0) 751/501-9344
Email: info@rwu.de
Website: https://www.rwu.de/
External Data Protection Officer
Our external data protection officer can be reached at:
Name: Benedict Lenz
Email: dsb@rwu.de
Website: https://www.exacon-gmbh.de
Information on Data Processing
Nature and Purpose of Processing
In the Applied Psychology program, students are required to complete research participant hours and provide appropriate documentation. To organize and carry out this component of the program, the university processes the students’ personal data necessary for this purpose. The processing serves, in particular, to organize and coordinate participation in scientific studies, to manage study registrations and schedules, and to record, document, and verify the hours of participation as research subjects. The university uses the SONA software to handle the administrative aspects of these processes.
Data Categories
To organize, document, and verify the hours of participation as research subjects required in the Applied Psychology program, the following categories of personal data are processed in particular:
- Personal Identification Data
- Personal details
- Electronic identification data
- User accounts
- Communication data
- Project-related administrative and documentation data
Legal Bases
The processing of your personal data for the organization, documentation, and verification of the participant hours to be completed in the Applied Psychology degree program is based on the following legal grounds:
The processing is carried out for the performance of a task carried out in the public interest, in accordance with Article 6(1), first sentence, letter e of the GDPR. In addition, the processing is based on Section 12(1) of the Baden-Württemberg State Higher Education Act (LHG BW) in conjunction with the university’s data protection bylaw, as well as on Section 4 of the Baden-Württemberg State Data Protection Act (LDSG BW).
Recipients and Transfers to Third Countries
In the context of organizing, documenting, and verifying participant hours, access to personal data within the university is limited to those individuals entrusted with the organization and administration of participant hours in the Applied Psychology degree program.
For administrative processing, the university uses the SONA software from Sona Systems, Ltd., Trummi 5, 12616 Tallinn, Estonia. Processing is carried out on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
According to the available contractual and provider documentation, students’ personal data for EU clients is processed within the European Union. Under the current arrangement, this data is not transferred to a third country outside the European Union or the European Economic Area.
Retention Period
Personal data is generally stored for the duration of the student’s studies. It is deleted upon withdrawal from the university, provided that no statutory or other university-related retention obligations prevent such deletion.
Consequences of Non-Provision
The provision of personal data is necessary for the organization, administration, and documentation of the participant hours required for the Applied Psychology degree program. Without the processing of the data required for this purpose, the administration of course registrations and schedules, as well as proper documentation of participant hours, will not be possible or will be limited.
Automated Decision-Making
Automated decision-making within the meaning of Art. 22 of the GDPR does not take place. Should we use automated decision-making procedures in individual cases in the future, we will provide separate information about this, to the extent required by law.
Your Data Subject Rights
Data subjects may contact the data controller or the data protection officer directly with any questions regarding data protection and the processing of their personal data.
Right of Access (Art. 15 GDPR)
You may request information about your stored data.
Right to Rectification (Art. 16 GDPR)
You may have inaccurate data corrected.
Right to erasure (Art. 17 GDPR)
You may request that we erase your data, provided that the legal requirements for doing so are met.
Right to restriction of processing (Art. 18 GDPR)
You may request that the processing of your data be restricted, provided the legal requirements for doing so are met.
Right to Data Portability (Art. 20 GDPR)
To the extent technically feasible, you have the right to receive your data in a structured, machine-readable format.
Right to Object (Art. 21 GDPR)
You may object to the processing of your data at any time for reasons arising from your particular situation, provided that the processing is based on Art. 6(1)(e) or (f) of the GDPR.
Right to Withdraw Consent (Art. 7(3) GDPR)
If you have given your consent todata processing, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to withdrawal. Please direct your withdrawal to the contact information provided for the Data Protection Officer or the data controller.
Timeframes for Complying with Data Subjects’ Rights
We generally strive to respond to all requests within 30 days. However, this timeframe may be extended for reasons related to the specific right of the data subject or the complexity of your request.
Competent Supervisory Authority
We take your concerns and rights very seriously. However, if you believe that we have not adequately addressed your complaints or concerns, you have the right to file a complaint with a competent data protection authority:
The State Commissioner for Data Protection and Freedom of Information
P.O. Box 10 29 32
70025 Stuttgart
Phone: 07 11/61 55 41-0
Fax: 07 11/61 55 41-15