NEW Data protection

Thank you for visiting our website and for your interest in our university and our courses, content and services. The protection of your personal data is very important to us. Ravensburg-Weingarten University of Applied Sciences (hereinafter referred to as "RWU", "we" or "us") attaches great importance to the security of users' data and compliance with data protection regulations.

DEFINITIONS

PRINCIPLES FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

It is generally possible to use our website without providing any personal data. If you wish to make use of special services of our university via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will obtain the consent of the data subject.

PROCESSING OF PERSONAL DATA

AUTOMATED DATA PROCESSING

You can visit our website without actively providing any personal data. However, we automatically store access data (server log files), such as the date of the request, the name of the requested file and the browser information (so-called user agent), for a period of 7 days each time the website is accessed. This data is analyzed exclusively to improve our offer and does not allow any conclusions to be drawn about your person. This data is not merged with other data sources. The legal basis for processing the data is Art. 6 para. 1 lit. e) in conjunction with Art. 6 para. 3 lit. b) GDPR in conjunction with Section 4 of the Baden-Württemberg State Data Protection Act (LDSG), in the version valid from 21.06.2018, Section 2 of the Baden-Württemberg State Higher Education Act (LHG).

We process and use the data for the following purposes

1. Provision of the RWU website,
2. Improvement of our websites and
3. Prevention and detection of errors/malfunctions and misuse of the websites

Data processing of this kind is carried out either to fulfill the contract for the use of the RWU website or we pursue a public interest in ensuring the functionality and error-free operation of RWU and adapting this website to the requirements of the users.

Web analysis and optimization

We use tools for web analysis and reach measurement so that we can evaluate visitor flows on our website. For this purpose, we collect information about the behavior and interests of our visitors. We can also use the information collected to determine whether our online offering needs to be optimized or adapted.

We use special technologies to process information for the purpose of measuring reach and optimization. The stored data may include content viewed, online presences visited, settings and functions and systems used. As a rule, however, no clear user data is processed for the purposes described. In this case, the data is modified in such a way that neither we nor the provider of the tool used know the actual identity of the user. The data modified in this way is often stored in user profiles.

Categories of data subjects: Website visitors
Categories of data: User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information)
Purposes of processing: Website analysis, reach measurement, utilization and evaluation of website interaction
Legal basis: Public interest pursuant to Art. 6 para. 1 lit. e) GDPR in conjunction with Art. 6 para. 3 lit. b) GDPR in conjunction with Section 4 LDSG, Section 2 LHG

Matomo

Provider: InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand
Privacy Policy: https://matomo.org/privacy-policy/ 
Specific information about matomo: We operate Matomo on premise, i.e. in our own data center. Your data is not transferred to third parties.

GOOGLE WEBFONTS

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de 
Specific information about Google: We operate Google Webfonts on premise. For this purpose, we have stored the fonts we use with us in order to prevent your data from being transmitted to the provider. Your data will not be transferred to third parties.

Social media

You can find usage concepts and data protection information for our social media channels here.

OUR SERVICES

E-MAIL CONTACT

If you send us inquiries or information by e-mail, your details (e-mail address, content of your e-mail, subject of your e-mail and date/time) including the contact details you provide there (name, surname, telephone number if applicable, address) will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis for the collection and processing of data is Art. 6 para. 1 lit. a) GDPR. The user is advised that emails can be read or changed without authorization or detection during transmission. RWU uses software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam due to certain characteristics. The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

ONLINE JOB PORTAL

The university offers an online job portal to which we link on our website. You can find out more about data processing in the context of an application via the job portal in the detailed information on data protection on our portal. The processing of data is mainly based on Art. 6 para. 1 lit. e) GDPR in conjunction with Art. 6 para. 3 GDPR and § 15 LDSG, or for civil servant relationships in conjunction with §§ 83 to 85 a LBG as well as on the basis of the LHG and the Baden-Württemberg University Data Protection Ordinance in the context of studying and teaching at RWU.

bite Online job portal

Provider: BITE GmbH, Magirus-Deutz-Straße 12, 89077 Ulm
Privacy policy: https://www.b-ite.de/legal-notice.html/ 
Specific information on our job portal: We use a specialized service provider for our applicant portal. The associated data processing has been regulated by concluding corresponding contracts.

Active recruitment

As part of our search for suitable applicants for advertised professorships, we research expert databases and career platforms, among other things. With the help of automated searches, we use the personal data published by potential candidates to check whether their qualifications match our requirements profile. We may then contact the candidates to draw their attention to our job advertisement.

Categories of data subjects: Potential candidates for vacant positions
Categories of data: Personal master data (e.g. name, address), communication data (e.g. telephone, email), content data (e.g. text details, photographs, videos), age if applicable, professional qualifications if applicable, CV and passport photo if applicable, assessments and evaluations if applicable, further training certificates if applicable
Purposes of processing: Attracting potential new employees
Legal bases: Art.6 lit. e GDPR in conjunction with. § Section 48 para. 3a LHG, Art. 6 para. 1 lit. e GDPR in conjunction with. § Section 12 (1) LHG, Section 48 LHG

CRM system

We use the SmartWe CRM system from CAS Software AG to systematically maintain contacts. This is used to document contact information, communication and associated processes in order to structure and efficiently organize the exchange of information with various target groups (e.g. schools, contact persons at the employment agency, alumni or company contacts). Data processing is carried out in the performance of a task carried out in the public interest in accordance with Art. 6 para. 1 lit. e GDPR.

Mailing dispatch

We use the email service provider CleverReach to send information and event announcements. The recipient groups are addressed specifically and for a specific purpose (e.g. schools, alumni, event participants, prospective students). Registration for our mailings usually takes place via a double opt-in procedure, in which the registration only becomes effective after a confirmation email. Data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. e GDPR (task in the public interest), depending on the respective purpose of the contact.

Interface of both services

The Syncler interface solution is used for the technical integration of the systems. This is used for automated and secure data transfer between SmartWe and CleverReach to ensure data consistency and avoid duplicate entries. The technical implementation, maintenance and data processing via the Syncler interface solution is carried out by Sellmore GmbH exclusively for the intended purposes and on the basis of contractual order processing in accordance with Art. 28 GDPR.

All service providers involved have been carefully selected and order processing contracts have been concluded with them in accordance with Art. 28 GDPR, which oblige them to comply with data protection regulations.

DATA TRANSMISSION

INTERNAL DATA TRANSMISSION

RWU is a state university based in Weingarten. We transfer your data internally to the administration and HR department in order to fulfill our contractual or legal obligations. Your data will only be transferred or disclosed to the extent necessary in compliance with the relevant data protection regulations.

DATA TRANSMISSION ACROSS THE UNIVERSITY

The data that you transmit to us will be processed within the university for administrative purposes. The exchange of data takes place either to fulfill a contract, due to a public interest or as a condition of use for the websites. If the processing of your data takes place outside the European Economic Area (EEA), this is done in compliance with all applicable data protection laws and in particular in accordance with Art. 44 f. GDPR.

TRANSMISSION TO OTHER RECIPIENTS

We inform you that the provision of personal data is partly required by law or may also result from contractual regulations (e.g. information on the contractual partner).
If the processing of your data takes place outside the EEA, this transfer takes place in compliance with all applicable data protection laws and in particular in accordance with Art. 44 f. GDPR. GDPR.

TRANSFER TO A THIRD COUNTRY

We transfer your data to countries outside the EEA (so-called third countries). This is done for the purposes mentioned above (transfer to other recipients). The transfer only takes place to fulfill our contractual and legal obligations or on the basis of your consent. In addition, this transfer takes place in compliance with all applicable data protection laws and in particular in accordance with Art. 44 f. GDPR; in particular either on the basis of adequacy decisions issued by the European Commission or on the basis of certain guarantees (e.g. standard data protection clauses, etc.).

EXISTENCE OF AUTOMATED DECISION-MAKING, INCLUDING PROFILING

We do not use automated decision-making or profiling.

STORAGE PERIOD

We generally store your data for as long as this is necessary to provide our services or fulfill our tasks or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject. In all other cases, we delete your personal data after the purpose has been fulfilled, with the exception of data that we must continue to store in order to fulfill legal obligations (e.g. we are obliged to retain documents such as contracts and invoices for a certain period of time due to retention periods under tax and commercial law).

TECHNICAL SECURITY

RWU uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. This site uses SSL (Secure Socket Layer) encryption in conjunction with the highest level of encryption supported by your browser for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

LEGAL BASIS OF THE PROCESSING

Art. 6 para. 1 lit. a) GDPR serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Art. 6 para. 1 lit. b) GDPR. The same applies to processing operations that are necessary for the performance of pre-contractual measures. 
If we are subject to a legal obligation that requires the processing of personal data, the processing is based on Art. 6 (1) (c) GDPR. 
If the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, the processing is based on Art. 6 (d) GDPR. 
If the processing is necessary for the performance of a task carried out by RWU in the public interest or in the exercise of official authority, Art. 6 para. 1 lit. e), para. 3 sentence 1 lit. b) GDPR in conjunction with § 4 LDSG serves as the legal basis for the processing.

NOTE FOR MINORS

This online offer is not aimed at minors under the age of 16. Persons who have not yet reached the age of 16 may not transmit any personal data to RWU without the consent of their legal guardians.

RIGHTS OF THE DATA SUBJECT

In accordance with Art. 15 GDPR, you have the right to request confirmation as to whether we are processing data concerning you. You can request information about this data as well as the further information listed in Art. 15 para. 1 GDPR and a copy of your data.
In accordance with Art. 16 GDPR, you have the right to request the correction or completion of the data concerning you and processed by us.
In accordance with Art. 17 GDPR, you have the right to request the immediate deletion of the data concerning you. Alternatively, you can request that we restrict the processing of your data in accordance with Art. 18 GDPR. 
In accordance with Art. 20 GDPR, you have the right to request the provision of the data you have provided to us and to request that it be transferred to another controller. If your personal data is processed on the basis of Art. 6 para. 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
You also have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.

REVOCATION OF YOUR CONSENT TO DATA PROCESSING

Some data processing operations are only possible with your express consent. You have the option of withdrawing consent that you have already given at any time. All you need to do is send an informal email to dsb@rwu.de. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

EXTERNAL LINKS

On our website you will find links to the websites of other providers. We would like to point out that we have no influence on the content of the linked websites and the compliance with data protection regulations by their providers.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to adapt this data protection notice at any time in the event of changes to our website and in compliance with the applicable data protection regulations so that it complies with the legal requirements.