Data protection declaration

When you visit our websites, personal data is processed. Personal data is all information that can be used to identify you personally.

We take the protection of your personal data very seriously. Your personal data will be treated confidentially in accordance with this privacy policy and the statutory data protection regulations. This data protection declaration informs you about the type, scope, and purpose of processing personal data within our online services.

With regard to the terms used, such as “processing" or "controller" we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Who is responsible for data processing on this website?

Responsible for the data processing on this website is:

University of Hohenheim
It is statutorily represented by the president, Prof. Dr. Christoph Schneider.
70593 Stuttgart
Tel. +49 711 459 0
Email

“Controller” shall mean the natural or legal person, public authority, agency, or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.

The Data Protection Commissioner according to Art. 37 EU-GDPR is:

UIMC Dr. Voßbein GmbH & Co. KG
Dr. Heiko Haaz
Otto-Hausmann-Ring 113
42115 Wuppertal
datenschutz@uni-hohenheim.de

What rights do you have regarding your data?

You have the right at any time and free of charge to receive information about the origin, recipient, and purpose of your stored personal data. You also have the right to demand the correction, blocking, or erasure of this data. You can contact us at any time at the address given in the legal notice for this and other questions on the subject of data protection. Furthermore, you have the right of appeal to the competent supervisory authority.

Right of revocation
Many data processing operations are only possible with your express consent, e.g. when we publish pictures which are subject to your copyright or on which you are depicted. You have the right to revoke consent granted in accordance with Art. 7(3) GDPR with effect for the future. For this purpose an informal email to us is sufficient.

Right to object
You may object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection may be made in particular against processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority
If there are data protection violations, you as the data subject have the right to lodge a complaint to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our organization is based. List of Data Protection Commissioners

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place as far as it is technically feasible.

Access, blocking, erasure
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to rectify, block, or erase this data. You can contact us at any time at the address given in the legal notice for this and other questions on the subject of personal data.

Disclosure of data
Personal data will not be disclosed to third parties without your express consent, unless we are legally obliged to do so (e.g. disclosure to authorities for the investigation of criminal offenses).

What data is collected on our website?

Access protocols
When you call up our pages, our web server automatically processes the information that your browser transmits to us on the basis of Art. 32(1) let. b) EU-GDPR in conjunction with Art. 6(1) let. c) EU-GDPR:

  • Browser type and language
  • Operating system used
  • The page you last visited (referrer URL)
  • Date and time of the server request
  • Amount of data transferred and the access status (file transferred, file not found, etc.)
  • IP address

We collect and use this data exclusively in a non-personal form, i.e. no personal evaluation takes place. Its primary purpose is to ensure security and to guarantee error-free provision of the website and also for statistical purposes. This data is not consolidated with other data sources. This data is automatically deleted after 8 days.

Cookies
The internet pages partly use cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are session cookies which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

Cookies which are necessary for the provision of certain functions requested by you are stored on the basis of Sec. 4 of the State Data Protection Act of Baden-Württemberg (as amended on 6 June 2018) in conjunction with Art. 6(1) let. e EU-GDPR. The website operator is interested in the analysis, optimization, and economic operation of its services.

Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this data protection declaration.

Sending of newsletters
The purpose of sending the newsletter is to provide information on various topics of the University for specific occasions. To subscribe to the newsletter, an email address is required. The legal basis for the processing is Article 6(1) let. a) of the GDPR. You may revoke this consent at any time.

Contacting
If you send us enquiries (e.g. by contact form or email), your details from the enquiry, including the contact details you provided there, will be used in accordance with Art. 6(1) let. b) GDPR for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. If this data is no longer relevant, it will be deleted. Furthermore, the statutory archiving obligations apply.

Web analysis with Matomo
We use the open source software tool Matomo on our website to analyze the surfing behavior of our users. Matomo runs on our own servers, so the data is only stored there. The data is not passed on to third parties. Matomo is set so that the IP addresses are not stored in full, but the last two bytes of the IP address are masked (ex: 192.168.0.0). In this way, an assignment of the IP address to the user's computer is no longer possible.

As soon as a page from our website is called up, the following data is stored:

  1. the first two bytes of the IP address of the user's system.
  2. the website called up
  3. the website from which the user reached the accessed website (referrer)
  4. the subpages that are accessed from the accessed website
  5. the time spent on the website
  6. the frequency with which the website is accessed

External services

Google Maps
On our website we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for the display of interactive maps to visually present geographical information. By using this service, you can, for example, display our location and make it easier for you to find us. When calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information is directly associated with your account. If you do not want to be associated with your Google profile, you will need to log out of your Google account. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. In particular, such an evaluation is carried out in accordance with Art. 6(1) letter f GDPR on the basis of Google’s legitimate interests in the display of personalized advertising, market research, and/or needs-based design of its website. You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right. Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU. If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, you can also completely deactivate the web service of Google Maps by switching off the application JavaScript in your browser. Google Maps and thus the map display on this website can then not be used. The use of Google Maps is in the interest of an attractive presentation of our online offers and easy findability of the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Article 6(1) let. f) of the GDPR. Further information on terms of use and data protection

YouTube in enhanced privacy mode
This website integrates YouTube videos into its information offering. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites where such a video is embedded, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube uses cookies to collect video statistics, prevent fraud, and improve user experience, among other things. Through the YouTube cookies, the website operators receive statistical values for the retrieval of individual videos embedded in the website without a reference to the respective user. This website uses embedded YouTube videos in enhanced privacy mode. This means: YouTube does not store cookies for a user who visits a website with an embedded YouTube video, but does not click on the video to start playback. If the YouTube video is clicked, YouTube may store cookies on the user’s computer. However, no personal cookie information is stored for playback of embedded videos. Further information on terms of use and data protection

BITE We
post a list of our job openings on our website. To do this, a JavaScript widget from BITE GmbH, Magirus-Deutz-Straße 12, 89077 Ulm, is loaded. When you visit this page, your IP address is transmitted to BITE’s servers for technical reasons in order to deliver the page content to your browser. No cookies are set, and no information is stored on or retrieved from your device; tracking technologies are not used. Your IP address may be temporarily stored in server logs for operational and IT security purposes and will subsequently be deleted. We have entered into a data processing agreement (Art. 28 of the GDPR) with the service provider; processing takes place exclusively in computing centers in Germany. The legal basis is Article 6(1)(e) of the GDPR in conjunction with Section 4 of the LDSG BW (performance of a task carried out in the public interest: the university’s recruitment of staff). You have the right to object to this processing on grounds relating to your particular situation, in accordance with Article 21(1) of the GDPR. 

Social Media

Contract processor in managing the social media channels

The University of Hohenheim uses the SocialHub product from maloon GmbH to manage all social media channels, to plan and publish content for social networks, to ensure that no relevant posts are missed, and to interact with users. Maloon GmbH; Schütterlettenweg 4; 85053 Ingolstadt; Germany; Phone: 0049 (0)841 493 990-0; Fax: 0049 (0)841 493 990-10; email: hallo@socialhub.io; Web: https://socialhub.io/ our processor according to Art. 28 GDPR.

There is a contract for order processing with the service provider, who processes all data exclusively in Germany and is bound by the contract to our instructions. No data is processed for the service provider's own purposes. The responsibility for data processing remains entirely with the University of Hohenheim when using the service of the processor.

The following user data is processed in the tool when you contact or mention the University of Hohenheim or post and/or comment on the respective accounts:

  • Profile name and photo
  • Date and time of the post or comment
  • Content of the post or comment
  • User history if the user has had previous contact with the University of Hohenheim.

Data security

We use technical and organizational security measures to protect personal data that is created or collected, in particular against accidental or intentional manipulation, loss, destruction, or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments. Nevertheless, we would like to point out that data transmission over the Internet may have security gaps. A complete protection of data against access by third parties is not possible.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Shield

The University of Hohenheim is developing solutions in order to put the processes concerned on a different basis or to use alternative mechanisms.