Privacy Policy

The following data protection declaration outlines the extent to which we process personal data, which personal data we process, the legal basis for this processing and when we delete your personal data.

Controller and data protection officer

The controller for the data processing outlined below is

Wolfgang Gruel
Kanalstr. 33
73728 Esslingen am Neckar

Data processing in connection with our website

When you access a website, your browser regularly transmits data of your device, such as the IP address to which the website is sent, to the web server.

Each time you access our website, the following data are collected and stored in the log files of our system:

  • IP address
  • name of the accessed URL
  • date and time of access
  • data volume transferred
  • information whether the access was successful
  • browser type and version
  • operating system

The legal basis for temporarily storing the data in order to provide the website is Art. 6 paragraph 1 (e) of the General Data Protection Regulation (GDPR) in conjunction with section 2 of the act on the higher education institutions in the Land of Baden-Württemberg (LHG). The legal basis for processing log files is Art. 6 paragraph 1 (f) GDPR. Processing log files is required to ensure the network security and information security of the website.

The data will be deleted once they are no longer necessary to achieve the purposes for which they were collected. For the data collected to provide the website, this is the case when the respective session has ended. Log files to ensure network security and information security will be deleted after 90 days.

Use of cookies

We may use cookies on our website. Cookies are text files stored in the Internet browser or by the Internet browser on the user’s computer system. If a user accesses a website, a cookie may be stored in the user’s operating system. The cookie contains a characteristic string that enables a clear identification of the browser when the website is accessed again.

Cookies may have an expiration date. You can see the expiration date of the cookies used on our website in the data protection settings. You can prevent us from storing cookies by blocking the storing of cookies by our website in your browser. You can then, however, no longer use the features controlled by cookies. You can also check which cookies are stored in your browser and delete individual cookies.

We may use cookies to improve your experience on our website. The legal basis for processing personal data by using cookies that are required for technical reasons is Art. 6 paragraph 1 (e) GDPR in conjunction with section 2 LHG.

The following data may be stored and transmitted:

  • language settings
  • contrast setting
  • font size setting
  • keyboard shortcuts to use the website
  • settings regarding embedded third-party content
  • information about the settings chosen during your last visit so that these settings are stored

Embedded third-party content

Embedded videos

We use embedded YouTube videos in the extended data protection mode. This means: YouTube does not store cookies for users who access a web page containing an embedded YouTube video player but do not click on the video to watch it. If a user clicks on the YouTube video player, YouTube will be informed about the IP address and may store cookies on the user’s computer. However, personal cookie information will not be stored if you click on embedded videos. Before the connection with third-party content is established, our website will expressly notify you of the external content and potential additional data processing activities by third parties. You can also consent to the display of third-party content in our tool for data protection settings. In this case, the third-party content is reloaded and you will not receive a separate notification for the embedded content since you already received the information in the tool for data protection settings. You can adjust these settings at any time. For more details on data processing by YouTube, please see the Privacy Policy of YouTube. We do not collect personal data within the context of embedding YouTube videos.

Other data processing activities

Below you will find information on further data processing activities, besides those related to your use of our website for information purposes.

Contacting us

Our website contains contact forms. You are welcome to use these forms to contact us electronically. The data you enter into the contact forms (e.g. first name, last name, e-mail address, your message) are transferred to and stored by us. In addition, the following data are stored when you send your message to us:

  • date and time of sending the message

Alternatively, you can use the e-mail addresses provided to contact us. In this case, the user’s personal data transmitted in the e-mail are stored.

No data are forwarded to third parties in this context. The data are only used for processing the conversation.

The legal basis for processing the data is Art. 6 paragraph 1 (e) GDPR in conjunction with section 2 LHG. In individual cases, data are processed after the user has given their consent in accordance with Art. 6 paragraph 1 (a) GDPR. The legal basis for processing data that are transmitted while sending an e-mail or submitting a contact form is Art. 6 paragraph 1 (f) GDPR if processing the data is required for ensuring network security and information security. This also constitutes the legitimate interest of the higher education institution in processing the data.

The data will be deleted once they are no longer necessary to achieve the purposes for which they were collected. The personal data from the contact form that are sent via e-mail will be deleted as soon as the conversation with the user has ended. The conversation has ended if the circumstances indicate that the matter in question has been conclusively clarified.

The additional personal data that are sent when the contact form is submitted will be deleted after 90 days.

Subscribing to our newsletter

On our website, there may be options to subscribe to our newsletter. We use a two-step subscription process. After we receive an e-mail address, we send a confirmation link to this e-mail address. In order to subscribe to our newsletter, you need to click on this link. The legal basis for this data processing is your consent in accordance with Art. 6 paragraph 1 (a) GDPR. The data processed in connection with the subscription are specified in the respective form (e.g. your e-mail address or name). In order to be able to provide proof, we store the date and time of your subscription/confirmation as well as your IP address when you subscribe to our newsletter. The legal basis for storing these data is Art. 6 paragraph 1 (f) GDPR. Our legitimate interest is to be able to provide proof of the subscriptions. You may unsubscribe from our newsletter at any time.

For sending out newsletters, we also work with contractors.

Rights of the data subject

Under data protection law, you have the following rights:

  • the right of access in accordance with Art. 15 GDPR,
  • the right to rectification in accordance with Art. 16 GDPR,
  • the right to erasure in accordance with Art. 16 GDPR,
  • the right to restriction of processing in accordance with Art. 18 GDPR,
  • the right to object in accordance with Art. 21 GDPR relating to the particular situation of the data subject,
  • as well as the right to data portability in accordance with Art. 20 GDPR.

In accordance with Art. 77 GDPR, you also have the option to lodge a complaint with the data protection supervisory authority responsible (Art. 51 paragraph 1 GDPR in conjunction with section 25 subsection 1 LDSG).

Information on your right to object according to Art. 21 GDPR

On grounds relating to your particular situation, you have the right to object to the processing of your personal data according to Art. 6 paragraph 1 (e) GDPR (data processing in the public interest, e.g. teaching and studying activities, research, further education) or (f) (processing for the purpose of a legitimate interest of the controller or a third party) at any time. We will then no longer process your personal data, unless we can prove legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Please send the revocation of your consent to the controller. Formal requirements must not be observed.