The following data protection declaration outlines the extent to which we process personal data, which personal data we process, the legal basis for this processing and when we delete your personal data.
Controller and data protection officer
The controller for the data processing outlined below is
73728 Esslingen am Neckar
Data processing in connection with our website
When you access a website, your browser regularly transmits data of your device, such as the IP address to which the website is sent, to the web server.
Each time you access our website, the following data are collected and stored in the log files of our system:
- IP address
- name of the accessed URL
- date and time of access
- data volume transferred
- information whether the access was successful
- browser type and version
- operating system
The legal basis for temporarily storing the data in order to provide the website is Art. 6 paragraph 1 (e) of the General Data Protection Regulation (GDPR) in conjunction with section 2 of the act on the higher education institutions in the Land of Baden-Württemberg (LHG). The legal basis for processing log files is Art. 6 paragraph 1 (f) GDPR. Processing log files is required to ensure the network security and information security of the website.
The data will be deleted once they are no longer necessary to achieve the purposes for which they were collected. For the data collected to provide the website, this is the case when the respective session has ended. Log files to ensure network security and information security will be deleted after 90 days.
Cookies may have an expiration date. You can see the expiration date of the cookies used on our website in the data protection settings. You can prevent us from storing cookies by blocking the storing of cookies by our website in your browser. You can then, however, no longer use the features controlled by cookies. You can also check which cookies are stored in your browser and delete individual cookies.
The following data may be stored and transmitted:
- language settings
- contrast setting
- font size setting
- keyboard shortcuts to use the website
- settings regarding embedded third-party content
- information about the settings chosen during your last visit so that these settings are stored
Embedded third-party content
Other data processing activities
Below you will find information on further data processing activities, besides those related to your use of our website for information purposes.
Our website contains contact forms. You are welcome to use these forms to contact us electronically. The data you enter into the contact forms (e.g. first name, last name, e-mail address, your message) are transferred to and stored by us. In addition, the following data are stored when you send your message to us:
- date and time of sending the message
Alternatively, you can use the e-mail addresses provided to contact us. In this case, the user’s personal data transmitted in the e-mail are stored.
No data are forwarded to third parties in this context. The data are only used for processing the conversation.
The legal basis for processing the data is Art. 6 paragraph 1 (e) GDPR in conjunction with section 2 LHG. In individual cases, data are processed after the user has given their consent in accordance with Art. 6 paragraph 1 (a) GDPR. The legal basis for processing data that are transmitted while sending an e-mail or submitting a contact form is Art. 6 paragraph 1 (f) GDPR if processing the data is required for ensuring network security and information security. This also constitutes the legitimate interest of the higher education institution in processing the data.
The data will be deleted once they are no longer necessary to achieve the purposes for which they were collected. The personal data from the contact form that are sent via e-mail will be deleted as soon as the conversation with the user has ended. The conversation has ended if the circumstances indicate that the matter in question has been conclusively clarified.
The additional personal data that are sent when the contact form is submitted will be deleted after 90 days.
Subscribing to our newsletter
On our website, there may be options to subscribe to our newsletter. We use a two-step subscription process. After we receive an e-mail address, we send a confirmation link to this e-mail address. In order to subscribe to our newsletter, you need to click on this link. The legal basis for this data processing is your consent in accordance with Art. 6 paragraph 1 (a) GDPR. The data processed in connection with the subscription are specified in the respective form (e.g. your e-mail address or name). In order to be able to provide proof, we store the date and time of your subscription/confirmation as well as your IP address when you subscribe to our newsletter. The legal basis for storing these data is Art. 6 paragraph 1 (f) GDPR. Our legitimate interest is to be able to provide proof of the subscriptions. You may unsubscribe from our newsletter at any time.
For sending out newsletters, we also work with contractors.
Rights of the data subject
Under data protection law, you have the following rights:
- the right of access in accordance with Art. 15 GDPR,
- the right to rectification in accordance with Art. 16 GDPR,
- the right to erasure in accordance with Art. 16 GDPR,
- the right to restriction of processing in accordance with Art. 18 GDPR,
- the right to object in accordance with Art. 21 GDPR relating to the particular situation of the data subject,
- as well as the right to data portability in accordance with Art. 20 GDPR.
In accordance with Art. 77 GDPR, you also have the option to lodge a complaint with the data protection supervisory authority responsible (Art. 51 paragraph 1 GDPR in conjunction with section 25 subsection 1 LDSG).
Information on your right to object according to Art. 21 GDPR
On grounds relating to your particular situation, you have the right to object to the processing of your personal data according to Art. 6 paragraph 1 (e) GDPR (data processing in the public interest, e.g. teaching and studying activities, research, further education) or (f) (processing for the purpose of a legitimate interest of the controller or a third party) at any time. We will then no longer process your personal data, unless we can prove legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Please send the revocation of your consent to the controller. Formal requirements must not be observed.