Privacy Policy

1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws is:

Hochschule Anhalt
represented by the President
Bernburger Straße 55
06366 Köthen
Germany
Email: info(at)hs-anhalt.de

2. Contact Details of the Data Protection Officer

Hochschule Anhalt
Data Protection Officer
Bernburger Straße 55
06366 Köthen
Germany
Email: dsb(at)hs-anhalt.de

3. General Information on Data Processing

3.1 Scope of the Processing of Personal Data

We process personal data of our users only to the extent necessary to perform our tasks, in particular to provide a functioning website and our content and services. The processing of personal data of our users otherwise regularly takes place only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal provisions.

3.2 Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data required to fulfil a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which the University is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Insofar as the processing of personal data is necessary in the public interest or for the performance of our sovereign tasks, Art. 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA serves as the legal basis for the processing.

3.3 Erasure of Data and Storage Period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

4. Provision of the Website and Creation of Log Files

4.1 Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Your IP address at the time of page access
Date of page access
Time of page access
Your current location (country and city)
Your language (that of the operating system)
Version of your operating system
Device (PC, tablet, smartphone, etc.)
Browser and all extensions used
Resolution of the device
Source of your visit (e.g. search engine or social media)

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

4.2 Legal Basis for the Data Processing

The legal basis for the temporary storage of the data and log files is Art. 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA.

4.3 Purpose of the Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

4.4 Duration of Storage

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.

In the case of data stored in log files, this is the case after 14 days at the latest. Further storage is possible. In this case, the IP addresses of users are erased or anonymized so that it is no longer possible to identify the accessing client.

4.5 Right to Object and Removal

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, the user has no option to object.

5. Use of Cookies

5.1 Description and Scope of Data Processing

Our website uses only essential (technically necessary) cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. These cookies contain a characteristic string of characters that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change (e.g. to protect against cross-site request forgery and to keep you logged in during a session).

The following data is stored and transmitted in the cookies:

Session ID

As these cookies are technically necessary to provide the functionality of the website that you have requested, no separate consent is required for their use (§ 25(2) No. 2 TTDSG).

6. Contact Forms and Email Contact

6.1 Description and Scope of Data Processing

Our website contains contact forms that can be used for electronic contact. If a user makes use of this option, the data entered in the input form is transmitted to us and stored.

This data collected generally includes:

Name
Email address
Reason for contact

At the time the message is sent, the following data is also stored:

The user's IP address
Date and time of transmission

Your consent is obtained for the processing of the data as part of the sending process, and reference is made to this privacy policy.

Alternatively, contact is possible via the email address provided. In this case, the personal data of the user transmitted with the email is stored.

In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.

6.2 Legal Basis for the Data Processing

The legal basis for processing the data, where the user's consent has been obtained, is Art. 6(1)(a) GDPR.

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(e) GDPR in conjunction with §§ 4-9 DSAG LSA.

6.3 Purpose of the Data Processing

The processing of personal data from the input form serves solely to process the contact request. In the case of contact by email, this also includes processing the data to fulfil the tasks assigned to us.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

6.4 Duration of Storage

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input form and data sent by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively resolved.

Additional personal data collected during the sending process is erased after a period of 14 days at the latest.

6.5 Right to Object and Removal

The user has the option at any time to revoke consent to the processing of personal data. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

To exercise these rights, please contact us by email at betroffenenrechte(at)hs-anhalt.de.

All personal data stored in the course of contact will be erased in this case.

7. Registration and User Account

7.1 Scope of the Processing of Personal Data

Our website offers users the option to register by providing personal data. The data is entered into an input form and transmitted to us and stored. The following data is collected as part of the registration process:

First and last name
Email address
Password (stored as a hash, not in plain text)

At the time of registration, the following data is also stored:

The user's IP address
Date and time of registration

Registration is currently limited to email addresses of Hochschule Anhalt and requires confirmation of the email address via a confirmation link sent by email before the first login. As part of the registration process, the user's consent to the processing of this data is obtained.

7.2 Legal Basis for the Processing of Personal Data

The legal basis for processing the data, where the user's consent has been obtained, is Art. 6(1)(a) GDPR.

If registration serves to fulfil a contract to which the user is a party, or to carry out pre-contractual measures, Art. 6(1)(b) GDPR serves as an additional legal basis for processing the data.

7.3 Purpose of the Data Processing

Registration by the user serves to inform and provide a personalized selection of continuing education offerings. This enables users to compile their own curriculum.

7.4 Duration of Storage

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For carrying out pre-contractual measures, this is the case when the data is no longer required to perform the contract. Even after conclusion of the contract, it may be necessary to store the contracting party's personal data in order to comply with contractual or legal obligations.

8. Data Transfer to Cooperation Partners

The website is part of a project of the universities of the State of Saxony-Anhalt. Should you submit an inquiry regarding offerings of a cooperating university via this website, we will forward this inquiry to the respective university. The cooperating university is independently responsible for processing the transmitted data. The legal basis for the transfer is Art. 6(1)(e) GDPR in conjunction with § 4 No. 2 DSAG LSA and § 3 HSG LSA.

9. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the controller:

Right of access under Art. 15 GDPR: You have the right to request confirmation as to whether personal data concerning you is being processed.
Right to rectification under Art. 16 GDPR: You have the right to rectification or completion if personal data concerning you is incorrect or incomplete.
Right to erasure under Art. 17 GDPR: You may request the controller to erase personal data concerning you without delay, among other things if the data is no longer necessary for the purpose it was collected for or if the processing is unlawful.
Right to object under Art. 21 GDPR: You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you.
Right to lodge a complaint under Art. 77 GDPR: You have the right to lodge a complaint with the State Commissioner for Data Protection of Saxony-Anhalt if you believe that the processing of personal data concerning you violates the GDPR.

To exercise your rights under Art. 15 - 21 GDPR, please contact us at betroffenenrechte(at)hs-anhalt.de or the postal address given above.