I. Name and address of controller
The controller as defined by the General Data Protection Regulation (GDPR) and other Member State national data protection laws, as well as in other data protection legislation, is:
Furtwangen University
Robert-Gerwig-Platz 1
78120 Furtwangen
Tel: 07723 920-0
Email: info(at)hs-furtwangen.de
represented by the President of Furtwangen University, Dr. Alexandra Bormann.
Website: www.hs-furtwangen.de
II. Name and address of data protection officer
The data protection officer appointed by the above-mentioned controller is:
Prof. Dr. jur. Bernhard Plum
Furtwangen University
Robert-Gerwig-Platz 1
78120 Furtwangen
Email: datenschutz(at)hs-furtwangen.de
III. Name and address of the IT Security Officer
The IT Security Officer of the Controller is:
Prof. Dr. Stefan Noll
Hochschule Furtwangen
Robert-Gerwig-Platz 1
78120 Furtwangen
Email: isb(at)hs-furtwangen.de
IV. Provision of the website and creation of log files
1. Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
Information about the browser type and version used
- The user's operating system
- The IP address of the user
- Date and time of access
- Websites accessed by the user's system via our website
- The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2 Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. e GDPR in conjunction with § 4 LDSG, § 2 LHG, § 3 EGovGBW.
3 Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. We process the data in order to be able to provide you with information on this website to fulfil our tasks in the public interest (public relations work at Furtwangen University).
4 Duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. Data logged when accessing the website will only be passed on to third parties if we are legally obliged to do so or if disclosure is necessary for legal or criminal prosecution in the event of attacks on Furtwangen University's Internet infrastructure. Data will not be passed on in other cases.
5 Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
V. Use of cookies
1. Description and scope of data processing
Our website only uses cookies where they are technically required or necessary to provide explicitly requested functions. For the purposes of web analysis, we use the etracker tool exclusively in cookie-free mode. This means that no cookies are set and no information is stored or read on the user's end device. We only store the following settings in cookies, if activated by the user:
- Search settings
- Integration of YouTube videos in extended data protection mode
There is no analysis of surfing behavior via cookies.
Further information on web analysis can be found under point VIII of this privacy policy.
2 Legal basis for data processing
The storage of technically required information on the user's terminal device is carried out in accordance with Section 25 (2) No. 2 TTDSG. Consent is not required for this.
The script required for the analysis is delivered via a separate subdomain (analyse.hs-furtwangen.de), which is technically assigned to our website. This serves the additional decoupling of the analysis process from our main domain as well as the further optimisation in terms of data protection.
3 Purpose of data processing
The purpose of using technically necessary cookies is to provide certain functions of the website and to facilitate its use (e.g. remembering language settings or media sharing). The data collected by technically necessary cookies is not used to create user profiles.
4 Duration of storage, objection and removal options
Cookies are stored on the user's computer and can be deleted or blocked at any time via the browser settings. Cookies that have already been saved can also be removed. If storage is deactivated, it may not be possible to use all functions of the website to their full extent.
To safeguard your right to object, a technically necessary cookie with a maximum duration of 50 years is set when you click on the opt-out link in order to save your decision. This cookie does not contain any personal data and is used exclusively to deactivate tracking.
VI. Newsletter
1. Description and scope of data processing
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the respective input mask is transmitted to us.
The following data is also collected during registration
- IP address of the accessing computer
- Date and time of registration
Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.
No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.
2 Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR if the user has given his consent.
3 Purpose of the data processing
The purpose of collecting the user's email address is to deliver the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
4 Duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.
The other personal data collected during the registration process will generally be deleted after a period of seven days.
5 Possibility of objection and cancellation
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
This also makes it possible to revoke consent to the storage of personal data collected during the registration process.
VII. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.
The following data is also stored when the message is sent:
- The IP address of the user
- Date and time of registration
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.
2 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR, provided that the processing of the data is necessary to ensure network and information security. If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3 Purpose of the data processing
The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
4 Duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5 Possibility of objection and cancellation
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
VIII. Web analysis and performance measurement for advertising measures
In order to optimise our digital information offering and ensure the efficiency of our public relations work within the scope of our public mandate, we use the services of etracker GmbH and Google Ads.
1. Web analysis for optimising the website (etracker)
On this website, we use services provided by etracker GmbH in Hamburg, Germany (www.etracker.com), for purely statistical analysis of usage data.
TDDDG and GDPR compliance: The service is configured in such a way that no cookies are used and no information is stored or read on the end device that would require active consent in accordance with Section 25 (1) TDDDG. Only information that is inevitably transmitted or transmitted due to browser settings (e.g., URL, user agent string) is processed. Processing is pseudonymized and does not serve to create individual profiles.
Legal basis: Processing serves the technically necessary optimization of our website in order to perform our public relations work, which is in the public interest. The necessity lies in ensuring the functionality of the website and the fulfillment of our information obligations.
Data processing is carried out on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 4 LDSG BW and § 2 (1) No. 9 LHG BW.
2. Advertising success measurement (Google Ads conversion tracking) – based on your consent
We also use the conversion data collected by etracker (as described in section 1) to measure the success of our advertising campaigns on Google (conversion tracking).
Consent requirement: Since this linking of user actions with advertising clicks (attribution using GCLID) primarily serves to increase economic efficiency and control automated bidding strategies, this processing is not considered strictly necessary for the performance of our public task within the meaning of Art. 6 (1) (e) GDPR.
Data processing for this purpose is therefore carried out exclusively on the basis of your voluntary, informed, and active consent:
- Art. 6 (1) (a) GDPR (consent to data processing)
- § 25 (1) TDDDG (consent to the storage and/or reading of information on the end device).
Details on processing: If you arrive at our website via a Google ad and have previously consented to conversion tracking, the action (conversion) is recorded by etracker. This information is then transmitted to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on the server side in order to analyze and assign the effectiveness of our Google Ads campaigns. The transmitted Google Click ID (GCLID) enables Google to assign the individual user action to the original advertising click, which enables profiling by Google.
Data transfer to the USA: When conversion data is transferred to Google, data processing may take place in the USA. We would like to point out that the USA is considered a third country in terms of data protection law.
The transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (DPF). Google LLC (USA) is certified under the DPF and has thus committed itself to a level of protection comparable to that of the GDPR.
3. Right to object and right of withdrawal
Right to object (web analysis, Section VIII. 1): You can object to the collection and storage of data by etracker (web analysis) at any time with effect for the future. Since the processing is based on Art. 6 (1) lit. e GDPR, you have a right to object in accordance with Art. 21 (1) GDPR. Your objection will prevent data collection.
Right of revocation (conversion tracking, Section VIII. 2): You can revoke your consent to conversion tracking at any time with future effect. The legality of the processing carried out on the basis of the consent until revocation remains unaffected.
Further information can be found at: External link opens in a new window:www.etracker.com/datenschutz
Object/revoke here
IX. YouTube
This website integrates a “YouTube plugin” into its information offering.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube is represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The embedded videos from YouTube are used within the scope of the permitted use by YouTube, which all users must accept. If you see any copyright infringements, please report this directly to YouTube.
We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's computer, but no personal cookie information is stored for playbacks of embedded videos. (Source: YouTube “Enabling enhanced privacy mode for embedded videos”). For more information, please refer to YouTube's general privacy policy. We do not collect any personal data in the context of embedding YouTube videos.
Further information on data processing and notes on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.
X. Social Media
In addition to this website, we also maintain presences with various social media providers in order to communicate with you in your familiar environment and to keep you informed. No data is transferred to the social media providers when you load the website. Only when you click on the button will you be taken to the social media provider. You can find out which specific data is processed by the social media providers in the data protection notices of the respective providers.
XI. Rights of the data subject
You have various rights as a data subject, in particular the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) or the right to restriction of processing (Art. 18 GDPR). You can find more information on the right to information and the right to erasure here:
- https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2013/02/DSK-Kurzpapier-6-Auskunftsrecht.pdf
- https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2017/08/DSK_KPNr_11_Recht-auf-Vergessenwerden.pdf
In the event that we process your data for the performance of a public task assigned to us pursuant to Art. 6 para. 1 lit. e GDPR or on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing (Art. 21 GDPR).
In the case of processing based on consent, this consent can be withdrawn at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. With regard to data that you have provided to us yourself, you may have a right to data portability (Art. 20 GDPR).
The assertion of your data subject rights is possible free of charge. If you believe that the processing of your personal data violates the GDPR, complaints can be submitted to us at datenschutz(at)hs-furtwangen.de under the subject “Data protection”. If you make use of your rights as a data subject, you will receive a response from us within one month at the latest.
You also have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data violates the GDPR. Complaints can be submitted to the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg - also online - at http://www.baden-wuerttemberg.datenschutz.de.