Privacy

This data protection declaration covers the principles of data processing at the Hochschule Darmstadt and the collection of data via its website.

The central website h-da.de presents Hochschule Darmstadt to the outside world, disseminates information and provides support for the tasks of the university. The website has an independent, uniform design. The departments have a certain freedom for individual design.

No responsibility is taken for the operation as well as the correctness and up-to-dateness of the information. The IT Services and Applications Department of Darmstadt University of Applied Sciences is responsible for the operation of the server. The respective editors are responsible for the organization in the individual departments. The Presidential Board has general responsibility for the content and decides on the admissibility of data in cases of doubt.

The university communication maintains the entry pages of the central appearance. Otherwise, the departments, faculties and institutions of the university are responsible for the content presented.

Darmstadt University of Applied Sciences takes the protection of personal data very seriously. We process personal data collected during visits to our websites in compliance with the applicable data protection regulations. In particular, the EU General Data Protection Regulation(DS-GVO), the Hessian Data Protection and Freedom of Information Act (HDSIG) and the German Telemedia Act (TMG) apply.

In the following, we inform you about the type, scope and purpose of the collection and use of personal data.

Your data will neither be published by us nor passed on to third parties without authorization.

When you visit our websites, our web servers automatically save each access in a log file. This data is stored separately from other data that you enter when using our offer. It is not possible for us to assign this data to a specific person. This data is used exclusively to check and ensure reliable technical operation of the web server. This data is deleted after a retention period of 7 days.

The following data is collected:

• IP address (anonymized)
• Date and time of access
• Name and URL of the accessed file
• Amount of data transferred
• Access status of the web server (file transferred, file not found, command not executed, etc.)

The login when accessing protected areas is partially logged in order to be able to recognize misuse attempts and password attacks. No data is stored that could be used to create personal profiles about user behavior.

The legal basis for the processing is Art. 6 para. 1 b) of the DS-GVO.

When you visit our websites, our web servers automatically save each access in a log file. The following data is recorded:

• IP address (anonymized)
• Date and time of access
• Name and URL of the accessed file
• Amount of data transferred
• Access status of the web server (file transferred, file not found, command not executed, etc.)

This data is stored separately from other data that you enter when using our offer.

Full data usage has a retention period of 90 days. Monthly logs (reduced data usage) have a retention period of one year. Deletion is automated on the web server.

Privacy policy on the use and application of Matomo.

The controller has integrated the Matomo component on this website. Matomo is an open source software tool for web analysis. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used for optimizing a website and for cost-benefit analysis of internet advertising.

The software is operated on the server of the controller, and the log files, which are sensitive under data protection law, are stored exclusively on this server.

The purpose of the Matomo component is to analyze the flow of visitors to our website. The controller uses the data and information obtained, among other things, to evaluate the use of this website in order to compile online reports showing the activities on our Internet pages.

Matomo sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. Setting the cookie enables us to analyze the use of our website. Each time one of the individual pages of this website is called up, the Internet browser on the information technology system of the data subject is automatically caused by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical procedure, we obtain knowledge of personal data, such as the IP address of the data subject, which serves us, among other things, to trace the origin of visitors and clicks.

By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website are stored. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to our server. This personal data is stored by us. We do not pass on this personal data to third parties.

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Matomo can be deleted at any time via an Internet browser or other software programs.

Furthermore, the data subject has the possibility to object to the collection of data generated by Matomo and related to a use of this website and to prevent such a collection.

To do this, the data subject must set "Do Not Track" in your browser or use the opt-out option provided in the privacy policy:

In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie is also deleted and may have to be reactivated by you.

Matomo is an open source project developed by various developers and the company InnoCraft Ltd.

InnoCraft Ltd.
150 Willis St, 6011 Wellington, New Zealand
contact@innocraft.com

More information and Matomo's applicable privacy policy can be found at https://matomo.org/privacy/.

In general, it is not necessary for you to provide personal data in order to use our website. However, in order for us to actually provide some of our services (e.g. registration for an event), we may need your personal data. Any use of your personal data will only be for the purposes stated and to the extent necessary to achieve these purposes. None of this data will be passed on to third parties without the prior consent of the user.

The transmitted data will be stored in a database accessible only to administrators.

Transmissions of personal data to state authorities are only carried out within the framework of mandatory national legal provisions.

The legal basis for processing is Art. 6 para. 1 b) (contract performance) and c) (legal requirements) of the DS-GVO.

Insofar as you have given us your consent to data processing (for example, via a contact form or a newsletter request), your data will only be processed for the purposes specified therein.

The legal basis for the processing is Art. 6 (1) a) of the DS-GVO (consent).

Our Internet pages use cookies in several places. They serve to make our offer more user-friendly and effective. Cookies are small text files that are stored by the browser on your computer. Most of the cookies we use are so-called session cookies, which are deleted when you end your browser session. Cookies do not cause any damage to your computer and do not contain viruses.

The following cookies are set:

• Session Cookie (for session recognition, lifetime: one session).
• TYPO3 session cookie (for session recognition, lifetime, one session).

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers.

If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

The legal basis for the processing is Art. 6 para. 1 b) DS-GVO.

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and TV shows, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

By each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific sub-page of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube at the time of calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

In your browser settings, you can specify whether cookies may be set or not.

The legal basis for the processing is Art. 6 (1) b) DS-GVO.

The controller has integrated components of the company Facebook on this website. Facebook is a social network.

A social network is a social meeting place operated on the Internet, an online community that generally allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for sharing opinions and experiences or enables the Internet community to provide personal or company-related information. Among other things, Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.

The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of the individual pages of this website operated by the data controller is called up and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. Within the scope of this technical procedure, Facebook receives knowledge of which specific sub-page of our website is visited by the data subject.

If the data subject is logged into Facebook at the same time, Facebook recognizes which specific sub-page of our website the data subject is visiting with each call-up of our website by the data subject and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is simultaneously logged into Facebook at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.

The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

Our technical and organizational security measures, with which we protect all data from access by unauthorized persons, are always kept up to date. Personal information is always transmitted in encrypted form.

Our websites may contain links to websites of other providers. We would like to point out that this data protection declaration applies exclusively to the web pages of the central presence of Darmstadt University of Applied Sciences. We have no influence on and do not control that other providers comply with the applicable data protection provisions.

As a data subject, you have various rights:

• Right to revoke consent: You may revoke any consent you have given to us at any time. The data processing based on the revoked consent may then no longer be continued for the future.
  
• Right to information: You can request information about your personal data processed by us. This applies in particular to the purposes of the data processing, the categories of personal data, if applicable, the categories of recipients, the storage period, if applicable, the origin of your data as well as, if applicable, the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
  
• Right of rectification: You can request the correction of incorrect or the completion of your personal data stored by us.
  
• Right to erasure: You may request the erasure of your personal data stored by us, unless its processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
  
• Right to restriction of processing: you may request restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure. In addition, you have this right if we no longer need the data, but you need it to assert, exercise or defend legal claims. In addition, you have this right if you have objected to the processing of your personal data;
  
• Right to data portability: you can request that we transfer your personal data that you have provided to us in a structured, common and machine-readable format. Alternatively, you may request the direct transfer of the personal data you have provided to us to another controller, where this is possible.
  
• Right to complain: You can complain to the supervisory authority responsible for us, e.g. if you believe that we are processing your personal data in an unlawful manner.

The competent supervisory authority is:

The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: 0611 1408-0
E-mail: poststelle@datenschutz-hessen.de
Internet: http: //www.datenschutz.hessen.de

If we process your personal data on the basis of a legitimate interest, you have the right to object to this processing. If you wish to exercise your right to object, a notification in text form is sufficient. You are therefore welcome to write to us, send a fax or contact us by e-mail.

The data protection officer of Darmstadt University of Applied Sciences can be reached at datenschutz@h-da.de.

By using our website, you consent to the use of data as described above. This privacy policy is immediately valid and replaces all previous statements.