Data protection policy
1. Data protection at a glance
General references
The following references provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection policy listed below this text.
Data collection on our website
Who is responsible for data collection on this website? The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website. How do we collect your data? On the one hand, your data is collected when you provide it to us. This can be data that you enter into a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time the page was visited). This data is collected automatically as soon as you enter our website. What do we use your data for? Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyse your user behaviour. What rights do you have regarding your data? You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this and other questions on the subject of data protection. Furthermore, you have the right to complain to the competent supervisory authority.
Analysis tools and third-party tools
When you visit our website, your surfing behaviour can be statistically evaluated. This happens mainly with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the data protection policy below. You can object to this analysis. We will inform you about how you can object in this data protection policy.
2. General notes and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection policy. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This data protection policy explains what data we collect and what we use it for. It also explains how this is done and for what purpose. We would like to point out that data transmission on the Internet (e.g. communication by email) can be insecure. A complete protection of data against access by third parties is not possible.
Note on the responsible body
The body responsible for data processing on this website is the: Studentenwerk Oberfranken
Universitätsstraße 30
95447 Bayreuth Tel: 0921 5559-00
Email: info@studentenwerk-oberfranken.de The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Contact details of the data protection officer:
ITs Hein GmbH
Kulmbacher Straße 27b
D-95460 Bad Berneck
Telefon: +49 (0) 9273 50139 0
E-Mail: info@itshein.de
Revocation of your consent to data processing
Many data processing procedures are only possible with your express consent. You can revoke previously given consent at any time. For this purpose, an informal communication by email to us is sufficient. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority in data protection matters is the data protection officer of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only take place as far as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
Objection to advertising mails
The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertising and information material is hereby revoked. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as through spam emails.
3. Data collection on our website
Cookies
Some areas of this website use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited. Cookies, which are required for the electronic communication process or for the provision of certain functions you have requested (e.g. shopping basket function), are stored on the basis of art. 6 para. 1 lit. f of the GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this data protection policy.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The basis for data processing is Art. 6 Para. 1 let. f DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.
contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. The processing of the data entered in the contact form is thus exclusively based on your consent (art. 6 para. 1 let. a of the GDPR). You can revoke this consent at any time. For this purpose, an informal communication by email to us is sufficient. The legality of the data processing operations carried out up to the time of revocation shall remain unaffected by the revocation. The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Registration on this website
You can register on our website to use additional features on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration. We will use the email address provided during registration to inform you about important changes, such as changes to the scope of the offer or technically necessary changes. The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke any consent you have given at any time. For this purpose, an informal communication by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation. The data collected during registration is stored by us for as long as you are registered on our website and is then deleted. Legal retention periods remain unaffected.
4. Analysis tools and advertising
Matomo (formerly Piwik)
This website uses the open source web analysis service Matomo. Matomo uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. For this purpose, the information generated by the cookie about your use of this website is stored on our server. The IP address is anonymised before being saved. Matomo cookies remain on your device until you delete them. The storage of Matomo cookies is based on art. 6 para. 1 let. f of the GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise both his website and his advertising. The information generated by the cookie about the use of this website is not passed on to third parties. You may revoke the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. If you do not agree with the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser, which prevents Matomo from saving usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated the next time you visit our site. (Click for instructions)
5. Plugins and tools
YouTube
Our website uses plugins from the Google operated YouTube page. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 let. f of the GDPR. For more information on how we handle user data, please see the YouTube data protection policy at: https://www.google.de/intl/de/policies/privacy.
Google web fonts
This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. Through this, Google obtains knowledge that our website has been accessed via your IP address. Google web fonts are used in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 let. f of the GDPR. If your browser does not support web fonts, a default font is used by your computer. Further information about Google web fonts can be found at https://developers.google.com/fonts/faq and in the data protection policy of Google: https://www.google.com/policies/privacy/.
Google maps
This site uses the map service Google maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google maps is in the interest of an attractive presentation of our online offers and easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 let. f of the GDPR. You can find more information on the processing of user data in Google's data protection policy: https://www.google.de/intl/de/policies/privacy/.