Statement on data protection and data security of 30 October 2018


Scope
This privacy policy applies to the websites:
www.hs-ansbach.de
And as a supplement, as far as we process personal data in own or common joint responsibility, for:
de-de.facebook.com/Hochschule-Ansbach-143532189024758/
de-de.facebook.com/hochschule.ansbach.wirtschaftsinformatik/
de-de.facebook.com/Campus.Rothenburg/
de-de.facebook.com/Hochschulkontaktmesse.Ansbach/
www.facebook.com/angedacht.hsansbach/
www.facebook.com/HSAnsbach/
www.facebook.com/frankensein.de/
www.facebook.com/MediaMindHSAnsbach/
de-de.facebook.com/HSAnsbachFluechtlingeHilfe/
de-de.facebook.com/Fachschaft.Hochschule.Ansbach/
www.facebook.com/hochschule.ansbach.wirtschaftsinformatik
www.facebook.com/hochschule.ansbach.bw/
www.facebook.com/HSKino.AN/
www.facebook.com/kaspar.magazin/
www.facebook.com/frankensein.de 
twitter.com/HSAnsbach
www.youtube.com/channel/UCD1w_d_nzsUCuNvSoxU1fPQ
www.youtube.com/channel/UCL3Xfqt3j0dgV8Qd1xizcyg
www.youtube.com/channel/UC_zgTESefv3HCdmcRYWz0CA
www.instagram.com/puk_hsansbach/
www.instagram.com/frankensein/
www.instagram.com/mediamind_hsansbach/
soundcloud.com/franken-sein
www.frankensein.de
www.digital-mediamind.de

www.campusrothenburg.de
www.imea-ansbach.de
www.xing.com/companies/hochschuleansbach-universityofappliedsciences

Easy to understand short summary
We are the Ansbach University of Applied Sciences. We use social networks and our website to inform you about us, our research and our teaching. In order to guarantee the security of your data, we use appropriate encryption procedures for our website, which are based on the current state of the art. You can search our website with Google. Both Google and social networks and we collect data when you visit our website and us on social networks. We use this information to provide you with the best possible service. Google and social networks also use this information for advertising purposes. If you do not want us, Google or Social Networks to process your information or if you have any questions, please contact us.
You can write to our data protection officer: Prof. Dr.-Ing. Sascha Müller-Feuerstein, sascha.mueller(at)hs-ansbach.d

General information
Data protection is our concern and our legal obligation. In order to adequately protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL/TLS) and secure technical systems.
Javascript is used as the active component for the web pages. If you have deactivated this function in your browser, you will receive a corresponding message to activate the function.

Competent supervisory authority:
Bavarian State Ministry of Science, Research and the Arts
Salvatorstrasse 2
D-80333 Munich

Legal representation by the President:
Prof. Dr. Ute Ambrosius
praesidentin(at)hs-ansbach.de

Responsible for content according to § 55 paragraph 2 RStV:
Prof. Dr. Ute Ambrosius
praesidentin(at)hs-ansbach.de

Data protection commissioner:
Prof. Dr.-Ing. Sascha Müller-Feuerstein
sascha.mueller(at)hs-ansbach.de

Responsible for the data processing in the sense of Art. 4 No. 7 Data Protection Basic Regulation (DSGVO) or Art. 3 Para. 2 Bavarian Data Protection Act (BayDSG):
Ansbach University of Applied Sciences
Residenzstrasse 8
D-91522 Ansbach
Please address requests for information, requests for information or objections to data processing to the above address.

Rights concerned
According to the data protection basic regulation you are entitled to the following rights:
If your personal data are processed, you have the right to obtain information about the data stored about your person (Art. 15 DSGVO).
Should incorrect personal data be processed, you have the right to correction (Art. 16 DSGVO).'.
If the legal requirements are met, you can demand that the processing be deleted or restricted and lodge an objection to the processing (Art. 17, 18 and 21 DSGVO) and a right of revocation if consent is the basis for data processing.
If you have consented to data processing or a data processing agreement exists and data processing is carried out using automated procedures, you may have a right to data transferability (Art. 20 DSGVO).
If you make use of the rights mentioned above, the public body will check whether the legal requirements for this have been met.
Furthermore, there is a right of appeal to the Bavarian State Commissioner for Data Protection.

General recipients or categories of recipients of personal data
Unless otherwise specified for the service or function, our IT service providers may be recipients of your personal data within the framework of contracts concluded by us for order processing.
Insofar as our IT service providers are domiciled outside the European Economic Area and are bound by instructions, we ensure, in addition to our contracts for order processing, that the EU Commission has established an appropriate level of data protection for the providers by means of certification procedures or for the country in which the provider is domiciled, or we employ standard data protection clauses. Information on these guarantees is available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de

Information about individual service providers
Facebook
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland und Facebook, Inc. 1601 Willow Road Menlo Park, California 94025.
EU-US Privacy Shield Certification available at: 
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Google
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 und YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA
EU-US Privacy Shield Certification available at: 
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Twitter
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Irland und Twitter Inc., 1355 Market Street #900, San Francisco, California 94103, USA
EU-US Privacy Shield Certification available at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Communication
The basis of the communication and the choice of the communication service provider shall be based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO, in order to fulfil the contract in accordance with Art. 6 para. 1 lit. b DSGVO, within the scope of deliveries in accordance with Art. 6 para. 1 lit. c DSGVO in conjunction with the administrative delivery regulations. Art. 6 para. 1 lit. e DSGVO in conjunction with the respective statutory task forms the basis for the storage and reply. Many of these tasks are listed in Art. 2 BayHSchG.
If you communicate a request, application or opinion to us by e-mail, post, telephone, fax, e-government portal solutions, in conversation or via social media, the information provided or our notes will be processed for discussions for the purpose of dealing with the request, for possible follow-up questions and for the exchange of opinions and, if necessary, forwarded to the relevant person responsible. If we reply to you, we will use the same means of communication, provided you do not wish to change.
Post, e-mails and social media contributions as well as messages that you have not publicly transmitted to us are generally checked every two years - at the end of the year of receipt - to see whether it is still necessary to store your enquiries for follow-up questions. If your data is no longer required, its processing will be limited and it will still be stored in accordance with the statutory storage obligations and the archiving law.

Mandatory information
Provision obligation
If you do not provide us with the necessary data within the scope of communication for the fulfilment of the contract, we will not be able to process the contract.

Right of revocation
If the processing of your data is based on a consent, you can withdraw the consent at any time informally by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation.

Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out, among other things, on the basis of Art. 6 para. 1 lit. e DSGVO, pursuant to Art. 21 DSGVO. We will stop processing your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. You may object to the creation of user profiles when using pseudonyms in accordance with § 15 Para. 1 S. 1 TMG without stating reasons.

Website in general
In accordance with Art. 6 Para. 1 lit. c DSGVO i.V.m. we offer Art. 2 Para. 6 BayHSchG, Art. 4 Para. 1 S. 1 and 2 BayEGovG on our websites our services and administrative services as well as information for the public about our activities. We use cookies, statistics, log files and a web analysis tool to compile business statistics, to carry out organisational investigations, to check or maintain our web service and to guarantee network and information security in accordance with Art. 6 para. 1 lit c and e DSGVO i.V.m. Art. 6 para. 1 BayDSG, § 13 para. 7 TMG, Art. 11 para. 1 BayEGovG, § 100 para. 100 TKG. Insofar as the processing purpose is not impaired, we anonymise or pseudonymise personal data.

Administration and editing
For administration and editorial purposes, function identifiers and personal identifiers with access protection mechanisms are created and changes made with these identifiers are logged.
Personalised administration and editorial access to our website will be restricted after the person concerned has left the website and deleted one year after the end of the year at the time of leaving the website.

 

Log files
When you access these or other Internet pages, you transmit data to our Web server via your Internet browser. This includes the technically required information resulting from the use of Cascading Style Sheets, which serve as format templates for websites, as well as scripts to download the functions of the website from servers.
The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Date and time of request
  • Name of the requested file
  • Page from which the file was requested.
  • Access status (e.g. file transferred, file not found)
  • the web browser and screen resolution used and the operating system used
  • complete IP address of the requesting computer
  • transferred data volume

As a rule, we keep this personal data for a maximum of seven days.

Cookies
Test cookie
This cookie serves the general purpose of determining whether you accept cookies, since we cannot offer you the service without cookies.

Loadbalancer Cookie
This cookie is required in order to provide our service in the best possible way by using a load balancer which distributes the load on our systems.
The cookies that we set directly from our website are session cookies that are deleted after the browser session has ended. Other cookies are deleted invalidly or automatically after the specified periods.

Google Analytics
This website uses the Google Analytics service, which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for the analysis of website usage by users. The service uses "cookies" - text files that are stored on your terminal device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
This website uses IP anonymisation. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening means that your IP address does not have to be referred to a specific person. As part of the agreement on the order data agreement, which the website operators have concluded with Google Inc., the latter uses the information collected to compile an evaluation of website use and website activity and provides services associated with Internet use.
We also use Google Analytics reports on demographic features, which use data from interest-related advertising by Google and visitor data from third parties (e.g. age, gender and interests). This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings.
You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you can access all functions of this website without restrictions if your browser does not allow cookies.
You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin: tools.google.com/dlpage/gaoptout
Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

Alternatively, you can prevent this by clicking on this link, that Google Analytics collects data about you within this website. Click on the link above to download an opt-out cookie. Your browser must therefore always allow the storage of cookies for this purpose. If you delete your cookies regularly, you will need to click the link again each time you visit this website.

Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out, among other things, on the basis of Art. 6 para. 1 lit. e DSGVO, pursuant to Art. 21 DSGVO. We will stop processing your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. You may object to the creation of user profiles when using pseudonyms in accordance with § 15 Para. 1 S. 1 TMG without stating reasons.

Social Media
At our appearances, we create content as part of our public relations work and our freedom of research, teaching and art in accordance with our Social Media Guide and see the contributions and interactions of the community on this. It is our aim to inform and exchange information with our target groups. Contents and contributions, inquiries, which violate the rights of third parties or which constitute a criminal offence, do not comply with legal or contractual duties of conduct, we disclose by transmission to the responsible authority or the social media provider and block or delete these. Our website links to social networks so that you can interact with and share the content of our website. A connection to the servers is only established by the interfaces. The legal basis for data processing on our social media offers and elements is your consent pursuant to Art. 6 Para. 1 lit. a DSGVO, the contract with the respective provider pursuant to Art. 6 Para. 1 lit. b DSGVO and pursuant to Art. 6 Para. 1 lit. e DSGVI in conjunction with Art. 6 Para. 1 lit. e DSGVI. Art. 2 Para. 6 BayHSchG, Art. 3 BayHSchG, Art. 4 Para. 1 S. 1 and 2 BayEGovG, § 5 Para. 1 No. 2 TMG. Social media contributions and messages that you have not publicly transmitted to us are checked every two years to see whether it is still necessary to store your requests for follow-up questions. If your data is no longer required, its processing will be limited and it will still be stored in accordance with the statutory storage obligations and in compliance with archive law. If you have communicated with us via social media, either with the knowledge of the public or parts thereof, you can decide on the duration of the publication yourself or ask us to delete it. We delete this data in compliance with the archive law within our area of responsibility. If, after deletion, we still have copies of the data, these will be limited in processing and will still be stored in accordance with the statutory storage obligations and in compliance with archive law.

Mandatory information
Provision obligation
If you do not provide us with the necessary data within the scope of communication for the fulfilment of the contract, we will not be able to process the contract.

Right of revocation
If the processing of your data is based on a consent, you can withdraw the consent at any time informally by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation.

Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out, among other things, on the basis of Art. 6 para. 1 lit. e DSGVO, pursuant to Art. 21 DSGVO. We will stop processing your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. You may object to the creation of user profiles when using pseudonyms in accordance with § 15 Para. 1 S. 1 TMG without stating reasons.

Supplementary data protection provisions of the service providers or services
Social media providers often create comprehensive profiles of their members and those who come into contact with their telemedia services (e.g. clicking a like button or visiting a website). These profiles are used, among other things, for marketing advertising. If you use our offers with the providers, they will know that you have a relationship with us. You can partially limit the scope of this data processing by general browser settings or browser extensions. Recommended information can be found at www.privacy-handbuch.de/handbuch_21.htm. The providers also offer individual settings, e.g. to control advertisements and tracking. This sometimes requires accounts with the respective providers.
We have listed important information for you here.

Facebook
Terms of use https://de-de.facebook.com/legal/terms/
Data Policy https://de-de.facebook.com/about/privacy/
Cookie Policy https://de-de.facebook.com/policies/cookies/
Site guidelines https://www.facebook.com/policies/pages_groups_events#
Possibilities for appeals https://www.facebook.com/settings?tab=ads

Google
Data Policy Google https://policies.google.com/privacy?hl=de&gl=de
Terms of use Google https://policies.google.com/terms?hl=de
Terms of use YouTube https://www.youtube.com/t/terms
Possibilities for appeals https://adssettings.google.com/authenticated

Instagram
Terms of use https://help.instagram.com/581066165581870
Data Policy https://help.instagram.com/519522125107875
Cookie Policy https://help.instagram.com/1896641480634370
Possibilities for appeals https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/

External Links
For your information, you will find links to third-party websites on our website. We cannot make any statement as to whether these pages are subject to the same data protection provisions as here. Please note the data protection regulations of the respective external website.

Miscellaneous to our privacy policy
Our privacy policy is dated 30 October 2018.
We reserve the right to amend this data protection declaration from time to time to ensure that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services.
Your renewed visit will then be subject to the new data protection declaration.
We have archived the previous versions of our data protection declaration HERE.
If you have any questions, you can write an e-mail to the data protection officer.

License notice
Our privacy policy is based on the model of the IT Law Office of the Bavarian State Universities and Colleges.