Privacy Policy

General

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

Data collection on our website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

Your data is collected when you provide it to us. For example using an contact form.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for?

Your data is used to ensure the proper functioning of this website and, in case, in forms you fill in.

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Notice concerning the party responsible for this website

Verfasste Studierendenschaft (StuVe) of Ulm University

c/o Universität Ulm
Albert-Einstein-Allee 11
89081 Ulm

Phone: +49 (0) 731 50 22401
Fax: +49 (0) 731 50 22403

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to file complaints with regulatory authorities

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is Ulm University.

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking, deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

• Browser type and browser version
• Operation system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data will not be combined with data from other sources.

The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Contact form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Allgemeine Hinweise

Eine E-Mail mit personenbezogenen Daten wurde an falsche Adressanten versendet? Dein Smartphone ist verschwunden? Du wurdest gehackt? Solche und viele andere "Datenpannen" passieren leider immer wieder. 

Jetzt heißt es Ruhe bewahren und richtig handeln: 

Das DSGVO sieht nach Art. 33 bei einer Verletzung des Schutzes personenbezogener Daten vor innerhalb 72 Stunden eine Meldung bei der zugehörigen Aufsichtbehörde einzureichen. Diese Meldung übernimmt der Datenschutzbeauftragte, der sich um die Weiterleitung an den Landesbeauftragten für den Datenschutz in Baden-Würrtemberg (LfDI BW) und die notwendige Dokumentation kümmert. Zur Erfassung der Datenpanne solltest du dazu möglich detailliert das Formular "Meldung einer Datenpanne" ausfüllen.

Sollte es sich gemäß Art. 34 DSGVO um eine Datenpanne mit einem hohen Risiko für die Rechte und Freiheiten von natürlichen Personen handeln, sieht das DSGVO eine Meldung an den Betroffenen vor. Eine Meldung an den Betroffenen kann unterbleiben, wenn Maßnahmen zur Schadensbegrenzung getroffen wurden, die die Möglichkeiten auf ein Risiko beseitigen oder  wenn technische und organisatorische Maßnahmen vorhanden sind, die den Zugang zu den personenbezogenen Daten unmöglich machen. 

Solltest du dir nicht sicher sein, ob es sich bei deiner Datenpanne um ein hohes Risiko gemäß Art. 34 handelt, kannst du dies in dem Formular "Meldung einer Datenpanne" unter Sonstiges angeben.

Text by eRecht 24.