Privacy policy and notes on data processing
Name and contact information of the controller
Hochschule für angewandte Wissenschaften Landshut
Am Lurzenhof 1
84036 Landshut, Germany
Contact information of the external data protection officer
Johannes Nehlsen
insidas GmbH & Co. KG
Wallerstraße 2, 84032 Altdorf, Germany
Data privacy team: datenschutz@haw-landshut.de
Confidential: dsbvertraulich@insidas.de
Automated decision making including profiling
Automated decisions in individual cases - including profiling – only take place if they are permitted in accordance with Art. 22 General Data Protection Regulation (GDPR).
Data subject rights
General
Regarding the processing of your personal data, as a data subject, you have the following rights in accordance with Art. 15 et seq. GDPR, if you do not exercise these rights in an abusive, manifestly unfounded, or excessive manner:
You may request information on whether we are processing personal data about you. If this is the case, you have the right to obtain access to this personal data as well as additional information related to the processing (Art. 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases (Cf. Art. 10 of the Bavarian Data Protection Act - BayDSG).
If personal data about you is not (or is no longer) accurate or complete, you may request that this data be corrected and, if necessary, completed (Art. 16 GDPR).
If the legal requirements are met, you can request the erasure of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR). However, the right to erasure pursuant to Art. 17 (1) and (2) GDPR does not apply if, among other things, the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17 (3) (b) GDPR). In particular, archival law may take precedence over deletion.
If you have consented to the processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
You have the right to complain to a supervisory authority within the meaning of Art. 51 GDPR about the processing of your personal data. The competent supervisory authority for Bavarian public bodies is the Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich. In addition to the right to lodge a complaint, you can also seek a judicial remedy.
Right to withdraw consent
If the processing is based on consent, you have the right to withdraw your consent at any time. The revocation only takes effect for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. Right to object pursuant to Art. 21 GDPR For reasons arising from your particular situation, you can also object to the processing of your personal data by us at any time (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.
Obligation to provide
If there is a legal obligation to process data, failure to provide it constitutes a breach of employment contract, service or contractual obligations. In some cases, violations are also subject to penalties or fines.
Digital application for data protection requests
For inquiries to the Data Protection Team and for exercising your data subject rights, you can use the portal provided by our external Data Protection Officer:
https://datenschutz.insidas.de/anfrage-formular/hochschule-landshut
General information on data processing
The general information on data processing is authoritative unless more specific information on data processing is provided. This can be found on the main website. [Link https://www.haw-landshut.de/datenschutz ]
FAQ-Sheet Service IT
Purpose of processing personal data
On this page we answer the most important questions about IT at Landshut University of Applied Sciences.
Legal basis fort he processing of personal data
- ListenpunktCollection and storage of information on end devices: § 25 (2) Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services - TDDDG
- Further processing: Art. 6 (1) (e) GDPR, Art. 4 BayDSG, Art. 2 Bavarian Higher Education Innovation Act - BayHIG, Art. 17 - Law on digitisation in the Free State of Bavaria - BayDIG
Informations on end devices
IP-Adressen, Browserfingerprint
Categories of data
No further data categories are processed.
Recipients of personal data
None at present
International data transfer
International data transfer is not currently planned.