Privacy statement

Data protection

 

General information

 

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

 

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (for example, Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

 

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

 

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to demand the correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

 

Analysis tools and tools from third-party providers

When visiting our website, your surfing behavior may be statistically analyzed. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following privacy policy.

You can object to this analysis. We will inform you about the objection options in this privacy policy.

 

General notes and mandatory information

 

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission on the Internet (for example, when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note to the responsible office

The responsible party for data processing on this website is:

Studierendenwerk Tübingen-Hohenheim
Anstalt des öffentlichen Rechts
Kommunikation
Friedrichstraße 21
72072 Tübingen

Phone: +49 7071 / 29-73830
E-mail: info [at] sw-tuebingen-hohenheim [dot] de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (for example, names, e-mail addresses or similar).

 

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

 

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the state data protection commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

 

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

 

Objection to advertising e-mails

We hereby object to the use of contact data published within the framework of the imprint obligation to send advertising and information material that has not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

 

Protection of minors

Children and persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children, do not collect it and do not pass it on to third parties.

 

Use of our website without JavaScript

If you have deactivated JavaScript in your browser, you will not be able to use certain content on the website (for example, videos) and certain notices (for example, about opening hours) will not be displayed. You can use extensions such as NoScript to allow JavaScript for certain pages (for example, www.my-stuwe.de).

 

Data protection officer

 

Data protection officer required by law

We have a data protection officer appointed for our company.
datenschutz [at] sw-tuebingen-hohenheim [dot] de

 

Data collection on our website

 

Cookies

The internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (for example, price display in the menu) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (for example, cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

 

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• Operating system used
• referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 (1) lit. f DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

 

Contact form

If you send us inquiries via contact form, your data from the inquiry form including the contact data and file attachments provided by you there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (for example, after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

Online application housing

You can use our online portal to apply for a place in our residential facilities. For this purpose, we use the software of an IT service provider specializing in this area. The service provider’s forms are embedded in our web portal. Your data is processed by the service provider on our behalf.

We will send you your details by e-mail immediately after they have been entered so that you can check them again. This e-mail is not encrypted.

 

Analytic Tools

 

Matomo (formerly Piwik)

Our website uses the web analysis service Matomo. Matomo is an open-source solution and is operated by us in the same web space.

As the operator of this website, we have a legitimate interest in the anonymous analysis of user behavior to optimize our website if necessary. The protection of your data is important to us, which is why we have configured Matomo in such a way that no tracking cookies are used, and your IP address is only recorded in abbreviated form. It is therefore not possible for us to draw any conclusions about your person. No information about the use of this website is passed on to third parties.

Further information on Matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/

You can deactivate the storage and use of your data below. Your browser sets an opt-out cookie, which prevents the storage of Matomo usage data. If you delete your cookies, the Matomo opt-out cookie will also be removed. If you visit our website again, the opt-out cookie must be set again to prevent the storage and use of your data.

 

Newsletter

 

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (for example, e-mail addresses for the member area) remains unaffected by this.

 

CleverReach (CleverReach GmbH & Co. KG)

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving newsletters (for example, e-mail address) is stored on the servers of CleverReach in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (for example, downloading forms) has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletters, please visit:
www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (for example, e-mail addresses for the member area) remains unaffected by this.

For more details, please refer to the data protection provisions of CleverReach at:
www.cleverreach.com/de/datenschutz/.

 

Conclusion of a contract for order data processing

We have concluded an order data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

 

Plugins und Tools

 

YouTube (Google Ireland Limited)

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy.

 

Vimeo (Vimeo, LLC)

Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. In the process, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on the handling of user data, please see Vimeo’s privacy policy at: vimeo.com/privacy.

 

Google Maps (Google Ireland Limited)

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy.

Mastodon

The Studierendenwerk Tübingen-Hohenheim operates a profile on the microblogging service Mastodon for the purposes of its own press and public relations work. The selection of this service is based on its special character as an open, free, decentralized, non-commercial and privacy-friendly service. The aim is therefore to promote alternatives to existing services that are preferable in terms of network and data protection policy.
The my-stuwe account is stored on the server of the State Commissioner for Data Protection and Information Security BW. Therefore, we refer here to the corresponding privacy policy of the LfDI BW: https://bawü.social/terms

 

Facebook and Instagram

For the information service offered here, the responsible party uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. You use the functions offered (e.g. commenting, sharing, rating) at your own responsibility. Alternatively, you can access the services offered via this presence via our website at https://www.my-stuwe.de.

 

What information is collected?

When you visit our Facebook page, Facebook automatically collects various information. We do not know what information Facebook ultimately collects. This information is collected regardless of whether you have a Facebook account or are logged into your Facebook account, if one exists, at the time of your visit. You can view the information collected by Facebook at: https://www.facebook.com/about/privacy/update?ref=old_policy: “What types of information do we collect?”

 

Assignment of the visit of our Facebook page to your Facebook account

When you access a Facebook page, the IP address assigned to your terminal device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (e.g. as part of the “login notification” function); if necessary, this enables Facebook to assign IP addresses to individual users. If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is located on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these website pages and assign them to your Facebook profile. Based on this data, content or advertising can be offered to you individually tailored. You can find out more about this at: https://www.facebook.com/policies/cookies/

If you want to avoid this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. In this way, Facebook information that can be used to directly associate your account with your visit to our site will be deleted. After that, you can use our Facebook page without revealing your Facebook identifier. When you access interactive features of the site (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.

 

Legal basis of data processing at the Studierendenwerk

Studierendenwerk uses the Facebook page to inform and receive feedback. (Article 6 para. 1 lit. e, f of the General Data Protection Regulation (DS-GVO) in conjunction with section 4 of the Baden-Württemberg State Data Protection Act (LDSG)).

 

Legal basis for data processing at Facebook

Facebook states the legal basis for data processing at https://www.facebook.com/about/privacy/update?ref=old_policy “What is our legal basis for processing data?”.

 

How else is the information collected used?

The aforementioned data is processed by Facebook for the purposes stated at https://www.facebook.com/about/privacy/update?ref=old_policy  (“How do we use this information?”) and may be transferred to countries outside the European Union in the process.

 

Facebook Insights

Parts of the information collected by Facebook are used to provide us, as the operator of the Facebook page, with statistical information about the use of the Facebook page (“Facebook Insights”). Facebook provides more detailed information on this at the following link: http://de-de.facebook.com/help/pages/insights

We only receive this statistical information in anonymized form and therefore assume that the use of this data is not a data processing operation that falls within the scope of the GDPR. Nevertheless, the ECJ ruled in its judgment of 05.06.2018 (ECJ C-210/16) that the operator of a Facebook page is co-responsible for the data collection carried out by Facebook as part of the Facebook Insights service. Since we cannot currently rule out joint responsibility for the collection of data on the basis of this, we would like to fulfill our information obligations below, insofar as it is technically possible for us to do so. We use Facebook Insights on the basis of Art. 6 (1) p. 1 lit. f DSGVO. By using the service, we want to ensure a needs-based design and ongoing optimization of our Facebook page. On the other hand, we use the service to statistically evaluate the use of our Facebook page for the purpose of optimizing our offer for you. These interests are considered legitimate in the sense of the aforementioned provision.

 

What rights do you have on Facebook?

You have the right to information, correction, transferability or deletion of your data. You can view the exact rights at https://www.facebook.com/about/privacy/update?ref=old_policy „”How can you exercise your rights granted under the GDPR?”. If you assert data subject rights regarding data collections in connection with Facebook Insights against us, we will forward your request to Facebook, as we ultimately do not have the technical possibilities and powers to fully comply with your request.

 

What rights do you have with Studierendenwerk

On our website data protection declaration of the Studierendenwerk at https://www.my-stuwe.de/datenschutz/ in point 2 – General information and mandatory information – we explain your rights.