Data Protection Information
I. Name and address of the controller
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:
Verfasste Studierendenschaft der Hochschule Furtwangen
Robert-Gerwig-Platz 1
78120 Furtwangen
Mail: vst@hs-furtwangen.de
Website: vst.hs-furtwangen.de
represented by Patrick Kaserer
II. Name and address of the data protection officer
The data protection officer of the responsible party is:
There is currently no person responsible for data protection.
For questions regarding this please contact:
Server-AG der Verfassten Studierendenschaft der Hochschule Furtwangen
Furtwangen University
Robert-Gerwig-Platz 1
78120 Furtwangen
Mail: vst-server@hs-furtwangen.de
III. General information on data processing
1. Scope of processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (DSGVO) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
IV. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is called up, our system automatically records data and information from the computer system of the calling computer.
The following data is collected in this process:
- Information about the browser type and the version used.
- The IP address of the user
- Date and time of access
The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f DSGVO.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage of log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.
An evaluation of the data for marketing purposes does not take place in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 Para. 1 lit. f DSGVO.
4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after $STORAGE TIME at the latest. Storage beyond this time is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
5. Possibility of objection and elimination
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
V. Use of local storage
1. Description and scope of data processing
Local storage involves key-value pairs that are stored in the form of text in the user's browser. By default, these are not transferred to the server and are bound to the corresponding web page. They can be read and manipulated on the user's page using scripts supplied. Each entry in the local storage can be identified by a unique character string.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.
3. Purpose of data processing
The purpose of using technically necessary local storage is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of local storage. For these, it is necessary that the browser is recognized even after a page change.
- saving the setting for the selection about the use of the Local Storage.
- remembering the setting for selecting a color scheme.
- remembering the setting for selecting a font size
The contents of the Local Storage are not transmitted to us. Therefore, there is no possibility of using personal data.
4. Duration of storage, possibility of objection and elimination
The Local Storage is stored on the user's computer. Data from this is not transmitted to our site. Therefore, you as the user also have full control over the use of the Local Storage. By changing the settings in your Internet browser, you can disable or restrict the storage of data on the Local Storage. Content already stored in Local Storage can be deleted at any time. If the Local Storage for our website is deactivated, it may no longer be possible to use all the functions of the website in full.
VII. Rights of the data subject
You are entitled to various data subject rights, in particular the right to information (Art. 15 DS-GVO), the right to rectification (Art. 16 DS-GVO), the right to erasure (Art. 17 DS-GVO) or to restriction of processing (Art. 18 DS-GVO). More information on the right to information as well as the right to erasure can be found here:
In the event that we process your data for the performance of a public task assigned to us pursuant to Art. 6 (1) (e) DS-GVO or on the basis of a legitimate interest pursuant to Art. 6 (1) (f) DS-GVO, you have the right to object to the processing (Art. 21 DS-GVO).
In the case of processing based on consent, this can be revoked at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. With regard to data that you have provided to us yourself, you may have a right to data portability (Art. 20 DS-GVO).
The assertion of your data subject rights is possible free of charge. If you believe that the processing of personal data concerning you violates the GDPR, complaints can be submitted to us at vst-server@hs-furtwangen.de with the subject "Data protection". If you exercise your data protection rights, you will receive a response from us within one month at the latest.
You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DS-GVO if you are of the opinion that the processing of personal data concerning you violates the DSGVO. Complaints can be submitted to the State Commissioner for Data Protection and Freedom of Information of Baden Württemberg -also online-at http://www.baden-wuerttemberg.datenschutz.de.