Data Protection Declaration

This data protection declaration informs you about the processing of personal data on the main websites of Hochschule Bielefeld – University of Applied Sciences and Arts (hereinafter referred to as “HSBI”), with the exception of university portals of HSBI (See Processing of data). With this data protection declaration, HSBI fulfils its obligation to provide information in accordance with Article 13 of the EU General Data Protection Regulation (GDPR). Websites which collect personal data via forms provide separate information on the processing of the data collected there.

Contact details of the responsible persons

In terms of the GDPR and other national data protection laws of the member states as well as other data protection regulations, the responsible body is

Hochschule Bielefeld

Corporate entity under public law

represented by the President
Interaktion 1
33619 Bielefeld

Telephone: +49.521.106-01
E-mail: info@hsbi.de
Website: www.hsbi.de/en

Contact details of the data protection officers of the responsible body:

Postal address

Telephone: +49.521.106-7743
E-mail: datenschutzbeauftragte@hsbi.de

Processing of data

Access data

HSBI collects and processes the data specified here which is required for technical operation in log files to ensure the technical security of the systems in order to safeguard the legitimate interests of the university in accordance with Art. 6(1) point (f) GDPR. The data is necessary for the provision of internet sites, for the secure operation of the web servers and for the optimisation of the website, and is only used for the purposes stated in each case.

Access data is stored every time a user accesses a page of HSBI’s website and every time a file from HSBI’s website is retrieved. Each data record consists of:

- Date and time of access,

- IP address of the client (or requesting machine),

- The user-agent string (i.e. browser identification and, if applicable, operating system),

- The URL called up,

- HTTP status code

The data is evaluated anonymously and solely for statistical purposes. FH Bielefeld does not create personal user profiles.

The short-term registration of the IP address is indispensable for accessing HSBI’s www pages. The IP address is the globally valid, unique identification of a computer. When a page is called up, the IP of the requesting computer is used as the address for the reply. The requesting computer has either acquired this address permanently or it has been temporarily assigned by the provider.

Registration of data for the provision of the website and the storage of the above-mentioned access data is imperative for operation of the web pages. There is thus no possibilty to object. Although IP addresses are considered personal data, HSBI does not attribute them to any person. It is therefore not possible to provide information on this data.

Cookies

The legal basis for the processing of the personal data of the users in connection with the use of cookies is Art. 6(1) point (f) GDPR.

We use session cookies on our website. Cookies are small amounts of data that are stored by the operator of a website on the computer of the authorised user. Temporary cookies are automatically deleted when the browser is closed. They only contain an identification number (session ID), which allows the server to arrtibute successive browser enquiries to the same user. Temporary cookies are used by many servers, they do not constitute a security risk. The data is not stored permanently. It is automatically deleted when the browser is closed. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies in most browsers. If you have deactivated cookies, it is no longer possible to log in to the university's own portals or services. HSBI does not use web analysis services.

Forms

The collection of further data in forms and web-based services is based on the consent of the data subjects pursuant to Art. 6(1) point (a) GDPR or is required for the fulfilment of the university's tasks pursuant to Art. 6(1) point (e) GDPR in conjunction with the Higher Education Act of the State of North Rhine-Westphalia (HG NRW).

Personal data collected via forms is only available to those employees who have been charged to process electronically transmitted enquiries and who are responsible for the collection of such data. Please refer to the notes in the relevant forms for details of which data is collected and processed and for what purpose. This data is generally deleted by the person processing it after one month, at the latest when the administrative process is completed.

The central search form on HSBI’s website is the sole responsibility of HSBI; no data is passed on to third parties. Other search forms, for example the search form on the sites of the university library, may be excluded from this.

HSBI portals

HSBI’s website contains links to the university’s own portals and services at various points. These include the e-learning platform ILIAS, the Campus Management Online Portal LSF for study places and workplaces, the e-mail programme Webmail, the media portal, the online catalogue of the university library (webOPAC) and the user administration. Each of these has its own data protection declaration.

External links and social networks (social media)

Links to external websites

HSBI’s website contains links to external websites. The operators of the respective websites are exclusively responsible for compliance with data protection regulations.

Links to social networks (social media)

HSBI does not use any social media plug-ins, therefore no data is transmitted to third parties when HSBI’s website is accessed. However, our website does contain links to social networks, which are marked with the name of the respective service. If you select a link to a social network on our website, responsibility transfers to the operator of the service. The operator is also responsible for the contents of the website accessed by the link. Through the connection to the server of the social network, information about the acess to our website is stored, even if you are not logged in to the social network. This information (including IP address) is transmitted directly to the operator of the platform and stored at his location.

For more detailed information on privacy, the scope of data collection and the processing and use of data by the social network, please refer to the operator’s data protection guidelines. If you are already logged into the social network, the selection of the link on our website leads directly to assignment to your profile. Please note that the selection of a link to a social network enables the social network to make an assignment to your profile. As a matter of principle, HSBI does not collect or process any personal data from the social networks.

HSBI uses the following social networks:

Facebook: The internet presence of the external social network Facebook at www.facebook.com. The services on these pages are exclusively offered by: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram: The internet presence of the external social network Instagram is offered exclusively by: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

YouTube: The Internet presence of the external social network YouTube (represented by Google Inc.) is operated exclusively by: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94304, USA

Transfer of data to third parties

Data is not passed on to third parties without your consent. Exceptions to this are state institutions and authorities authorised to obtain information: In this case, information is only passed on within the framework of the relevant laws or if we are obliged to do so by court order. HSBI obliges all employees and service providers to maintain secrecy and to comply with data protection regulations.

Rights of data subjects

If HSBI has stored data relating to your person, you can request information on the data stored about you free of charge in accordance with Art. 15 GDPR.

You also have the right to rectify or complete (Art. 16 GDPR), erase (Art. 17 GDPR), restrict processing (Art. 18 GDPR) and object to processing (Art. 21 GDPR) of the data stored about you.

Irrespective of this, you have the right to appeal to the supervisory authority at any time (Art. 77 GDPR):

 

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

State Officer for Data Protection and Freedom of Information North Rhine-Westphalia
Postbox  200444
40102 Düsseldorf

Telephone: +49.211.384240
Fax: +49.211.3842410
E-mail: poststelle@ldi.nrw.de
www.ldi.nrw.de/metanavi_Kontakt/index.php

Updating this data protection declaration

We will update this data protection declaration in accordance with prevailing legal requirements where necessary. HSBI reserves the right to errors and amendments.

Date: January 2019