Data Protection

PRIVACY NOTICE

In the following, we, Karlsruhe University of Applied Sciences (hereinafter also referred to as “controller”, “HKA”, “we” or “us”) inform you about the processing of your personal data in connection with your visit of our website https://https://ingenium-web2.admin.uoc.gr/ingenium-main-site/ (“website”) and the rights to which you are entitled in accordance with the General Data Protection Regulation (“GDPR”).

1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

The controller is:
Karlsruhe University of Applied Sciences, represented by Prof. Dr. Frank Artinger, President of Karlsruhe University of Applied Sciences
Moltkestraße 30
76133 Karlsruhe, Germany
Phone: +49 (0)721 925-1000
Email: rektor@hs-karlsruhe.de

2. IDENTITY AND CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Data protection officer at HKA is:
Prof. Dr. Thorsten Leize, deputy: Prof. Dr. Ingo Stengel
Hochschule Karlsruhe
Moltkestraße 30
76133 Karlsruhe
Phone: +49 (0)721 925-1373
Email: datenschutz@hs-karlsruhe.de

3. PERSONAL DATA PROCESSED, PURPOSE AND LEGAL BASIS OF PROCESSING

In the following, we inform you about the legal basis and purposes of the respective data processing in connection with your visit of our website:

3.1. Collection of personal data when you visit our website (logfiles)

If you just visit our website your browser automatically transfers the following personal data from you:

Referrer (previously visited website)
Requested URL
Type and version of browser
Operating system
Type of device
IP address
Date and time of the request

We process the data for the following purposes:

to send the requested content to your browser. In doing so, we only store the full IP address if this is necessary to send you the requested content.
to secure the operation, stability and security of our website.

The legal basis for the processing of this data is Art. 6(1)(f) GDPR. Our legitimate interests arise from the above-mentioned purposes of data processing and include providing and ensuring the technical functionality of our website as well as the defence against and analysis of cyber attacks.

The logfiles are deleted after 8 weeks.

3.2 Contact
When you contact us by email or telephone, we process your email address or telephone number and the information provided by you in the message or telephone call.
We process such data to talk to you or respond to your message and reply to you. The legal basis for the processing of this data is Article 6(1)(f) GDPR. Our legitimate interests arise from the above-mentioned purposes and include, in particular, responding to your enquiries, ensuring our general responsiveness and providing evidence when questions or disputes arise.

The data will be stored until the processing of your enquiry has been completed and, if applicable, relevant retention periods under commercial and tax law have expired.

4. RECIPIENTS OF PERSONAL DATA
Internally, only those departments receive your personal data that are involved in the operation of the website or the coordination of the INGENIUM project.

We use external service providers in the provision of our services who process your data on our behalf. These include companies in the following categories:

Technical service providers
Web designers

In addition, we might also share your data with third parties which process your data under their own responsibility. These include companies/organisations in the following categories:

Public authorities if they request the data based on a legal provision
Other INGENIUM partner universities

5. TRANSFER TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA
We do not transfer your data to countries or international organisations located outside the European Economic Area.

6. NO AUTOMATED DECISION MAKING
We do not use your personal data for automated decision-making, including profiling within the meaning of Art. 22 GDPR.

7. RIGHTS OF THE USERS OF OUR WEBSITE
You have the following rights regarding the processing of your personal data:
Right of access: You have the right to receive information about your personal data processed by us in accordance with Article 15 GDPR.
Right to rectification: If your personal data is inaccurate or incomplete, you have the right to have your personal information rectified according to Article 16 GDPR.
Right to erasure: According to Article 17 GDPR, you may request the erasure of your personal data processed by us unless the processing is necessary for exercising of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Right to restriction of processing: According to Article 18 GDPR, you may request the restriction of the processing of your personal data, insofar as (a) the accuracy of the data is contested by you for a period enabling us to verify the accuracy of your personal data, (b) the processing is unlawful, but you oppose to its erasure, (c) we no longer need the data, but you need them for the establishment, exercise or defence of legal claims, or (d) you have objected to the processing in accordance with Art. 21 GDPR pending the verification of the objection. If processing is restricted, we may still store the data but not use it.
Right to data portability: According to Article 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
Right to withdraw consent: If the processing of your personal data is based on your consent, you may withdraw your consent at any time according to Article 7 GDPR. In this case, we will no longer be allowed to process the data based on this consent in the future. Any such withdrawal of consent does not affect the legality of processing carried out based on the granting of consent until the point of withdrawal.
Right to object: According to Article 21 GDPR you have the right to object to the processing of your personal data, provided that your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1)(f) GDPR and provided that there are grounds for doing so which arise from your particular situation. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. In individual cases, your data will be processed for the purpose of direct marketing. You have the right to object at any time to the processing of your personal data for the purpose of such direct marketing. This also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

To exercise your rights above, to lodge a complaint or to submit any other request, please contact us by email or write to us or our data protection officer. You can find the contact details under section 1 of this Privacy Notice.
Should you consider that the processing of your personal data relating is in breach of the GDPR, you may lodge a complaint with the competent data protection authorityThe data protection supervisory authority responsible for us is the

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information)
Postal address: Postfach 10 29 32, 70025 Stuttgart
Email: poststelle@lfdi.bwl.de