Data protection is a special concern for us. We process your personal data (hereinafter “data”) in accordance with the legal requirements and would like to do so in a transparent manner. Therefore, we would like to use the following data protection information to briefly explain which data we process in connection with the use of our website, and for what purposes and on what legal basis this is done. In addition, you will receive information about contact persons and your rights in connection with data processing.
Name and contact details of the responsible person:
Leuphana University Lüneburg
represented by the President
Contact details of the data protection officer:
Leuphana University Lüneburg-
– Datenschutzbeauftragter –
Purposes and legal bases of data processing
As soon as you visit our website, we store so-called log files of you. Your IP address, the date and time of the page access, the URL called up, the URL you last visited (referrer URL), the browser you are using and its version, and the version of the operating system you are using are recorded in these files.
We use this data to prevent misuse of our website and to enable you to visit our website trouble-free and optimally. The legal basis for this processing is § 3 S.1 No. 1 NDSG (Niedersächsisches Datenschutzgesetz) in conjunction with. Art. 6 para. 1 p. 1 letter e) GDPR (European General Data Protection Regulation) in conjunction with 3 para. 1 p.1 No. 10 NHG (Niedersächsisches Hochschulgesetz).
Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. The purpose of this recognition is to make it easier for users to use our website.
We give you the opportunity to select your preferences regarding cookies as part of your initial visit to our website and at any time thereafter by means of a cookie banner. In order to ensure that the setting you have selected can be adhered to on our sub-pages and that no data is processed against your will, it is necessary that your decision is recorded in a machine-readable manner. This is in turn done by a cookie that is set by our cookie banner. For this purpose, our website uses the Borlabs cookie consent technology to obtain and document your consent to the storage of certain cookies in your browser or to the use of certain technologies. Details on the data processing by Borlabs-Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/ . This data is not passed on to the provider of the Borlabs cookie, but is stored on our server. The legal basis for this data processing is Art. 6 para. 1 sentence 1 letter c) GDPR in conjunction with. Art. 5 para. 2 and Art. 7 para. 1 GDPR and Section 25 para. 2 No. 2 Gesetz zur Regelung des Datenschutzes und des Schutzes der Privatsphäre in der Telekommunikation und bei Telemedien (TTDSG). You can delete cookies that have already been set at any time via an Internet browser or other software programs or adjust your cookie settings at the bottom of the website.
2. Cookies or plug-ins from third parties
In unserem Internetauftritt setzen wir YouTube ein. Hierbei handelt es sichWe use YouTube on our website. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, hereinafter referred to as “Google” or “YouTube”.
We use YouTube in “Enhanced Privacy Mode” to show you videos.
The “extended data protection mode” function means that the data described in more detail below is only transmitted to the YouTube server if you actually start a video with a second click. Without this “Enhanced Privacy Mode”, a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
We would like to point out that data of users outside the European Union may be processed on Google servers. For more information on the transfer of data to non-EU countries, please see the section “Transfer to third countries” below.
However, this connection is necessary in order to display the respective video on our website via your internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time, and the website you visited. In addition, a connection to Google’s advertising network “DoubleClick” is established.
If you are logged in to YouTube or Google at the same time, YouTube will assign the connection information to your Google account. If you want to prevent this, you must either log out of YouTube/Google before visiting our website or make the appropriate settings in your YouTube/Google user account.
For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser.
As part of the display of YouTube videos on our website, external fonts from the Google Fonts service are used. Google Fonts is also a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. The integration of these web fonts takes place via a server call, usually a Google server in the USA. This transmits to the server which of our Internet pages you have visited (referrer). Also, the IP address of the browser of the end device of the visitor of these Internet pages is transmitted to the servers of Google.
Google provides further information on the collection and use of data as well as your rights and protection options in this regard in the information available at https://policies.google.com/privacy data protection information available on the website. Data is only transferred to Google after your consent has been obtained via the cookie banner displayed at the beginning or with a two-click confirmation on the video displayed. Your consent or refusal is stored in a cookie set by us. You can revoke your selection at any time via “Cookie settings” at the bottom of our website. The legal basis is Art. 6 para. 1 letter a) GDPR, and with regard to the exceptional transfer to a non-European third country, Art. 49 para. 1 sentence 1 letter a) GDPR.
Contact form, request by e-mail, phone or fax
If you contact us via contact form or e-mail, the data you provide (name, surname, e-mail address, subject and message) will be used to process your request. Your inquiry will be forwarded together with the specified data to the responsible contact person by e-mail. If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. The provision of the data is necessary for processing and answering your request – without their provision, we can not answer your request or at best limited. We do not pass on this data to third parties without your consent.
Your data will be deleted if your inquiry has been answered conclusively and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing. The legal basis for the technically necessary processing of this data for the presentation and provision of our website on the Internet as well as a contact option is Section 3 S.1 Nr. 1 NDSG in conjunction with Art. 6 para. 1 sentence 1 letter e) GDPR in conjunction with Section 3 para. 1 sentence 1 No. 10 NHG, as well as on the basis of Art. 6 para. 1 letter b) GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
Even if you do not make use of your rights below, your data will only be stored by us for as long as is necessary for the above-mentioned purposes. The log files after are generally stored for a maximum of 7 days. The specified storage periods do not apply if, in derogation thereof, a longer storage or retention period is required by law or is necessary for legal enforcement within the statutory limitation periods. If data is only retained for the aforementioned purposes, data access is limited to the extent necessary for this purpose.
Unless we have specified otherwise in this regard, we will generally keep your data to ourselves and make it available only to those employees who need it for their work in the performance of their duties. This does not apply if we are legally obliged to disclose it.
In order to ensure secure transmission of your data, all data is encrypted with a TLS certificate.
We would like to inform you that the provision of your data is neither legally nor contractually required. If you do not provide your data, this may mean that the website cannot be displayed to you or only to a limited extent.
Automated decision-making including profiling as defined in Art. 22 (1) and (4) GDPR does not take place.
Transfer to third countries
We would like to point out that when using optional services on our site, users’ data may be processed outside the European Union. In particular, it is possible that data is stored on servers in the USA or that security authorities access the data at subsidiaries of US parent companies. In exceptional cases, there is then the possibility that your data may be processed by US authorities.
This may result in risks for you because, for example, the enforcement of your rights could be made more difficult as there are no sufficient official or judicial legal protection options against this processing. Furthermore, there are no specific safeguards pursuant to Art. 46 f. GDPR to compensate for any shortcomings. For these reasons, the European Court of Justice has assessed the level of data protection in the U.S. as insufficient when measured against EU standards of the GDPR.
A use of the services thus affected with regard to the exceptional transfer to a non-European third country therefore only takes place after you have given your consent in accordance with Art. 49 (1) (a) GDPR. Your consent or refusal is stored in a cookie set by us. You can revoke your selection at any time with effect for the future via “Cookie settings” at the bottom of our website.
Your right to object according to Art. 21 GDPR
If we process your data on the basis of tasks in the public interest on the legal basis of Art. 6 (1) sentence 1 letter e) GDPR, you have the right to object to the processing of personal data relating to you at any time for reasons arising from your particular situation; this also applies to profiling based on Art. 6 (1) sentence 1 letter e) GDPR within the meaning of Art. 4 No. 4 GDPR.
In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Your right of revocation according to Art. 7 para. 1 sentence 1 GDPR
If we process your data on the basis of your consent, you have the right to revoke your consent at any time with effect for the future. This means that the lawfulness of the processing that took place on the basis of the consent until the revocation is not affected. The declaration of revocation can be made informally and does not require any justification. You can revoke your selection at any time via “Cookie settings” at the bottom of the page of our website. If you revoke your consent, you will not suffer any disadvantages as a result.
Your other rights
You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of the data processing, the data recipients and the storage period.
If incorrect data is processed, you can demand that we correct this data without delay. If the legal requirements according to Art. 17 or 18 GDPR are met, you also have the right to immediate deletion or restriction of the processing of the data. Please note that restricted processing of the data may not be possible.
Furthermore, you may exercise your right to data portability under the conditions of Art. 20 GDPR.
Otherwise, to assert your rights, please contact:
Leuphana University Lüneburg
Thhone: 04131-677 1499
If you have any further questions, our data protection officer will be happy to advise you. You can also contact a competent data protection authority with complaints relating to data protection.
Directly responsible for Leuphana University Lüneburg:
Die Landesbeauftragte für den Datenschutz Niedersachen