The following data protection declaration outlines the extent to which we process personal data, which personal data we process, the legal basis for this processing and when we delete your personal data.
Controller and data protection officer
Hochschule Esslingen
University of Applied Sciences
Kanalstraße 33
73728 Esslingen am Neckar
Deutschland
Tel. 0711 397-49
Fax 0711 397-31 00
E-Mail: info(at)hs-esslingen.de
Legal form: Body governed by public law
Represented by Prof. Christof Wolfmaier, President
You can contact the data protection officer of Esslingen University of Applied Sciences at the address specified above by adding “z.H. Datenschutzbeauftragter der Hochschule Esslingen” or via e-mail at datenschutz(at)hs-esslingen.de.
Data processing in connection with our website
When you access a website, your browser regularly transmits data of your device, such as the IP address to which the website is sent, to the web server.
Each time you access our website, the following data are collected and stored in the log files of our system:
• IP address
• name of the accessed URL
• date and time of access
• data volume transferred
• information whether the access was successful
• browser type and version
• operating system
The legal basis for temporarily storing the data in order to provide the website is Art. 6 paragraph 1 (e) of the General Data Protection Regulation (GDPR) in conjunction with section 2 of the act on the higher education institutions in the Land of Baden-Württemberg (LHG). We provide the information on our website to inform the public about the processes at our institution as well as to advise and assist students and other interested persons regarding the contents, structure and requirements of our programmes of study. The legal basis for processing log files is Art. 6 paragraph 1 (f) GDPR. Processing log files is required to ensure the network security and information security of the website.
The data will be deleted once they are no longer necessary to achieve the purposes for which they were collected. For the data collected to provide the website, this is the case when the respective session has ended. Log files to ensure network security and information security will be deleted after 14 days.
Use of cookies
We use cookies on our website. Cookies are text files stored in the Internet browser or by the Internet browser on the user’s computer system. If a user accesses a website, a cookie may be stored in the user’s operating system. The cookie contains a characteristic string that enables a clear identification of the browser when the website is accessed again.
Cookies may have an expiration date. You can see the expiration date of the cookies used on our website in the data protection settings. You can prevent us from storing cookies by blocking the storing of cookies by our website in your browser. You can then, however, no longer use the features controlled by cookies. You can also check which cookies are stored in your browser and delete individual cookies.
We use cookies to improve your experience on our website. Some elements on our website require that the accessing browser can be identified after the user has switched to another website. Some features of our website cannot be offered without the use of cookies. The user data collected by cookies that are required for technical reasons are not used to generate user profiles. The legal basis for processing personal data by using cookies that are required for technical reasons is Art. 6 paragraph 1 (e) GDPR in conjunction with section 2 LHG.
The following data are stored and transmitted:
• language settings
• contrast setting
• font size setting
• keyboard shortcuts to use the website
• settings regarding embedded third-party content
• information about the settings chosen during your last visit so that these settings are stored
In addition, we use cookies on our website which enable us to analyse the online behaviour of our users. For more details, please see the section on web analytics below. The use of analytical cookies serves the purpose of improving the quality of our website and its content. Analytical cookies allow us to find out how the website is used in order to continuously optimise our services.
Web analytics
On our website, we use the open source software tool Matomo (previously PIWIK) to statistically analyse website visits. By evaluating the data we obtain, we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness and thus to fulfil our tasks according to section 2 LHG even better. The software tool uses cookies for this purpose. Cookies are text files stored on your computer to analyse how you use our website. If you consent, the information created by the cookies about how you use our website will be stored on our servers. The IP address will be anonymised directly after the information is processed and before it is stored. The statistical data are deleted as soon as they are no longer required for our recording purposes.
Analytics by Matomo are deactivated when you access our website. If you go to the data protection settings, you can agree to the analytics of anonymous user data. In order to store your settings, an identification cookie will be stored in your browser so that you are not asked for the settings each time you access the website. If you delete this cookie or use another device or browser, you need to revisit the data protection section and make the necessary adjustments.
The legal basis for web analytics is Art. 6 paragraph 1 (a) GDPR. You can revoke your consent at any time by making the necessary adjustments in the data protection section.
In detail, the following types of data are processed when you consent to voluntary web analytics:
• IP address (will be immediately anonymised before it is stored)
• URL of the pages accessed
• date of access
• referrer (referring website), if applicable
• operating system
• manufacturer and type of device used
• browser (type and version)
• resolution of the browser window
• language of the browser
• region, location, longitude, latitude of the visitor
• the amount of time spent on the web page
• the frequency of accessing the web page
Embedded third-party content
Embedded videos
We use embedded YouTube videos in the extended data protection mode. This means: YouTube does not store cookies for users who access a web page containing an embedded YouTube video player but do not click on the video to watch it. If a user clicks on the YouTube video player, YouTube will be informed about the IP address and may store cookies on the user’s computer. However, personal cookie information will not be stored if you click on embedded videos. Before the connection with third-party content is established, our website will expressly notify you of the external content and potential additional data processing activities by third parties. You can also consent to the display of third-party content in our tool for data protection settings. In this case, the third-party content is reloaded and you will not receive a separate notification for the embedded content since you already received the information in the tool for data protection settings. You can adjust these settings at any time. For more details on data processing by YouTube, please see the Privacy Policy of YouTube. We do not collect personal data within the context of embedding YouTube videos.
Embedded maps
We use embedded maps from the Google Maps service in the extended data protection mode. This means: Google Maps does not store any cookies for users who access a web page containing embedded maps from Google Maps but do not click on the map to see it. If a user clicks on the map, Google will be informed about the IP address and may store cookies on the user’s computer. However, personal cookie information will not be stored. Before the connection with third-party content is established, our website will expressly notify you of the external content and potential additional data processing activities by third parties. You can also consent to the display of third-party content in our tool for data protection settings. In this case, the third-party content is reloaded and you will not receive a separate notification for the embedded content since you already received the information in the tool for data protection settings. You can adjust these settings at any time. For more details on data processing by Google Maps, please see the Privacy Policy of Google Maps. We do not collect personal data within the context of embedding maps from Google Maps.
Rights of the data subject
Under data protection law, you have the following rights:
• the right of access in accordance with Art. 15 GDPR,
• the right to rectification in accordance with Art. 16 GDPR,
• the right to erasure in accordance with Art. 16 GDPR,
• the right to restriction of processing in accordance with Art. 18 GDPR,
• the right to object in accordance with Art. 21 GDPR relating to the particular situation of the data subject,
• as well as the right to data portability in accordance with Art. 20 GDPR.
In accordance with Art. 77 GDPR, you also have the option to lodge a complaint with the data protection supervisory authority responsible (Art. 51 paragraph 1 GDPR in conjunction with section 25 subsection 1 LDSG). The supervisory authority responsible is the commissioner for data protection and freedom of information of Baden-Württemberg:
The Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Information on your right to object according to Art. 21 GDPR
On grounds relating to your particular situation, you have the right to object to the processing of your personal data according to Art. 6 paragraph 1 (e) GDPR (data processing in the public interest, e.g. teaching and studying activities, research, further education) or (f) (processing for the purpose of a legitimate interest of the controller or a third party) at any time. We will then no longer process your personal data, unless we can prove legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Please send the revocation of your consent to the controller. Formal requirements must not be observed.
Do you have any questions about the collection, use or processing of your personal data? Do you want to make use of your right of access or your right to have personal data rectified, blocked or erased? Or do you want to object to the use of your data or revoke your consent?
Please contact the data protection officer of Esslingen University of Applied Sciences. For contact details, see above (e.g. datenschutz(at)hs-esslingen.de).