We, the University of Applied Sciences Trier, would like to welcome you on our website and are pleased that you are interested in our University. The protection of your personal data is important to us. Personal data includes individual information about personal or objective circumstances of a specific or definable individual person. This includes information as e.g. the regular name, address, telephone number and date of birth, e-mail-address or an IP-address. We collect such data only insofar as technically necessary as such data enjoys special protection. We would like to explain to you hereafter – according to our obligation by law – which data will be collected as you visit our homepage and how we use such data. The way we handle your data is in accordance with the rules of the EU-General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) as well as the State Data Protection Act of Rhineland-Palatine (LDSG).
This data protection declaration shall be applicable to the following websites: www.hochschule-trier.de and www.umwelt-campus.de. If we refer via links to other providers, such providers may have other principles and rules concerning data collection, processing and data use.
Data Controller is:
Trier University of Applied Sciences
Fax: +49 (0)651 8103 333
For all questions relating to data protection our Data Protection Official is at your disposal:
Herr Prof. Dr. Konstantin Knorr
Trier University of Applied Sciences
Art. 6 sec. 1 lit. (a) EU-GDPR shall be the legal basis if and insofar we obtain approval of the affected person for the processing of personal data.
Art. 6 sec. 1 lit. (b) EU-GDPR shall be the legal basis when we process personal data which is essential for the performance of a contract of which the affected person is a contracting party. This shall also apply for processing activities which are necessary for the execution of pre-contractual measures.
Art. 6 sec. 1 lit. (c) EU-GDPR shall be the legal basis if it is necessary to process personal data to fulfil a legal obligation which has to be satisfied by the University.
Art. 6 sec. 1 lit. (d) EU-GDPR shall be the legal basis if vital interests of the affected person or another person require the processing of personal data.Art. 6 sec. 1 lit. (f) EU-GDPR shall be the legal basis if the data processing is essential for the protection of legitimate interests of the University or a third person and if such legitimate interests are not predominated by fundamental rights and liberties of the affected person.
If you put personal data at our disposal due to your consent, we will use such data only for the purpose covered by your prior consent. Data storage beyond that purpose may be possible if EU or national rules of law or other rules and regulations which are binding for us, permit such storage. We will respect your protection requiring interests according to the rules of law.All personal data of an affected person will be deleted or locked as soon as the purpose is omitted. This shall also take place if a stipulated blocking period expires.
Our system automatically collects and records data and information coming from the user’s computer system on each visit of our website.Following data will be collected:
- Website used by the user to contact our website
- Date and time of the visit
- Transferred amount of data and information about the success of the visit (sog. Web-Log)
- Website, used by user before using the called website (Referer)
- Client-Information (as e.g. type of browser and operating system)
Some internal websites require the registration via user name and password for members of the University or registered users. User name and time of visit will be recorded, amongst other reasons for the prevention of misuse.
Legal Basis for Data Processing
Art. 6 sec. 1 lit. (f) GDPR shall be the legal basis for the temporary filing of data and the log files.
Purpose of Data Processing
The temporary storage of the IP-address by the system is necessary to facilitate the delivery of our website to user’s computer.
We use all access data mentioned above exclusively in a non-personalised format for the continuous improvement of our website by use analysis as well as to resolve any problems.
Timespan of Data Storage
Date will be deleted as soon as the storage is not necessary any longer to reach the intended purpose of their collection. This is the case within 14 days with respect to data collection for the provision of the website, after analysis and potential problems have been solved.
No Possibility to Object
The logging of your IP-address is absolutely essential for the provision and operation of our website as well as the data storage in log files. Hence, there is no possibility for the user to object.
We do not pass on to third persons personal data which we collect when a user visits our website.
You will find varying message forms and entry masks on our websites which you may use for the specified purpose. If a user makes use of those forms and/or masks, all entered data will be delivered to us and recorded. All recorded data will be specifically mentioned in each single case.
Any user may contact us by e-mail-addresses as well. In such a case we will record all of user’s personal data transferred, the e-mail-address itself as well as the content of the message. Such data will be used exclusively for the processing of the conversation.
We apply for your permission for the data processing when you contact us and we will refer to this Data Protection Declaration.We do usually not pass on any of your data to third persons. If – nonetheless – we pass on data in single cases, we will inform you adequately.
Art. 6 sec. 1 lit. (a) GDPR is the legal basis for the data processing in case user has given his consent.Art. 6 sec. 1 lit. (f) GDPR is the legal basis for the processing of data which has been transferred due to e-mail correspondence. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 sec. 1 lit. (b) GDPR is an additional legal basis.
Data will be deleted as soon as the purpose for the collection of data has been reached. This is the case with respect to the personal data transferred by e-mail as soon as the conversation with the user is finalised. The conversation shall be deemed finalised if the parties have resolved the concerned issue terminally.If there is a deadline for the time of data storage, we will inform you adequately at the particular place.
User has the right to withdraw his consent for the processing of his personal data at any time. If user contacts us via e-mail, he may revoke the storage of his personal data at any time. Nonetheless, conversation with user may not be continued in such a case.
You may withdraw your consent or revoke the data storage by e-mail.All personal data which we have stored in the course of the contact will be deleted in such a case.
Your personal data will be stored in such a way that it will not be accessible for third persons by using all technical and organisational measures. Websites with sensitive content will be protected via cryptographic protocols as e.g. SSL/TLS.
Most of the standard form content of our websites is internally transferred by e-mail. When using communication via e-mail we cannot guarantee perfect data security. Hence we recommend using regular mail if the transferred information is sensitive.
If we process your personal data you are the „aggrieved party“ in the sense of the GDPR. As a consequence you are entitled to the following rights (towards the responsible person):
You have the right to ask the responsible person for a confirmation whether your personal data has been processed by us.
If such data processing took place, you have the right to ask the responsible person for the following information:
- the purpose for which the personal data has been processed
- the categories of personal data which has been processed
- the receivers resp. the categories of receivers to whom we have revealed your personal data or to whom we will reveal your personal data
- the intended time span of data storage of your personal data or – if specific information is not possible – certain criteria for the time span of data storage
- the existence of a right of objection or elimination of your personal data as well as a right of restriction of data processing by the responsible person or a right of objection against any data processing
- the existence of a right of complaint at a regulatory authority
- all available information where the data comes from if the personal data has not been directly collected from the concerned person
- the existence of an automated decision making process including profiling according to Art. 22 sec. 1 and 4 GDPR and – at least in such cases – significant information about the involved logic as well as the scope and the sought effects of such processing for the concerned person.
You have the right to ask for information whether your personal data will be transmitted in a third country or to an international organisation. You have the right to ask for information about the appropriate guarantees in connection with the transmission according to Art. 46 GDPR.
If you have claimed your right of correction, deletion or restriction of processing toward the responsible person, such person is obliged to inform all persons or entities which have received your personal data about the correction or deletion of data or restriction of processing unless this is impossible or only feasible with unreasonable effort.
You have the right toward the responsible person to be informed about such receivers.
When exercising this right you have also the right to obtain that your personal data will be transmitted directly from one responsible person to another one if this is technically feasible. Any freedoms or rights of other persons may not be damaged by this.
The right of data transferability does not apply for the processing of personal data which is necessary for the perception of a task which is in the public interest or in exercise of public authority which has been delegated onto the responsible person.
You have the right to file an objection against the data processing or your personal data for reasons deriving out of your specific situation at any time according to Art. 6 sec. 3 lit. (b) GDPR in connection with § 3 LDSG; this shall also apply with respect to a profiling which is based on these provisions.
The responsible person does not process your personal data any longer, unless he can prove compulsory reasons for the processing requiring protection which – at the same time – prevail your interests, rights and freedom or if the procession serves the enforcement, exercise or defence of legal claims.
You have the possibility to execute your right of objection in connection with the use of services of the information society – notwithstanding the Directive 2002/58/EG – while using automated procedures which apply technical specifications.
Right of Objection of the Data Protection Declaration of Consent
You have the right to withdraw your data protection declaration of consent at any time. Your withdrawal does not touch the lawfulness of data processing until the time of your withdrawal.
Automated Decision in Each Individual Case including Profiling
You have the right to be subject of a decision which is not exclusively based on automated procession – including profiling – and which will have legal effect on you or which will have a similar effect on you.
Right of Complaint with Supervisory Authority
Notwithstanding any other legal remedy by court or administration you have the right of complaint with a supervisory authority, especially in the member state where you have your domicile, your place of work or the place where the potential infringement took place if you are of the opinion that the processing or your personal data has violated the GDPR.
The supervisory authority where you filed your complaint shall inform the complainant about the current state of affairs and the result of the complaint including the possibility of filing a legal remedy at a competent court according to Art. 78 GDPR.
This Data Protection Declaration is currently valid and dated May 25th, 2018.
It might become necessary due to further development of our website(s) or due to the implementation of new technologies to change this data protection declaration. We reserve the right to change this data protection declaration for the future at any time. We recommand to read the current data protection declaration from time to time anew.
Other sectors of the University of Applied Sciences Trier, such as faculties, institutes, students’ councils or central facilities have their own rules of data protection. Such rules will be described in the data protection declaration of each single internet presence