Privacy
Privacy Statement According to Artt. 13, 14 GDPR for the Processing of Data by the Pädagogische Hochschule Weingarten, University of Education, on Their Websites
Please note that the English text serves only for your information. The legally binding text is the German version of this privacy statement.
Back to the German version. Zurück zur deutschen Version.
1 Introduction
We are pleased about your visit of our websites. Ensuring the safety and protection of the data of our websites’ users and complying with data protection regulations is a matter of major concern for the University of Education Weingarten (hereinafter „PH Weingarten“, „we“, „us“). In the following we would like to inform you about how we process your personal data on our websites.
2 Identity and Contact Details of the Controller
Pädagogische Hochschule Weingarten
University of Education
Kirchplatz 2
88250 Weingarten
Germany
E-Mail: info(at)ph-weingarten.de
Telefon: +49 751 501 - 0
3 Contact Details of the Data Protection Officer
External Data Protection Officer according to Art. 37 GDPR:
Maximilian Musch (Data Protection Officer)
Deutsche Datenschutzkanzlei
Richard-Wagner-Straße 2
88094 Oberteuringen
Germany
Tel: +49(0)7542/949-2100
E-mail: anfragen(at)ddsk.de
4 Purposes of the Processing
We process your data to enable you to retrieve information from our websites and to contact us. We run these websites for the purposes of public relations, the exercise of official authority and to perform our task carried out in the public interest.
Where based on your consent, we process your data for statistical purposes. We process your data as well to protect our systems, and, in case of misuse of our web presences, for compliance with legal obligations we are subject to and for the establishment, exercise or defence of legal claims for our part.
5 Details about the Processing of Data
5.1 Cookies
On our websites we use some technically necessary cookies, like the one of our cookie consent tool. We deployed CCM19 as our consent tool, which is hosted directly at our web host and the registered offices of the developing and maintaining enterprise are situated in Germany as well.
For some cookies we need your consent (legal basis Art. 6 (1) (a) GDPR) for the following services and purposes:
5.1.1 Matomo
Issuer
InnoCraft.
Description
Matomo uses cookies. These cookies create user information that is transmitted to our servers and stored there. This data serves for statistical purposes and for the improvement of our websites and our server.
External Link to the Privacy Statement.
Processed Data
• browser information;
• date and time of the visit of our websites;
• usage data;
• device information;
• referrer URL;
• user agent;
• geographical location;
• screen resolution;
• time zone;
• amount of visits;
• user ID;
• anonymised IP address;
• page title;
• clicked or downloaded files;
• clicked links to external domains;
• time of the user’s first visit;
• time of the user’s previous visit;
• page URL.
Purpose of Data Processing
• advertisement;
• analytics;
• improvement;
• delivering of contents;
• personalisation;
• payment;
• cloud computing;
• functionality;
• website security;
• online audio dissemination;
• tracking;
• web hosting;
• creation of individual user profiles and addition of personal data to you as person;
• observation;
• measurements of target groups;
• session cookie: anonymised key for secure user identification and cookie; session handling;
• cookie disclaimer;
• session tracking.
Cookies
name: _pk_testcookie
storage period: 1 second
description: A cookie is set and should be deleted immediately (used to check if the user’s browser supports cookies).
name: mtm_consent
storage period: for ever
description: mtm_consent (or mtm_consent_removed) created for a period of 30 years to remember the user’s consent or withdrawal of consent.
name: MATOMO_SESSID
storage period: n.a.
description: Matomo uses cookies. These cookies create user information that is transmitted to our servers and stored there. This data serves for statistical purposes and for the improvement of our websites and our server.
name: mtm_consent_removed
storage period: n.a.
description: mtm_consent (or mtm_consent_removed) created for a period of 30 years to remember the user’s consent or withdrawal of consent.
name: _pk_id.*
storage period: 13 months
description: This cookie is used to record the behaviour of the websites’ visitors. It is used to collect statistics about the use of the websites. These cookies do not contain personal data and only serve for website analytics.
name: _pk_ref.*
storage period: 13 months
description: This cookie is used to store the login information of the refferer that was used initially to visit the websites.
name: _pk_ses.*
storage period: 30 minutes
description: This cookie is used to record the behaviour of the websites’ visitors. It is used to collect statistics about the use of the websites. These cookies do not contain personal data and only serve for website analytics.
name: _pk_cvar.*
storage period: 30 minutes
description: This cookie is inactive by default and has to be activated by Matomo. It gathers variables defined by the user that were generated during the previous page view.
name: _pk_hsr.*
storage period: 30 minutes
description: This cookie is necessary to gather all the page views of a session. The cookie is generated by loading the configured access page.
Legal Basis
Consent, Art. 6 (1) (a) GDPR.
Location of Processing
European Union.
5.1.2 Social Media - YouTube Videos
Issuer
Google Ireland Limited.
Description
This cookie stores your preferences and other information, including your preferred language, the amount of search results you would like to see displayed on the website and if you would like to activate the SafeSearch filter of Google.
External Link to the Privacy Statement.
Processed Data
• IP address;
• device information;
• referrer URL;
• watched videos.
Purpose of Data Processing
• displaying videos;
• improvement of service;
• payment;
• cloud computing;
• session management;
• provision of a market for marked data.
Cookies
name: PREF
storage period: 8 months
description: This cookie stores your preferences and other information, including your preferred language, the amount of search results you would like to see displayed on the website and if you would like to activate the SafeSearch filter of Google.
name: VISITOR_INFO1_LIVE
storage period: 6 months
description: This cookie is set by YouTube to track the user settings for YouTube videos embedded in websites. It can track, too, if the visitor of a website uses the latest or an outdated version of YouTube’s user inferface.
name: use_hitbox
storage period: immediately
description: This cookie increments the „views“ counter of a YouTube video.
name: YSC
storage period: session
description: Registers a unique ID to produce statistics about which YoutTube videos were watched by a user.
name: VISITOR_PRIVACY_METADATA
storage period: 180 days
description: Stores session data.
Legal Basis
Consent, Art. 6 (1) (a) GDPR.
Location of Processing
European Union.
5.1.3 Withdrawal of Consent to Set Cookies
Navigating to the footer (that is the bottom section of a webpage) you can find on every page of our websites the tab „Cookie Einstellungen“ (in English: cookie settings). By clicking the tab you call up again the consent tool. By clicking „Ablehnen“ (in English: decline) you withdraw your consent.
5.2 Social Media
The PH Weingarten maintains social media channels.
Mastodon, LinkedIn and the services of Meta (Facebook und Instagram) are not embedded directly, viz., we do not use a plug-in.
Whenever we refer to one of these channels, we set a link you are free to follow or not. The respective privacy statements are provided here (available only in German).
Some YouTube videos are embedded directly in our websites. Please consider before you click the videos that you watch these videos nonetheless on YouTube.
Services setting cookies not technically necessary are subject to the legal obligation in the EU to obtain your consent to do so. To comply, these services usually apply cookie consent tools. We generally recommend to reject any optional cookies of LinkedIn, Facebook, Instagram and YouTube, if possible.
Likewise we suggest to apply restrictive browser settings and to regularly delete your browsing history, especially before and after your log-in on any of these platforms. We discourage you from visiting other websites while you are logged on such a platform.
For services using Google Analytics (e.g. YouTube) there is the possibility to install a browser add-on that will deactivate Google Analytics. The add-on is available for Mozilla Firefox, Google Chrome, Apple’s Safari and Microsoft Edge. You find it here (external link).
5.3 Newsletter for Research and Transfer
The PH Weingarten publishes the newsletter for research and transfer, „wissenschaft@phw“. The newsletter gives insights into current events at our university relating to these topics. For the dispatch we cooperate with Brevo (formerly Sendinblue), a processor with which we concluded a data processing agreement (dpa).
For the newsletter subscription we necessarily process your e-mail address for the dispatch, proposed topics as well as optionally – to address you correctly – your name and surname.
We also process the verification of your consent, and in this context the exact time of subscription, the ID of the subscription form and the respective IP address at the time of the subscription.
To protect our systems from misuse (spam protection) the subscription form is preceded by a Google reCAPTCHA whereby – when performing the subscription process – some data is processed by Google Ireland Limited, with its registered offices in Gordon House, Barrow Street, Dublin 4, Irland,
This data contains: browser interaction and the analysis if you are a bot yes or no, solving of the CAPTCHAs, IP address, location of access, time of access and possibly further data of Google background services of further websites.
The Google reCAPTCHA sets a session cookie „_grecaptcha“ for spam analysis, viz., for the security of our systems, and communicates with the domain „www.google.com“ (external link) whereby further cookies are set and Google LLC processes further data.
Mitigation: We recommend to log out from all other online accounts before subscribing for the newsletter, to delete as well all your browsing history including all the data of the cache and all the cookies and log-in data, to close the browser, to subscribe for the newsletter right after opening the browser again and to immediately delete once again your browsing history, the cache und the cookies and to close the browser again. Comprehensive and up-to-date information to this is provided here (external link).
Navigating to the footer (that is the bottom section) you find in every newsletter e-mail a tab to withdraw at any time with effect for the future your consent to receive the newsletter and to the respective data processing. The withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
If you refuse the processing of your data in the way explained above you can also access the editions of the newsletter on our official websites here.
6 Categories of Personal Data That Is Processed
The data processed by visiting our websites contains first of all so-called log-file data. These data are transmitted by default from your browser to the server hosting the respective online presence whenever you visit a website. These data are:
• type and version of your browser;
• used operating system;
• loaded website;
• the website you visited previously (referrer URL)
• date and time of the server request.
Whenever you contact us via e-mail or by phone, we process the data necessary to respond and document (for as an authority we are legally bound to do so), e.g., name, surname, phone number, e-mail address, request and where appropriate further data depending on the matters’ requirements.
The information about the data we process with your consent is provided in the subitem „Cookies“. The information about the data processing that arises out of your use of our social media channels is provided in the subitem „Social Media“. The information about the data we process for your subcription and the dispatch of our newsletter is provided in the subitem „Newsletter for Research and Transfer“.
7 Legal Basis for the Processing
The legal basis for the processing is:
• first sentence of Art. 6 (1) and Art. 6 (1) (c) and (e) GDPR in conjunction with
• Art. 6 (3) GDPR in conjunction with
• § 4, Zulässigkeit der Verarbeitung personenbezogener Daten, Landesdatenschutzgesetz Baden-Württemberg, in conjunction with
• § 2, Aufgaben, Abs. 9, Landeshochschulgesetz Baden-Württemberg.
The legal basis for the processing of data when we obtain your consent to the statistical analysis using Matomo and to the use of social media on our websites is Art. 6 (1) (a) GDPR.
The legal basis for the processing of data you provide publicly by posting and commenting on our social media channels ist Art. 6 (1) (a) and (b) in conjunction with § 19a, Recht der öffentlichen Zugänglichmachung, UrhG.
The processing of data by subscribing to and receiving the newsletter for research and transfer, including the use of the Google reCAPTCHA, is performed on the basis of your freely given consent in accordance with Art. 6 (1) (a) GDPR. We need to precede the Google reCAPTCHA to protect the e-mail service from malicious input (spam). We process the verification of your consent on the basis of Art. 6 (1) (c) and Art. 6 (3) (a) GDPR. If you refuse the processing of your data in the way explained above you can also access the editions of the newsletter on our official websites here.
In case of unlawful conduct against the PH Weingarten, including regarding to these websites and on our social media channels and regarding to lawsuits concerning our social media accounts, the legal basis is first sentence of Art. 6 (1) and Art. 6 (1) (c) as well as Art. 17 (3) (b) and (e) GDPR.
8 Recipients or Categories of Recipients of the Personal Data
Recipients of the data are in the first place the employees of the PH Weingarten in charge of the processing for the declared purposes and related matters. This applies to all the data you provide us with by contacting us, too.
Further recipients of the data are likewise in joint controllership the platform operators of the social media platforms of LinkedIn, Facebook (Meta), Instagram (Meta) and YouTube (Google).
9 Transfer of the Data to a Third Country
The PH Weingarten does not actively transmit any data to a third country. The provision of the social media channels – with exception of the channel on Mastodon – is performed in joint controllership with the respective platform operators and thus including the data processing and transmisssion performed by them. Since the agreement on the Data Privacy Framework there is an adequacy decision of the EU regarding the level of data protection in the USA. The platform operators Google (YouTube, reCAPTCHA), LinkedIn and Meta (Facebook, Instagram) are registered according to the legal requirements at the United States Department of Commerce.
10 Period for Which the Personal Data Will Be Processed Respectively the Criteria Used to Determine This Period
We process the data as long as the purposes and the legal basis above persist. The respective period of data processing performed by Google, Meta and LinkedIn is listed in the privacy statements of these platform operators.
11 Obligation to Provide the PH Weingarten With Your Data and Consequences of Failure of Its Provision
For technical and legal reasons we cannot prevent the transmission of data between your browser and the host of the PH Weingarten’s websites whenever you visit our websites – connection to our websites is not possible without processing this data.
Beyond that you can access the contents of our websites without providing further personal information.
If you wish to subscribe to our newsletter for research and transfer we need to perform the respective data processing, since otherwise we cannot implement the spam protection and perform the dispatch of the e-mails.
If you like to use our social media channels on LinkedIn, Facebook (Meta), Instagram (Meta) and YouTube (Google) (here also by clicking one of the videos embedded in our websites), then further processing of your data is performed by these platforms, beyond our control.
If you wish to interact with us via social media, but refuse the data processing performed by LinkedIn, Facebook (Meta), Instagram (Meta) and YouTube (Google), we recommend to contact us on our channel on Mastodon.
12 Existence of Automated Decision-Making
We do not perform any automated decision-making.
13 Your Rights
You have got the right to request from us access to and rectification or erasure of your personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.
Where the processing is based on point (a) of Article 6 (1) or point (a) of Article 9 (2), you have got the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You have got the right to lodge a complaint with a supervisory authority.
You can contact the supervisory authority in charge of the PH Weingarten as follows hereinafter:
Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(Commissioner for Data Protection and Freedom of Information Baden-Württemberg):
Address: Lautenschlagerstraße 20, D-70173 Stuttgart, Germany
Postal Address: Postfach 10 29 32, 70025 Stuttgart, Germany
Telephone Exchange: +49 711 / 61 55 41-0
E-mail: poststelle(at)lfdi.bwl.de
Date: 8th August 2024