Privacy statement

  1. Kempten University of Applied Sciences
  2. Privacy statement

I. Name and address of the responsible party and contact details for the data protection officer

Responsible party

Kempten University of Applied Sciences
Corporation under public law

Bahnhofstrasse 61
87435 Kempten, Germany

P.O. Box 1680
87406 Kempten, Germany

Tel.: +49 (0)831 2523-0
Fax: +49 (0)831 2523-104
Email: post(at)hs-kempten.de

Authorised representative

President Professor Wolfgang Hauke

Contact details for the Data Protection Officer

Data Protection Officer at Kempten University of Applied Sciences
Bahnhofstrasse 61
87435 Kempten
Fax: +49 (0)831 2523-9283
Email: Datenschutz(at)hs-kempten.de


II. General

We are concerned and legally required to protect data.

Purposes and legal bases of processing

Pursuant to Art. 2 para. 6 BayHSchG, Art. 4 para. 1 sentences 1 and 2 BayEGovG, we offer our services and administrative duties and inform the public about our activities on our websites.

Our presences on social media are part of our public relations work. Our aim is to inform and communicate with you appropriately for the target group, Art. 2 para. 6 BayHSchG. We make it possible for you to get in touch quickly electronically and to communicate directly via the media of your choice, § 5 para. 1 no. 2 TMG.

We block or delete any content, posts or requests that violate the rights of third parties, constitute a criminal offence or misdemeanour, or do not comply with legal or contractual obligations of conduct, and disclose them to the competent authority and/or social media service.

Insofar as other or more specific legal bases are relevant, we will provide separate information about this in this privacy statement.

Our IT service providers may also receive your personal data as part of the commissioned processing contracts that we have agreed. However, to ensure the security of our data processing systems, we do not disclose our service providers.

Host for this website

This website is hosted by the following provider:

Mittwald CM Service GmbH & Co.KG
Königsberger Str. 4-6
32339 Espelkamp, Germany


III. Categories of data

1. Log files

When you access this or other pages on the Internet, you transmit data to our web server via your browser. The following data are recorded during any ongoing connection for communications between your internet browser and our web server:

  • IP address, anonymised
  • Directory protection user
  • Date
  • Time
  • Accessed pages
  • Protocols
  • Status code
  • Data volume
  • Referrer
  • User agent
  • Accessed host name

IP addresses are stored in anonymous format by removing the last one to three digits, e.g. “127.0.0.1” becomes “127.0.0.0”. IPv6 addresses are also anonymised. The anonymised IP addresses will be saved for 60 days. Details of the directory protection user used will be anonymised after one day.

It is absolutely necessary to collect the above-mentioned data and store it in server log files in order to operate the website. No user profiles are created from this data. There is no possibility for the user to object.

Log files are usually kept for a maximum of sixty days.

2. Cookies

This website uses the following essential (mandatory) cookies:

NameProviderPurposeValidity
in2cookiemodal-selectionin2cookiemodalsSaves the privacy settings that you select in the Consent Management window.1 year

Please note that if you refuse essential cookies, the functionality of this website may be impaired.

This website uses the following analytics cookies, which are not mandatory:

NameProviderPurposeValidity
_pk_idMatomoStores details about the user such as the unique user ID.13 months
_pk_sesMatomoStores data temporarily during visits to website.30 min
_pk_test.cookieMatomoChecks whether the visitor’s browser supports cookies.30 min
mtm_consentMatomoSaves the privacy settings that you select for Matomo in the Consent Management window.1 year


You can change your individual cookie settings here:

3. Administration and editing

For administrative and editing purposes, function identifiers and personal identifiers with access protection mechanisms are generated, and changes made with these identifiers are logged.
These identifiers are deactivated after the person in question has left.

4. Communication

If you communicate an issue or an opinion to us by email, post, telephone, fax or social media, the information provided will be processed for the purpose of handling the issue, for any follow-up questions, and for exchanging opinions. We always use the same communication channel for this, unless you wish to switch channels.
Physical mail, emails and social media posts and messages will be deleted no later than 6 years after the end of the year in which the event in question occurs.

5. Forms: Data collection, storage and processing

The website of Kempten University of Applied Sciences contains forms in which users can voluntarily enter personal data (e.g. name, address, email address, telephone number) for certain purposes (e.g. making contact). The data will be used solely for the purpose stated in the form and will be deleted after the process has been completed. Personal data will not be passed on, sold or otherwise transmitted to third parties. This information will only be used for marketing purposes (e.g. newsletters) with the express consent of the user. Users have the right to revoke their consent henceforth at any time. Unless there are legal reasons to the contrary, the data will be deleted immediately.

6. Statistical evaluation using Matomo

This website uses Matomo, an open source software for statistically analysing access by visitors. Matomo uses “cookies”, which are text files placed on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of this website is stored on the provider’s server in Germany. The IP address is anonymised immediately after processing and before it is stored. The last two bytes of the visitor’s IP address are masked.
Upon entering the website, users can decide for themselves whether their visit is to be recorded (Art. 6 para. 1 sentence 1 litera a GDPR and § 25 para. 1 TTDSG). This is performed using the the consent management tool. Users can change their decision at any time by clicking the “Change cookie settings” button on the “Data protection” page.

7. Integration of YouTube videos

YouTube videos are integrated into this website using framing in “extended data protection mode”, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube videos are loaded via the youtube-nocookie.com domain, and they can only be shown with the user’s prior explicit consent (opt-in method), (Art. 6 para. 1 sentence 1 litera a GDPR and § 25 para. 1 TTDSG). Simply loading a page with YouTube videos does not place a cookie, nor does it initiate any data processing.
If the user watches the video, it cannot be guaranteed that YouTube won’t initiate further data processing over which the website operator no longer has any control (e.g. placing cookies, reading stored cookies, establishing a connection with YouTube and the DoubleClick network).
We use the integrated opt-in method in order to give users the opportunity to object.


IV. Data subject rights

According to the General Data Protection Regulation, you have the following rights:

If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).
If inaccurate personal data is processed, you have the right to rectification (Art. 16 GDPR).

If legal requirements are met, you can request deletion or restriction of processing and can also also object to processing (Art. 17, 18 and 21 GDPR).

If you make use of your above-mentioned rights, we will check whether the relevant legal requirements are met.

If you have consented to data processing, you can revoke this for the future at any time. f you have given consent on our website via our consent management tool, you can revoke or change this consent by clicking the “Change cookie settings” button on the “Data protection” page.

Furthermore, you have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection.


V. Our presences on social media

We maintain publicly accessible profiles on social networks. The individual social networks used by us can be found below.

Social networks such as Facebook, Twitter etc. can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations that are relevant to data protection. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the social media portal concerned. In this case, this data collection occurs, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. Thus, you can be shown interest-based advertising inside and outside the social media presence in question. Provided you have an account with that social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we are not able to track all processing procedures on the social media portals. Depending on the provider, further processing procedures may therefore be performed by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the social media portals in question.

Legal basis

The legal basis for the use of social media in general can be found above under II.

Responsible party and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the social media portal in question (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. The possibilities open to us are largely determined by the corporate policy of the respective provider.

Retention period

The data collected directly by us via a social media presence will be deleted from our systems as soon as you request us to do so, revoke your consent to store it, or the purpose for storing the data no longer applies. Cookies remain stored on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence over the period for which your data is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the collected data is also transferred to the United States and other third countries.

We have entered into a joint processing agreement (controller addendum) with Meta. This agreement specifies the data processing operations for which we or Meta are responsible when you visit our Facebook page. You can view this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

For details, please refer to Facebooks privacy policy:
https://www.facebook.com/about/privacy/.

Instagram

We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
For details on how they handle your personal data, please refer to Instagram’s privacy policy:
https://help.instagram.com/519522125107875.

LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
For details on how they handle your personal data, please refer to LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy.

TikTok

We maintain a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
For details on how they handle your personal data, please refer to TikTok’s privacy policy:
https://www.tiktok.com/legal/page/eea/privacy-policy/en.

Twitter

We maintain a profile on Twitter. The provider is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
For details on how they handle your personal data, please refer to Twitter’s privacy policy:
https://twitter.com/en/privacy.

XING

We maintain a profile on XING. The provider is New Work SE, Dammtorstr. 30, 20354 Hamburg, Germany.
For details on how they handle your personal data, please refer to XING’s privacy policy:
https://privacy.xing.com/en.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
For details on how they handle your personal data, please refer to YouTube’s privacy policy:
https://policies.google.com/privacy?hl=en.


VI. Other information abut our privacy statement

We reserve the right to amend this privacy statement from time to time so that it always complies with the current legal requirements, or in order to implement changes to our services in the privacy statement, e.g. when introducing new services. The new privacy statement will then apply to your next visit.

If you have any questions, besides contacting the Data Protection Officer, you can also email: post(at)hs-kempten.de.