Data protection is of particular concern to us. We process your personal data (hereinafter „data“) in accordance with legal requirements and would like to do so in a transparent manner. Therefore, we would like to use the following data protection information to briefly explain what data we process and for what purposes and on what legal basis this is done. In addition, you will receive information about contact persons as well as your rights in connection with data processing.

Name and contact details of the controller:

Leuphana Universität Lüneburg, vertreten durch den Präsidenten, Universitätsallee 1, 21335 Lüneburg

Contact details of the data protection officer:

Leuphana Universität Lüneburg, - Datenschutzbeauftragter - , Universitätsallee 1, 21335 Lüneburg, E-Mail: dsb@leuphana.de

Purposes and legal basis of data processing:

Die Datenbank und Webserver der Anwendung werden von der Leuphana Universität Lüneburg, Universitätsallee 1, 21335 Lüneburg betrieben.

Purposes and legal basis of data processing:

1. Website Provision

As soon as you visit our websites, we store data from you in so-called log files for 14 days. This includes your IP address, the date and time of the page access, the URL called up, the URL that you last visited (referrer URL), the amount of data transferred from the file called up, access status („requested file transferred“, „not found“, etc.), the browser you are using (UserAgent) and its version, as well as the version of the operating system you are using. In addition, the URL called up, the browser used and its version, as well as the version of the operating system used by you and the screen size used are sent to our server together with JavaScript error messages in order to be able to analyze and eliminate error messages of the JavaScripts used on our site. A connection with your IP address does not take place. We use this data to prevent misuse of our website and to ensure that your visit to our website is trouble-free and optimal.

We use technical aids on our website for various functions, in particular cookies, which can be stored on your terminal device. We set two temporary session cookies, each with a session ID, as far as you visit myCampus. This enables us to recognize you as a user during your visit, e.g. so that you only have to log in for access-protected areas at the beginning of your visit. Temporary session cookies are deleted at the latest after you have left our online offer and closed your browser, or you delete your cookies in the browser.

The storage of or access to information in your terminal equipment takes place in accordance with Section 25 (2) No. 2 of the Telecommunications and Telemedia Data Protection Act (TTDSG). The legal basis under data protection law for the technically required processing for the presentation and provision of myCampus on the Internet for the purpose of providing university information systems, as well as for the informational use of this processing, for members as well as relatives who are not in a service or employment relationship with Leuphana, is Section 3 S. 1 No. 1 NDSG, Art. 6 Para. 1 S. 1 Letter e), Paras. 2 and 3 GDPR in conjunction with. § 17 para. 1 sentence 1, para. 3 NHG in conjunction with the respective access - admission regulations as well as the enrollment regulations. The legal basis of the processing for employees in an employment relationship are §§ 3 S. 1 Nr. 1, 12 Abs. 1 NDSG in conjunction with. Art. 6 para. 1 p. 1 letter e), para. 2 GDPR in conjunction with. § Section 88 para. 1 NBG and for civil servants Section 3 p. 1 no. 1 NDSG in conjunction with. Art. 6 para. 1 p. 1 letter e), para. 2 GDPR in conjunction with. § 88 para. 1 NDSG. Legal basis for all other users § 3 S.1 Nr. 1 NDSG in conjunction with. Art. 6 para. 1 p. 1 letter e) GDPR in conjunction with 3 para. 1 p.1 No. 10 NHG.

2. Applicant account for study place application

For the application process, you must register to create an applicant account so that documents can be submitted via a secure channel and information may be made available to you in a protected area during the application process. For this purpose, you must create a user account by providing a first and last name, date of birth, birth name, gender and an e-mail address. In addition to a verification request, you will receive notifications to the e-mail address you have provided, informing you of any changes or notices. You will also be asked to set a personal password. A username will be generated automatically or you can use the specified e-mail address. You can log in and apply with the access data after verification in your personal account. If you already have a myCampus applicant account or a Leuphana-Account account, you will automatically be asked to log in with the existing account. In the course of the application process, further personal data will be collected. We will inform you separately about the processing of this data in relation to your study program. You can view the data you have entered, as well as information on the status of your application, at any time in your applicant account. The processing is carried out in the performance of the task of allocating study places at Leuphana University Lüneburg to applicants in the public interest in a secure manner. The legal basis for this processing is § 3 S. 1 Nr. 1 NDSG, Art. 6 Abs. 1 S. 1 Buchstabe e), Abs. 2 und 3 GDPR i.V.m.. § 17 Abs. 1 Satz 1, Abs. 3 NHG i.V.m. of the respective Zugangangs - Zulassungsordnung. Your basic account will be deleted after you receive your Leuphana-Account. In other cases, the duration of the basic account is 180 days.

3. myCampus-Account

Members and affiliates of the university can log in to myCampus using their Leuphana-Account. For this purpose, the data from the myCampus identity management system is provided (Leuphana-Account information, user ID, Leuphana e-mail address, role and residency at Leuphana). For students, the account acquisition process is started via Leuphana's identity system after successful enrollment / registration. For this purpose, relevant information (personal data, study information) is transferred from the myCampus system to the identity system so that a Leuphana-Account (incl. e-mail address) can be generated. The processing of your data is necessary to provide access-restricted university information systems for members and affiliates of Leuphana. The legal basis of the processing for members and relatives who are not in a service or employment relationship with Leuphana is § 3 S. 1 Nr. 1 NDSG, Art. 6 Abs. 1 S. 1 Buchstabe e), Abs. 2 und 3 GDPR i.V.m.. § 17 para. 1 sentence 1, para. 3 NHG in conjunction with the respective access - admission regulations as well as the enrollment regulations. The legal basis for processing for employees in an employment relationship is §§ 3 S. 1 Nr. 1, 12 Abs. 1 NDSG in conjunction with. Art. 6 para. 1 p. 1 letter e), para. 2 GDPR in conjunction with. § Section 88 para. 1 NBG and for civil servants Section 3 p. 1 no. 1 NDSG in conjunction with. Art. 6 para. 1 p. 1 letter e), para. 2 GDPR in conjunction with. § Section 88 para. 1 NDSG.

4. Facilitated account access

If you wish to facilitate obtaining or restoring your Leuphana-Account, we will use your e-mail address and mobile phone number to send you the access features for initial account setup separately by e-mail and SMS to the address/call number provided. During the initial setup, we also use your date of birth to identify you. This data processing is carried out for the purpose of convenient account setup and on the basis of your voluntarily declared consent. The legal basis is therefore Art. 6 para. 1 p. 1 letter a GDPR. We would like to inform you that the provision of your data to facilitate obtaining or recovering your Leuphana-Account is neither legally nor contractually required. If you do not provide us with the data, you will receive your new access data after personal authentication (with a certain lead time) by personal delivery or by mail.

General information:

If we did not receive your data directly from you, it was transmitted to us by Student Services or Accounting at Leuphana. Even if you do not make use of your rights below, your data will only be stored by us for as long as it is necessary for the above-mentioned purposes. This does not apply if, in derogation thereof, a longer storage or retention period is required by law or is necessary for legal enforcement within the statutory limitation periods. If data is only retained for the aforementioned purposes, data access is limited to the extent necessary for this purpose. As a matter of principle, we keep your data to ourselves and make it available only to those employees who need it for their work within the scope of fulfilling their tasks. This does not apply if we are legally obligated to disclose it. In addition, we reserve the right to have some activities, such as maintenance, user service and system development, carried out by third-party providers, provided that they offer sufficient guarantees that appropriate technical and organizational measures are implemented in such a way that the data processing complies with legal requirements and ensures the protection of your rights. For this purpose, we have concluded corresponding order processing agreements with the following service providers:

University of Technology Graz Rechbauerstraße 12, AT-8010 Graz, Österreich

Indibit GmbH Wittelsbacherring 10 95444 Bayreuth

ProtoSoft AG Gabriele-Münter-Str. 3 82110 Germering

Right of objection according to Art. 21 GDPR:

Insofar as your data is processed in accordance with section 1.of the data protection notice (performance of public tasks), you have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation.

In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Your right to withdraw your consent:

You have the right to revoke your consent for facilitated account acquisition at any time with effect for the future. This means that the lawfulness of the processing that took place on the basis of the consent until the revocation is not affected. The declaration of revocation can be made informally and does not require any justification. If you revoke your consent, you will not suffer any disadvantages as a result.

Your further rights:

You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of the data processing, the data recipients and the storage period. If incorrect data is processed, you may request us to correct this data without delay. If the legal requirements according to Art. 17 or 18 GDPR are met, you are also generally entitled to the right to immediate deletion or restriction of the processing of the data. Please note that restricted processing of the data may not be possible. Furthermore, you may exercise your right to data portability with regard to the facilitated account acquisition under the conditions of Art. 20 GDPR.

Zur Ausübung Ihrer oben genannten Rechte wenden Sie sich bitte an:

Leuphana University Lüneburg Studierendenservice Universitätsallee 1 21335 Lüneburg E-Mail: infoportal@leuphana.de

If you have any further questions, our data protection officer will be happy to advise you.

If you have any complaints regarding data protection, please contact a data protection authority of your choice.

Directly responsible for Leuphana University of Lüneburg is:

Die Landesbeauftragte für den Datenschutz Niedersachen Prinzenstraße 5 30159 Hannover. E-Mail: poststelle@lfd.niedersachsen.de