The German version of this document is the only legally binding version. This English translation is for your convenience only.
It also applies to the following websites insofar as we assume responsibility for processing personal data:
Data protection is both our priority and our legal obligation.
In order to ensure adequate protection of personal data during transmission, HNU uses suitable, state-of-the-art encryption methods (e.g. SSL/TLS) and secure technical systems.
- Interactive photo galleries (“sliders”) are not visible. Instead, a white area appears.
- Contact forms are visible, but errors may occur in data validation.
- The application portal is not functional.
- The Matomo web analysis is not functional.
Neu-Ulm University of Applied Sciences
Tel: +49 (0) 731/9762-0
The Neu-Ulm University of Applied Sciences is a public corporation. It is legally represented by its president, Prof Dr Uta M Feser.
Contact information for the Data Protection Officer
Data Protection Officer
Purposes of and legal basis for the processing of personal data
Public relations – the responsibility of universities of applied sciences
In meeting our obligation as a university of applied sciences in accordance with Art. 2(6) of the Bavarian Higher Education Act (Bayerisches Hochschulgesetz, BayHSchG) and Art. 4 (1.1 and 1.2) of the Bavarian Act to Promote Electronic Government (Bayerisches E-Government-Gesetz, BayEGovG), we make our general and administrative services available on our website, as well as information for the public about our activities. The legal basis for processing your personal data for this purpose is Art. 6 (1e) and (3) of the General Data Protection Regulation (GDPR), Art. 4 (1) of the Bavarian Data Protection Act (Bayerisches Datenschutzgesetz, BayDSG) in combination with Art. 2 (6) of the Bavarian Higher Education Act (BayHSchG).
One component of our public relations work is social media. Here our aim is to provide and exchange information, tailored to specific target groups, Art. 2 (6) BayHSchG. We enable quick, electronic means of contact and immediate communication via the medium of your choice, Art. 5 (1.2) of the Telemedia Act (Telemediengesetz, TMG).
We report content and inquiries that infringe on the rights of others or that constitute a criminal or regulatory offence, or that contradict legal or contractual duties of conduct, to the relevant authorities or social media platform providers and react with measures such as blocking or deleting.
If you would like to contact us, this website provides several options. You may contact us via mail, telephone, email or fax (contact details for the respective contact people are given), or you may submit an inquiry using the online forms provided. We use your data solely for the purpose of responding to your request. Should further processing of your data be necessary, we will request your consent. The legal basis for this type of data processing is Art. 6 (1a) of the GDPR.
If there are specific topics at HNU that interest you, you may register to receive corresponding newsletters on our website. You will need to consent to the processing of your data via a double opt-in procedure. The legal basis for this type of data processing is Art. 6 (1a) of the GDPR.
Registration for various events and seminars
You may register for events and seminars taking place at HNU via our website. Depending on the particular event, the legal basis for the processing of data is either Art. 6 (1e) and (3) GDPR, Art. 4 (1) BayDSG, Art. 27 of the BayDSG or your consent (Art. 6 (1a) GDPR). For exhibitors, lecturers, etc., the legal basis can be Art. 6 (1b) GDPR. We use your data for the planning and execution of the respective events.
Other data categories and processing
Administration and editing
Function identifiers and personal identifiers are created with access protection mechanisms for administration and editing purposes, and changes made to these identifiers are recorded.
Log file data
When you visit this or other websites, you transmit data to our server via your internet browser. The following data is recorded for purposes of communication when there is an active connection between your internet browser and our server:
- Data and time of the request
- Name of the requested file
- Site from which the file was requested
- Access status (e.g. file transferred, file not found)
- Web browser in use and screen resolution, as well as operating system in use
- Complete IP address of the requesting computer
- Volume of transferred data
The basic functions of our website can be used without cookies.
Cookies are issued for logins. These cookies are only used during a particular browser session and are not stored for a longer period of time.
HNU collects photographic documentation at events and meetings within the scope of our press and public relations activities, in which guests may be visibly recognisable. At such events, there will be notices posted to inform the attendees. The legal basis for taking personal photographs is the authorisation norm of Art. 4 (1) of the Bavarian Data Protection Act (BayDSG) and for the corresponding publication, the authorisation norm of Art. 5 (1.1.1) of the BayDSG. HNU weighs its interests in publication for public relations purposes against the basic right of the persons depicted in the photographs to informational self-determination. If HNU determines that there is a legitimate interest for excluding the publication which is worthy of protection, the corresponding photographs will not be published. You have the right to object to the taking or publication of photographs at any time.
We use the Matamo Tracker to improve the quality of our online services. If you do not wish to be tracked, please use the “do not track” function of your browser. No cookies will be stored.
Recipients or categories of recipients of personal data
If you use our social media channels and websites, the respective platform providers will also be processing your personal data.
Our IT service providers may also receive your personal data within the context of performing tasks laid out in our contracts with them. In order to ensure the security of our data processing systems, however, we do not disclose the names of our service providers.
It is possible that data will be forwarded to the relevant supervisory and auditing authorities to exercise the respective control rights.
Pursuant to the Court of Justice of the European Union (CJEU) case no. C210/16, we share the responsibility for data protection on our social media sites with the respective social media platform providers. We believe that this also has an impact on the new General Data Protection Regulation.
The use of our social media channels is also subject to the regulations of:
All of our social media platform providers are publicly certified under the EU-US Privacy Shield, ensuring a legally adequate level of protection for personal data:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (opens in a new window)
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active (opens in a new window)
Youtube (Youtube LLC) und Google+ unter Google LLC
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active (opens in a new window)
In general, we do not integrate social media plugins. However, the website may occasionally include videos from the external video platform YouTube. We would like to point out that clicking the play button on a video may already trigger a transfer of personal data.
This is independent of whether or not the user has a membership with the respective social network. This data may be used to create a personal profile.
We have no control over the processes that are triggered. By clicking the play button, you automatically leave the area that we control and for which we are responsible. We strongly advise that you observe the data protection regulations and settings of the respective provider.
Storage duration for personal data
Data is only stored for the period of time required in connection with legal retention periods in order to maintain regular operations.
If the processing of data is based on your consent, we will delete your data at the very latest when you revoke your consent, providing that there are no legal regulations prohibiting this.
Administration and editing
Personalised administration and editorial access to our website will be deactivated once the respective employee has left HNU or has changed their area of responsibility.
As a rule, all personal data is stored for a maximum of seven days.
Mail, email and social media posts and messages will be deleted six years after the end of the year in which they have been sent/posted.
If you communicated with us via social media with the knowledge of the public or parts of the public, you have the right to define the duration of the publication or request its deletion. We will delete the data within our area of responsibility in compliance with archive law. If we still have copies of the data in our possession after deletion, they will be restricted in their processing and stored in accordance with the statutory storage obligations, taking into account archive law.
Pursuant to the General Data Protection Regulation, you have the following rights:
You have the right to receive information about any data related to your person that has been saved (Art. 15 GDPR).
You have the right to have incorrect data corrected (Art. 16 GDPR).
Providing that the legal requirements are fulfilled, you have the right to request that your data be deleted or that the use thereof be restricted or to object to the processing of your data (Art. 17, 18 and 21 GDPR).
If you have consented to the processing of your data or if a data processing contract exists and the data processing is carried out by automatic means, you may have the right to data portability (Art. 20 GDPR).
If you choose to exercise the rights stated above, the public authorities will assess whether the statutory requirements for doing so have been fulfilled.
If the processing of your data is based on consent, you have the right to revoke that consent for the future at any time. Provided that there are no legal reasons to the contrary, the data in question will be deleted immediately.
You also have the right to submit a complaint to the Bavarian State Commissioner for Data Protection (Der Bayerische Landesbeauftragte für den Datenschutz, BayLfD).
PO Box 22 12 19
Tel: 089 212672-0
Fax: 089 212672-50
If additional information concerning data protection is required for individual processing operations, you will find the necessary information on the relevant pages.
If you have any questions, you can contact the Data Protection Officer or send an email to: firstname.lastname@example.org.