Privacy Policy

1. NAME AND ADDRESS OF THE PERSON RESPONSIBLE

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

University of Münster 
represented by the Rector, Prof. Dr. Johannes Wessels
Schlossplatz 2, 48149 Münster
Phone: + 49 251 83-0
E-Mail: mailbox@uni-muenster.de

2. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The data protection officer of the controller is

Nina Meyer-Pachur
Schlossplatz 2, 48149 Münster
Phone.: + 49 251 83-22446
E-Mail: datenschutz@uni-muenster.de

3. GENERAL INFORMATION ON DATA PROCESSING

We collect and use our users’ personal data only insofar as this is necessary to provide a functional website and our content and services, and insofar as a legal basis allows us to do so.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which the University of Münster is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, Art. 6 para. 1 lit. e GDPR serves as the legal basis for the processing.
If processing is necessary to safeguard a legitimate interest of the University of Münster or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing. This does not apply if the University of Münster is acting in a sovereign capacity in the corresponding processing.

Duration of storage of personal data

The personal data of the data subject will only be stored by us for as long as the purpose of the storage exists. If the processing is based on the consent of the data subject, the data will only be stored until the data subject withdraws their consent, unless there is another legal basis for the processing.

Right to rectification and erasure of personal data

The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her. The data subject also has the right to obtain from us the erasure of personal data concerning him or her without undue delay as soon as the purpose of the storage no longer applies or, if the processing is based on the consent of the data subject, if the data subject withdraws his or her consent and there is no other legal basis for the processing.

The data subject’s personal data will also be erased if the data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, if the personal data has been processed unlawfully or if erasure is required to fulfill a legal obligation by European or national legislation in regulations to which the University of Münster is subject.

However, personal data will not be deleted in the cases described above if the processing of personal data is necessary for the University of Münster to fulfill a legal obligation imposed on it by the European or national legislator or if the processing is necessary for the performance of a task carried out by the University of Münster in the public interest or in the exercise of official authority vested in the University of Münster or if the further storage of personal data is necessary for the establishment, exercise or defense of legal claims.

Right of withdrawal

If the processing of personal data is based on the consent of the data subject, the data subject may withdraw their consent at any time. The processing of personal data carried out until the withdrawal remains lawful despite the withdrawal.

Right to information

The data subject has the right to obtain from the University of Münster confirmation as to whether or not personal data concerning him or her are being processed. If this is the case, the data subject has a right to information about which personal data is involved and for what purposes it is processed. They also have a right to information about the duration of the planned storage of this data and which criteria are used to determine the storage period.

4. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

Scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. The user’s internet service provider
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the user’s system accesses our website
  7. Websites that are accessed by the user’s system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis for the processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of the processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Duration of storage of personal data

The data is deleted when the respective session has ended.

If the data is stored in log files, it is deleted after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

6. E-Mail-Contact

Scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the user’s personal data transmitted with the e-mail will be stored.

The data will not be passed on to third parties in this context. The data is used exclusively for the purpose of maintaining contact.

Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

The processing of personal data serves us solely to process the contact. This also constitutes the necessary legitimate interest in the processing of the data.

Duration of storage of personal data

The personal data sent by email will be deleted when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

7. MAP/GOOGLE MAPS

Scope of data processing

We use the Google Maps API, a map service provided by Google Inc. (“Google”), on our website to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) can be transmitted to a Google server in the USA and stored there.

Please refer to the Google Terms of Service as well as the Google Privacy Policy.

Google may transfer the collected data to third parties, if this is required by law or if third parties process this data on behalf of Google.

It is technically possible that Google could identify individual users based on the received data. It is possible that personal data and user profiles could be processed by Google for other purposes over which we have no control.

Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

The use of Google Maps is for the purpose of making it easier to locate the places specified on our website.

8. USE OF SOCIAL MEDIA PLUGINs

Scope of data processing

We use social plugins from various providers on our website. When you access one of our web pages that contains such a plugin, your browser establishes a direct connection to the servers of the respective provider. The content of the plugin is transmitted directly from the provider to your browser and integrated into the website.

By integrating the plugins, the provider receives information that you have accessed the corresponding page of our website. If you are logged in with the respective provider, they can associate this information with your account.

Legal Basis for Processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.