Data protection

Information on data protection in accordance with Art. 13 GDPR

Dear user, Dear user,

The protection of your personal data is important to us, which is why we would like to inform you here about the purpose for which the university collects, stores or forwards your data. The information also tells you what rights you have with regard to your personal data.

 

1. legally accountable for data processing

Pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR), the data controller is the

Ulm University

89069 Ulm

Telephone +49 (0)731/50-10

Fax +49 (0)731/50-22038

Ulm University is a public body which is substituted by the President Prof. Dr.-Ing. Michael Weber (praesident(at)uni-ulm.de) or by the Chancellor Dieter Kaufmann (kanzler(at)uni-ulm.de). If you have any questions about data protection, please contact dsb(at)uni-ulm.de or send a letter with the addition "data protection officer" to the above address.

2 Data categories, purpose and legal basis of data processing

The following personal data will be processed:

Personal data

We process personal data for participant, payment and room management for the organisation of University Sports. The legal basis for the processing is §§ 13, 15, 36 LDSG and § 12 LHG as well as consent.

3. storage of your data

We only store your personal data for as long as is necessary for the participant, payment and room management of University Sports. The data will be deleted by the following date at the latest, unless deletion conflicts with any other legitimate interests of the legally accountable party:

All booking data older than three years will be deleted - with the exception of waiting list bookings. These are deleted at the end of each semester. A distinction is made between user data as follows

  • Blocked accounts including occupancy data without outstanding payments are deleted after a period of six weeks.
  • blocked accounts including occupancy data with outstanding payments are deleted after a period of three years from deactivation, provided that no dunning or legal proceedings are ongoing.
  • Invoice-related data for chip card payments and bank transfers will be stored for 10 years as described in Appendix 3 (LHO Ba-Wü, § 71).

4. recipients of your data

In the context of participant, payment and room management for the organisation of University Sports, your data will be used by Division (Dezernat) II-5 University Sports and Occupational Health Management. Only those persons within the University have access to your data who need it for the proper processing of participant, payment and room management for the organisation of University Sports.

6 Your rights as a data subject

You have the following rights to protect your personal data:

  • To receive information about the personal data concerning you (Art. 15 GDPR),
  • to have incorrect data corrected (Art. 16 GDPR),
  • under certain conditions, to demand the erasure or restriction of the processing of your personal data (Art. 17, 18 GDPR),
  • to object to the processing of your data (Art. 21 GDPR),
  • to have your data transferred to other bodies specified by you (Art. 20 GDPR). Separate consent is required for this.

You also have the right to contact the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful. The supervisory authority responsible for us is the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information.