Informationen für:

Data Privacy Policy

Contact details of the data controller 

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection provisions is: the University of Applied Sciences (HAW Hamburg), Berliner Tor 520099, Hamburg, Tel.: +49.40.42875-0, Fax: + 49.40.42875-9149

HAW Hamburg is a public corporation. It is legally represented by Prof. Dr. Micha Teuscher, President of HAW Hamburg, Berliner Tor 5, 20099 Hamburg.

Contact details of the data protection officer at HAW Hamburg: 

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen


Log files

When you visit our website, you transmit data to our web server via your Internet browser. The following data are temporarily recorded in a log file via an active connection that is established for communication purposes between your Internet browser and our web server:

·         The IP address of the requesting computer

·         The date and time of access

·         The name, URL, and the size of the retrieved file that has been transferred

·         Access status (the requested file was transferred, not found, etc.)

·         Identification data about the used browser and operating system (if transmitted by the requesting web browser)

·         Referring website (if transmitted by the requesting web browser)

The data in this log file are processed as follows:

·         The log entries are continuously and automatically evaluated in order to detect attacks on the web server and to be able to determine an appropriate response.

·         In individual cases, i.e., in response to reported faults, errors, and security incidents, a manual analysis is performed.

·         Log entries that are older than seven days are anonymised by shortening the IP address, saved as a backup for three months, and then deleted.

The IP addresses contained in the log entries are not combined by the data centre at the Hamburg University of Technology with other data, meaning that the data centre of the Hamburg University of Technology cannot personally identify persons.

The legal basis for the temporary storage of data and log files is Art. 6 (1), point (f) GDPR.

Data storage in forms

We use forms on our websites in order, for example, to allow users to register for events or courses or to sign up for the press release mailing list or a newsletter. The personal data that you provide to us via our websites are accepted only with your consent and are used exclusively for the purposes stated in the forms insofar as there is no legal basis to collect them otherwise. Please note the corresponding notices that are provided on the forms.

All of the forms are only used to collect personal information that is strictly necessary. Your data will not be disclosed to third parties unless this is explicitly stated in the form. Your personal data will be deleted after the purpose for which they were collected has been fulfilled, unless you have given your consent to be contacted again. 

The legal basis for the processing of the data after using forms is Art. 6 (1), point (a) GDPR if the user gave its consent.

E-mail contacts

It is also possible to establish contact via the e-mail addresses provided on the HAW Hamburg websites. In this case, the user's personal data that are transmitted by e-mail will be stored. Such data are not forwarded to third parties.

The legal basis for the processing of the data that are transmitted in the course of sending an e-mail is Art. 6 (1), point (e) GDPR.

The data will be used solely for the purpose of processing the correspondence and the purpose stated in the correspondence.


Our website uses so-called cookies. Cookies are text files that are saved in the Internet browser or by the Internet browser on the user’s computer. If a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic character string that allows the browser to be uniquely identified when the webpage is requested again.

We use cookies to make our website more user-friendly.

The legal basis for processing personal data by using cookies is Art. 6 (1), point (f) GDPR. 

Cookies are stored on the user's computer and transmitted to us by that computer. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all functions of the website to the full extent.

Web Analytics by Matomo

The websites of HAW Hamburg use Matomo, an open-source software package that is used to statistically evaluate user visits. Matomo uses so-called “cookies”, which are text files placed on the user’s computer to help the application analyse how the user uses the website. The information generated by the cookie about your use of our offering is stored on the web server of HAW Hamburg. The IP address is anonymised immediately after processing and prior to being stored.

The information is used to evaluate the use of the website and to help us design our website to meet user needs. The legal basis for processing data is Art. 6 (1), point (f) GDPR.

Users can prevent the storage of cookies by adjusting their browser settings accordingly. However, it should be noted that in this case you may not be able to use all functions of this website to the fullest extent.


The provider of this website uses services offered by etracker GmbH of Hamburg, Germany ( to analyse usage data. This service uses cookies that help to statistically analyse how the visitors use this website and to show usage-related content or advertisements. Cookies are small text files that the Internet browser stores on the user’s terminal. etracker cookies do not contain information that could be used to identify a user.

The data generated by etracker are processed and stored by etracker on behalf of the website provider. Processing and storage takes place only in Germany and is subject to the strict German and European data protection laws and standards. In this respect, etracker has been independently tested, certified and awarded the privacy seal ePrivacyseal.

The legal basis for data processing is Art. 6 (1), point (f) (legitimate interest) of the EU General Data Protection Regulation (EU GDPR). Here, our legitimate interest lies in optimising our online offering and Internet presence. As we place great importance on our users’ privacy, etracker anonymises the IP address as early as possible and converts the registration or device identification information into a unique identifier that cannot be attributed to an individual person. etracker does not use data for other purposes, does not combine the data with other data and does not forward data to third parties.

You can object to the above data processing at any time as far as it refers to you personally. Objections have no negative consequences for you.

For more information on etracker’s data protection standards, please click here.

Incorporation of third-party services and content

We use content from third parties on our online offering, such as videos from YouTube and maps from Google Maps. In addition, we have integrated the Google search engine into our offering. This requires that the providers of this content (hereinafter referred to as “third party providers”) are able to see the IP addresses of users as the content cannot be sent to the browser of the respective user without the IP address. Therefore, the IP address is required to display such content. We seek to use such content only if the respective provider agrees to use the IP address only for purposes of delivering such content. Nevertheless, we have no influence over whether such third-party providers store the IP address, such as for statistical purposes, for example. We will inform the users about any details we have in this respect. 

•    Regarding the usage of YouTube plug-ins
Our website incorporates a plug-in from, which is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
If you access pages on our website that contain such a plug-in, you will be connected to the YouTube servers and the plug-in will be displayed on the website by communicating with your browser. The plug-in will send back data to the YouTube server about which IP address you used to access our Internet sites. If you are logged in as a member of YouTube/Google, YouTube will associate this information with your respective personal user accounts on these platforms. When you use these plug-ins, such as, for example, by clicking on the video or its play button or by submitting a comment, this information will be associated with your YouTube user account, for example.

You can prevent this information from being transmitted by logging out of your personal Google account before using our websites.

Additional information about how data are collected and used by the platform or plug-ins can be found in the YouTube Data Privacy Policy at the following link:

Google also processes your personal information in the US, and it is subject to the EUUS Privacy Shield (

•    Regarding the usage of Google Site Search (Google AJAX Search API)
This website uses Google Site Search. When you use the search box on this website, data will be disclosed to Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter: Google) in accordance with the terms of Google’s data protection provisions: When you use the search function, the JavaScript Code will be reloaded by Google. If you have enabled JavaScript in your browser and have not installed a JavaScript Blocker, your browser may transfer personal data to Google. We do not know what data Google associates with the received data and for what purposes Google uses that information. In order to generally prevent the execution of JavaScript Code by Google, you can install a JavaScript Blocker (e.g.,

•    Regarding the use of Google Maps
We use the Google Maps API, a map service of Google LLC. (“Google”), to display an interactive map. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may also transfer the information that it obtains from Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You can deactivate the Google Maps service and thus prevent data from being transferred to Google by deactivating JavaScript in your browser. We point out, however, that if you do this that you will not be able to use the map display on our website.

Google's Data Privacy Policy & Additional Terms of Use for Google Maps can be found at

Google also processes your personal information in the US, and it is subject to the EUUS Privacy Shield (

Rights of access and withdrawal

Users of our website have the following rights: 

·         Right to access your personal data that is stored by us (Art. 15 GDPR).

·         Right to request rectification of incorrect or incomplete personal data (Art. 16 GDPR).

·         Right to the erasure of personal data concerning you, unless the processing of such data is required for purposes of exercising the right of freedom of expression and information or of complying with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).

·         Right to the restriction of the processing of personal data (Art. 18 GDPR).

·         Right to object to any processing that is in our legitimate interest or the public interest or is used for purposes of profiling, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Art. 21 GDPR). Right to revoke your previously given consent to the collection, processing and use of your personal data at any time for future collection, processing and use (Art. 7 (3) GDPR). If you exercise this right, we may no longer perform the data processing that we had been performing on the basis of such consent.

·         Right to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the terms of the GDPR (Art. 77 GDPR).

·         Right to objection, revocation and correction. You can exercise this right by contacting our data protection officer: datenschutz(@)

Letzte Änderung: 18.11.19

An die Redaktion