Contact details of the data controller 

The data controller ('responsible entity') pursuant to the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection provisions is the :

University of Applied Sciences (HAW Hamburg)
Berliner Tor 5
20099 Hamburg,
Tel.: +49.40.42875-0,
Fax: + 49.40.42875-9149
datenschutz (@) haw-hamburg.de

HAW Hamburg is a public corporation. It is legally represented by Prof. Dr. Micha Teuscher, President of HAW Hamburg, Berliner Tor 5, 20099 Hamburg.

Contact details of the data protection officer at HAW Hamburg:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen

https://www.datenschutz-nord-gruppe.de/

office (at) datenschutz-nord (dot) de

When you visit our website, you transmit data to our web server via your Internet browser. The following data are temporarily recorded in a log file via an active connection that is established for communication purposes between your Internet browser and our web server:

·         The IP address of the requesting computer

·         The date and time of access

·         The name, URL, and the size of the retrieved file that has been transferred

·         Access status (the requested file was transferred, not found, etc.)

·         Identification data about the used browser and operating system (if transmitted by the requesting web browser)

·         Referring website (if transmitted by the requesting web browser)

The data in this log file are processed as follows:

·         The log entries are continuously and automatically evaluated in order to detect attacks on the web server and to be able to determine an appropriate response.

·         In individual cases, i.e., in response to reported faults, errors, and security incidents, a manual analysis is performed.

·         Log entries that are older than seven days are anonymised by shortening the IP address, saved as a backup for three months, and then deleted.

The IP addresses contained in the log entries are not combined by the data centre at the Hamburg University of Technology with other data, meaning that the data centre of the Hamburg University of Technology cannot personally identify persons.

The legal basis for the temporary storage of data and log files is Art. 6 (1), point (f) GDPR.

We use forms on our websites in order, for example, to allow users to register for events or courses or to sign up for the press release mailing list or a newsletter. The personal data that you provide to us via our websites are accepted only with your consent and are used exclusively for the purposes stated in the forms insofar as there is no legal basis to collect them otherwise. Please note the corresponding notices that are provided on the forms.

All of the forms are only used to collect personal information that is strictly necessary. Your data will not be disclosed to third parties unless this is explicitly stated in the form. Your personal data will be deleted after the purpose for which they were collected has been fulfilled, unless you have given your consent to be contacted again. 

The legal basis for the processing of the data after using forms is Art. 6 (1), point (a) GDPR if the user gave its consent.

It is also possible to establish contact via the e-mail addresses provided on the HAW Hamburg websites. In this case, the user's personal data that are transmitted by e-mail will be stored. Such data are not forwarded to third parties.

The legal basis for the processing of the data that are transmitted in the course of sending an e-mail is Art. 6 (1), point (e) GDPR.

The data will be used solely for the purpose of processing the correspondence and the purpose stated in the correspondence.

Our website uses so-called cookies. Cookies are text files that are saved in the Internet browser or by the Internet browser on the user’s computer. If a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic character string that allows the browser to be uniquely identified when the webpage is requested again.

We use cookies to make our website more user-friendly.

The legal basis for processing personal data by using cookies is Art. 6 (1), point (f) GDPR. 

Cookies are stored on the user's computer and transmitted to us by that computer. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all functions of the website to the full extent.

We use content from third parties on our online offering, such as videos from YouTube and maps from Google Maps. In addition, we have integrated the Google search engine into our offering. This requires that the providers of this content (hereinafter referred to as “third party providers”) are able to see the IP addresses of users as the content cannot be sent to the browser of the respective user without the IP address. Therefore, the IP address is required to display such content. We seek to use such content only if the respective provider agrees to use the IP address only for purposes of delivering such content. Nevertheless, we have no influence over whether such third-party providers store the IP address, such as for statistical purposes, for example. We will inform the users about any details we have in this respect. 

Regarding the usage of YouTube plug-ins

Our website incorporates a plug-in from www.youtube.com, which is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
If you access pages on our website that contain such a plug-in, you will be connected to the YouTube servers and the plug-in will be displayed on the website by communicating with your browser. The plug-in will send back data to the YouTube server about which IP address you used to access our Internet sites. If you are logged in as a member of YouTube/Google, YouTube will associate this information with your respective personal user accounts on these platforms. When you use these plug-ins, such as, for example, by clicking on the video or its play button or by submitting a comment, this information will be associated with your YouTube user account, for example.

You can prevent this information from being transmitted by logging out of your personal Google account before using our websites.

Additional information about how data are collected and used by the platform or plug-ins can be found in the YouTube Data Privacy Policy at the following link: https://policies.google.com/privacy?hl=en-GB

Regarding the use of Google Maps

We use the Google Maps API, a map service of Google LLC. (“Google”), to display an interactive map. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may also transfer the information that it obtains from Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You can deactivate the Google Maps service and thus prevent data from being transferred to Google by deactivating JavaScript in your browser. We point out, however, that if you do this that you will not be able to use the map display on our website.

Google's Data Privacy Policy & Additional Terms of Use for Google Maps can be found at https://policies.google.com/privacy?hl=en-GB&gl=de.

Users of our website have the following rights: 

• Right to access your personal data that is stored by us (Art. 15 GDPR).
• Right to request rectification of incorrect or incomplete personal data (Art. 16 GDPR).
• Right to the erasure of personal data concerning you, unless the processing of such data is required for purposes of exercising the right of freedom of expression and information or of complying with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).
• Right to the restriction of the processing of personal data (Art. 18 GDPR).
• Right to object to any processing that is in our legitimate interest or the public interest or is used for purposes of profiling, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Art. 21 GDPR). Right to revoke your previously given consent to the collection, processing and use of your personal data at any time for future collection, processing and use (Art. 7 (3) GDPR). If you exercise this right, we may no longer perform the data processing that we had been performing on the basis of such consent.
• Right to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the terms of the GDPR (Art. 77 GDPR).
• Right to objection, revocation and correction. You can exercise this right by contacting our data protection officer:  office (at) datenschutz-nord (dot) de