Data Protection

General Notes and Mandatory Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Responsible Authority

The responsible authority is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The responsible authority for data processing on this website is:

Anhalt University of Applied Sciences
Represented by the President
Bernburger Straße 55
06366 Köthen
Germany
Email: info(at)hs-anhalt.de

Data Protection Supervisor

Anhalt University of Applied Sciences
Data Protection Supervisor
Bernburger Straße 55
06366 Köthen
Germany
Email: dsb(at)hs-anhalt.de

Links to Websites of Other Providers

Insofar as this website contains links to websites of other providers, this privacy policy does not extend to these other websites. We have no influence on whether their providers comply with data protection regulations. Please refer to the privacy policies of the respective providers for further information.

Collection of General Data and Information

Type and Scope of Data Processing

When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA):

  • the browser types and versions used;
  • the operating system used by the accessing system;
  • the website from which an accessing system reaches our website (so-called referrer);
  • the sub-websites that are accessed via an accessing system on our website;
  • the date and time of access to the website,
  • an Internet Protocol address (IP address);
  • the internet service provider of the accessing system;
  • other similar data and information that serves to avert danger in the event of attacks on our information technology systems.

Purpose and Legal Basis

By law, any processing of personal data is prohibited in principle and is only permitted if the data processing falls under one of the following justifications:

  • Art. 6 (1) (a) GDPR (‘Consent’): Where the data subject has voluntarily, in an informed manner and unambiguously indicated by a statement or other unequivocal affirmative action that he or she consents to the processing of personal data relating to him or her for one or more specific purposes;
  • Art. 6(1)(b) GDPR: Where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • Art. 6(1)(c) GDPR: If processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. a statutory retention obligation);
  • Art. 6(1)(d) GDPR: If processing is necessary to protect the vital interests of the data subject or another natural person;
  • Art. 6(1)(e) GDPR: If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Furthermore, the storage of information in your terminal equipment as an end user and access to information already stored in your terminal equipment shall only take place after consent has been given in accordance with Section 25(1) TDDDG, unless this is dispensable under Section 25(2) TDDDG.

Processing may also be based on several legal grounds.

Data Collection on Our Website

Cookies

We use cookies on our website to ensure an optimal user experience. Cookies do not harm your computer and do not contain viruses. They serve only to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on the devices you use to visit our website.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, this may impair the functionality of this website. Please delete your browser history (cache, memory) if you no longer wish cookies to be stored once they have been set.

We use cookies to personalise content and advertisements, to offer social media features and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of their services.

Unless otherwise specified, personal data is processed in the course of our public duties (Art. 6(1)(e) GDPR in conjunction with Sections 4-9 DSAG LSA) for the purpose of effectively informing and interacting with users.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This means that the companies we entrust with web hosting also have access to your data. These ‘processors’ are subject to our instructions in matters of data protection; this is regulated by a data processing agreement. No other parties have access to the data without your consent.

The web server access logs record which pages were accessed and when. They contain the following data: IP, directory protection user, date, time, pages accessed, operating system used, browser type and browser version, protocols, status code, data volume, referrer, user agent, host name accessed. The IP addresses are stored anonymously, for example, 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Information about the directory protection user used is anonymised after one day.

Error logs, which log incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.

Accesses via FTP are logged with anonymised information on the user name and IP address and stored for 60 days.

Mail logs for sending emails from the web environment are anonymised after one day and then retained for 60 days. During anonymisation, all data relating to the sender/recipient etc. is removed. Only the data relating to the time of dispatch and information on how the email was processed (queue ID or not sent) is retained.

Mail logs for sending via our mail servers are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and to combat spam. It is not possible to specify the storage period individually.

The server log files are not merged with other data sources.

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for three months for the purpose of processing the enquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent. You can revoke this consent at any time. To do so, simply send us an informal email. In the event of revocation, we will immediately delete the data collected via the contact form, unless mandatory legal provisions – in particular statutory retention periods – prevent this. The legality of the data processing operations carried out until revocation remains unaffected by the revocation.

Enquiries by Email, Telephone or Fax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The data you send us via contact enquiries will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

Legal Basis

Unless otherwise specified, the processing of personal data is carried out within the scope of our public duties (Art. 6 (1) (e) GDPR in conjunction with Sections 4-9 DSAG LSA) for the purpose of effectively informing and interacting with users.

The legal basis for the processing of data is Art. 6 (1) lit. a GDPR if the user has given their consent.

For cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Framework, www.dataprivacyframework.gov/list.

IP Anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to Data Collection

You can prevent Google Analytics from collecting your data by clicking on the following link and changing your cookie settings: Disable Google Analytics.

For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Storage Period

Data stored by Google at user and event level that is linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de Contract data processing

We have concluded a contract with Google for contract data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Plugins

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.

Your Rights

You have the right at any time

  • pursuant to Art. 15 GDPR to request information about the personal data processed concerning you. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of the data, if it was not collected by the controller, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by the controller;
  • pursuant to Art. 17 GDPR, to request the erasure of the stored personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and the controller no longer needs the data, but you need it for the assertion, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive the personal data you have provided in a structured, commonly used and machine-readable format or to request its transfer to another controller;
  • pursuant to Art. 7(3) GDPR, to withdraw your consent once given (even before the GDPR came into force, i.e. before 25 May 2018) – i.e. your voluntary, informed and unambiguous declaration of intent, made clear by a statement or other unequivocal affirmative action, that you consent to the processing of the personal data concerned for one or more specific purposes – at any time, if you have given such consent. As a result, we will no longer be permitted to continue processing data based on this consent in the future and
  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose. To assert your rights under Articles 15–21 GDPR, please contact betroffenenrechte@hs-anhalt.de or the postal address given above.

Validity and Changes to the Privacy Policy

Our privacy policy may be amended at irregular intervals to comply with current legal requirements or to implement changes to our services, e.g. when adding new offers. The new privacy policy will then automatically apply to your next visit.

15 April 2025