The controller under the General Data Protection Regulation and other national data protection laws of the member countries and other data protection regulations is the:

President of Mainz University of Applied Sciences
Lucy-Hillebrand-Str. 2
55218 Mainz
praesident (at) hs-mainz.de

Data protection officer
Data protection officer of Mainz University of Applied Sciences
Lucy-Hillebrand-Str. 2
55218 Mainz
datenschutz (at) hs-mainz.de

1. Extent to which personal data is processed

We fundamentally process personal data of our users only insofar as this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users regularly only takes place with the user's consent. An exception applies in those cases in which prior consent cannot be obtained for genuine reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing procedures that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c of the GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh said interest, Art. 6 para. 1 letter f of the GDPR serves as the legal basis for processing.

3. Data erasure and storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. The data may also be stored if the European or national law-makers have provided for this in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

1. Description and extent of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. These are temporarily stored in a something called a log file. This data is not stored together with other personal data of the user.
The following data is collected:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f of the GDPR.

3. Purpose of data processing

The data is stored in log files to ensure the functionality of the website. In addition, the data is used for the optimization of our website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

4. Storage period

If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted, so that an identification of the requesting client is no longer possible.

5. Storage period

The collection of data in order to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

a) Description and extent of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables a unique identification of the browser when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

• Language settings
• Items in a shopping cart (designinmainz online shop)
• Login information

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after changing pages. We need cookies for the following applications:

• Transferring language settings
• Remembering search terms
• Shopping cart (designinmainz online shop)

The user data collected by technically necessary cookies is not used to create user profiles.
For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f of the GDPR.

d) Storage period, possibility of objection or elimination

Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Our websites contain links to the following external social networks:

• Facebook,
• Twitter,
• LinkedIn,
• YouTube,
• Instagram,
• Xing.

The links are identified on our website by the respective logo of the social network. Social plugins are not used. When you visit our websites with a link to Facebook, no data is transmitted to third parties.

When you access the social media pages of Mainz University of Applied Sciences, your IP address and other information that is available on your PC in the form of cookies, among other things, is recorded. After registration or login with the social media service, your personal data will be transferred.

1. Right to access, rectification, erasure and objection

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
• to request without undue delay the rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 of the GDPR;
• to request the erasure of your personal data stored by us in accordance with Art. 17 of the GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• to request, pursuant to Art. 18 of the GDPR, the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse the erasure of the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection against the processing in accordance with Art. 21 of the GDPR;
• to receive your personal data that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 of the GDPR or to request its transfer to another controller.;
• in accordance with Art. 7 para. 3 of the GDPR, to revoke your consent to us at any time. As a consequence of this, we are no longer allowed to continue the processing of data based on this consent in the future and
• to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR. You can usually contact the supervisory authority of your regular place of residence or university location.

2. Right to withdrawal of consent

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the withdrawal.

3. Right to lodge a complaint with a supervisory authority

Notwithstanding any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority of your workplace or the place of suspected infringement if you believe that the processing of personal data concerning you is in violation of the GDPR.

The right to lodge a complaint pursuant to Article 13 of the GDPR shall be asserted before the supervisory authority responsible for Mainz University of Applied Sciences:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
LfDI

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Postfach 3040
55020 Mainz