Privacy Policy

The high standards we set for the characteristics of our degree programs naturally also applies to our handling of your data. Our aim is to create the basis for
a trusting cooperation with students and other stakeholders, such as our employees or suppliers.

Albstadt-Sigmaringen University of Applied Sciences will therefore process and use your data carefully, for the intended purpose and in accordance with the statutory provisions on data protection. The confidentiality and integrity of your personal data is our top priority. In this data protection declaration, we provide information on how we process your personal data in connection with your visit to this website (hs-albsig-international.de) and in the event of inquiries via the website. Further information on how we handle your data can be found at: https://www.hs-albsig.de/datenschutz/

Name and address of the controller responsible for processing
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is

Albstadt-Sigmaringen University of Applied Sciences
Anton-Günther-Str. 51
D - 72488 Sigmaringen
Phone: +49 (0) 7571 732 - 0
E-mail: info(at)hs-albsig.de

Represented by: Rector Dr. Ingeborg Mühldorfer

External data protection officer
Our external data protection officer can be contacted at

E-mail: datenschutzbeauftragter(at)hs-albsig.de
Website: https://www.exacon-gmbh.de

Data subjects can contact the controller or our data protection officer directly with any questions relating to data protection and the processing of their personal data.

When does Albstadt-Sigmaringen University of Applied Sciences collect and process personal data?
We collect and process your personal data in the following cases, among others:

  • If you contact us directly, e.g. via the contact forms on our website, by email or by telephone and you are interested in study programs or have another request
  • If you request information about our degree programs.
  • When you send us application documents.What personal data may be collected?

When you contact us or use our services, we collect the following categories of personal data, among others:

  • Contact details: Name, address, telephone number, e-mail address.
  • Other personal data such as: Information provided by you regarding date of birth, education, professional situation, employer or account details.
  • Use of websites and communication: Information about how you use our website using cookies and other tracking technologies.

Data processing for automated decision-making
Albstadt-Sigmaringen University of Applied Sciences does not carry out automated decision-making or profiling unless specifically indicated.

Data processing when using our website
We are pleased that you are visiting our website and would like to point out that when you visit our website, data is also processed for which a personal reference cannot be completely ruled out. If a data subject wishes to make use of special services via our website, it may be necessary for personal data to be processed. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

SSL encryption
The website of Albstadt-Sigmaringen University of Applied Sciences uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot generally be read by third parties.

Server log files
The provider of the Albstadt-Sigmaringen University of Applied Sciences website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

  • Browser type/browser version
  • Operating system used
  • URL of origin
  • IP address in anonymized form
  • Time of the server request
  • Amount of data sent in bytes

This data cannot be assigned to specific persons. This data is not merged with other data sources. This information is required to (1) deliver the content of our website correctly, (2) optimize the content of our website, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. This anonymously collected data and information is used statistically and evaluated with the aim of increasing the level of data protection in our company. This data is not merged with other data sources. This data is collected for the performance of a task carried out in the public interest (Art. 6 para. 1 lit. e GDPR), for the technically flawless presentation and optimization of our website.

Hosting
The website is hosted by an external service provider who works for us as a processor.

Contact option via the website
Type and purpose of processing: If you contact us, the data you enter will be stored for the purpose of individual communication with you. This requires you to provide your request, a valid e-mail address and your name. This is used to assign the request and subsequently answer it. The provision of further data is optional.

Legal basis: If you contact us to obtain information about our study programs or other university-specific matters, the data entered in the contact form will be processed for the performance of a task carried out in the public interest (Art. 6 para. 1 lit. e GDPR). If you provide optional information in the contact form, as well as in all other cases, the data entered in the contact form will be processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR).

Withdrawl of consent:You can withdraw your consent regarding optional information at any time with effect for the future. To do so, please contact the controller (e.g. via the contact form or using the contact details provided) or the data protection officer.

Recipients:Recipients of the data may be technical service providers who work for us as processors.

Storage period: Data will be deleted no later than 6 months after processing the request, subject to any applicable retention periods.

Processing of voluntary/mandatory data:You only need to provide the data that is required to adequately process your request. This includes your name and e-mail address. Without this data, we will generally not be able to process your request. The provision of optional data is voluntary.

Your rights as a data subject
To exercise your data subject rights and other concerns in connection with data protection, please use the contact details provided for the controller or the data protection officer. As a data subject within the meaning of the GDPR, you have the following rights vis-à-vis the controller

Right to information (Art. 15 GDPR)
You can request information from us at any time about the data we hold about you. This information concerns, among other things, the categories of data processed by us, the purposes for which we process them, the origin of the data if we have not collected them directly from you and, if applicable, the recipients to whom we have transmitted your data. You can receive a copy of your data from us free of charge. If you are interested in further copies, we reserve the right to charge you for the additional copies.

Right to rectification (Art. 16 GDPR)
You can request that we rectify your data. We will take reasonable steps to keep the data we hold and process about you accurate, complete and up to date, based on the most recent information available to us.

Right to erasure (Art. 17 GDPR)
You can demand that we erase your data if the legal requirements for this are met. According to Art. 17 GDPR, this may be the case if, for example

  • the data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you withdraw your consent, which is the basis for the data processing, and there is no other legal basis for the processing
  • you object to the processing of your data and there are no overriding legitimate grounds for the processing, or you object to data processing for direct marketing purposes;
  • the data has been processed unlawfully;
  • the processing is not necessary to ensure compliance with a legal obligation that requires us to process your data; in particular with regard to statutory retention periods; to assert, exercise or defend legal claims.

Right to restriction of processing (Art. 18 GDPR)
You can demand that we restrict the processing of your data if

  • you contest the accuracy of the data, for the period of time necessary for us to verify the accuracy of the data
  • the processing is unlawful and you oppose the erasure of your data and request the restriction of their use instead
  • we no longer need your data, but you need it to assert, exercise or defend legal claims
  • you have objected to processing pending the verification whether our legitimate grounds override yours.

Right to data portability (Art. 20 GDPR)
At your request, we will transfer your data - insofar as this is technically possible - to another controller. However, you are only entitled to this right if the data processing is based on your consent or is necessary to perform a contract. Instead of receiving a copy of your data, you can also ask us to transfer the data directly to another controller specified by you.

Right to object (Art. 21 GDPR)
You can object to the processing of your data at any time for reasons arising from your particular situation, provided that the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests or if we need your data for the establishment, exercise or defense of legal claims.

Right to withdraw the declaration of consent under data protection law (Art. 7 para. 3 GDPR)
You have the right to withdraw your declaration of consent under data protection law at any time with effect for the future. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Deadlines for the fulfillment of data subject rights
We generally endeavor to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific data subject right or the complexity of your request.

Restriction of information in the fulfillment of data subject rights
In certain situations, we may not be able to provide you with information about all of your data due to legal requirements. If we have to refuse your request for information in such a case, we will also inform you of the reasons for the refusal.

Competent supervisory authority
Albstadt-Sigmaringen University of Applied Sciences takes your concerns and rights very seriously. However, if you believe that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with a competent data protection authority.

The State Commissioner for Data Protection and Freedom of Information
P.O. Box 10 29 32
70025 Stuttgart
Telephone: 07 11/61 55 41-0
Fax: 07 11/61 55 41-15