Data protection is very important to us. We process your personal data (hereinafter referred to as “data”) in accordance with legal requirements and aim to do so in a transparent manner. Therefore, we would like to briefly explain in the following privacy notice which data we process, for what purposes and on what legal basis. You will also find information about contact persons and your rights in connection with data processing.
Name and contact details of the controller: Leuphana University of Lüneburg | Contact details of the data protection officer: Leuphana University of Lüneburg Email: dsb@leuphana.de |
As soon as you visit our website, we store so-called log files about you. These log files record your IP address, the date and time of your visit, the URL you accessed, the URL you last visited (referrer URL), the browser you are using and its version, and the version of the operating system you are using. The log files are generally stored for a maximum of 90 days.
We use this data to prevent misuse of our website and to enable you to visit our website without disruption and in the best possible way. The legal basis for this processing is Section 3 (1) No. 1 of the Niedersächsisches Datenschutzgesetz (NDSG) in conjunction with Article 6 (1) s.1 letter e of the EU General Data Protection Regulation (GDPR) in conjunction with Section 3 (1) s. 1 No. 10 Niedersächsisches Hochschulgesetz (NHG).
Our website uses cookies. The use of cookies enables us to provide users of this website with more user-friendly services that would not be possible without cookies. In addition, cookies can be used to optimise the information and offers on our website for the benefit of users.
Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID. The purpose of this recognition is to make it easier for users to use our website.
If consent is given to the use of cookies, the following cookies may be used on our websites:
We use YouTube on our website. This is a video portal operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, hereinafter referred to as “Google” or “YouTube”.
We use YouTube in “extended data protection mode” to show you videos.
The “extended data protection mode” function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video by clicking a second time.
Please note that user data outside the European Union may be processed on Google servers. For more information on the transfer of data to non-EU countries, please see the section “Transfer to third countries” below.
However, this connection is necessary in order to display the respective video on our website via your internet browser. In the course of this, YouTube will collect and process at least your IP address, the date and time, and the website you visited. In addition, a connection to Google’s “DoubleClick” advertising network is established.
If you are logged in to YouTube or Google at the same time, YouTube will assign the connection information to your Google account. If you want to prevent this, you must either log out of YouTube/Google before visiting our website or make the appropriate settings in your YouTube/Google user account.
For the purpose of functionality and to analyse usage behaviour, YouTube permanently stores cookies on your device via your internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by adjusting the settings in your internet browser.
External fonts from the Google Fonts service are used to display YouTube videos on our website. Google Fonts is also a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. These web fonts are integrated by calling up a server, usually a Google server in the USA. This transmits to the server which of our websites you have visited (referrer). The IP address of the browser of the visitor’s device is also transmitted to Google’s servers.
Further information about the collection and use of data, as well as your rights and protection options in this regard, is available from Google at https://policies.google.com/privacy.
Data transfer to Google takes place only after obtaining your consent via the cookie banner displayed at the beginning or after a two-click confirmation on the video displayed. Your consent or rejection is stored in a cookie set by us. You can revoke your selection at any time via “Cookie settings” at the bottom of our website. The legal basis for storing third-party cookies on your end device or accessing information already stored on your end device is Section 25 (1) TTDSG and Article 6 (1) letter a GDPR.
We maintain profiles on social networks that serve the communication and public image of Leuphana University Lüneburg. Social networks such as Facebook, Instagram, YouTube and Twitter can usually analyse the user behaviour of visitors comprehensively when they visit their websites or a website with integrated social media content (e.g. like buttons or advertising banners). When you visit our social media presence or interact with it, data processing relevant to data protection is usually carried out.
If you are logged into your social media account with the respective provider and visit our social media presence, the operator of the social media platform can assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection is carried out, for example, via cookies stored on your device or by recording your IP address.
The operators of social media portals can use the data collected in this way to create user profiles. This enables the operator to display interest-based advertising to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
We have no influence on the data collected by the operator and data processing operations, nor are we aware of the full extent of data collection or the purposes of processing. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals. We would like to point out that your data collected on social media may be processed outside the European Union. For more information, please refer to the section “Transfers to third countries”.
Our social media presence is intended to ensure as comprehensive and up-to-date a presence as possible with appropriate interaction options on the internet in order to inform the public about the fulfilment of our tasks. The legal basis for our processing of data via our social media platforms is therefore Article 6 (1) s. 1 letter e GDPR in conjunction with Section 3 (1) No. 10 NHG. The analysis processes initiated by social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) letter a GDPR or Section 25 (1) TTDSG).
We have a profile on the social network LinkedIn, which can be accessed at: https://www.linkedin.com/company/ilgspd/. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. We have an agreement with LinkedIn regarding joint responsibility for data processing (Page Insights Joint Controller Addendum). This agreement specifies which data processing operations we and LinkedIn are responsible for when you visit our LinkedIn page. The agreement can be viewed at the following link:
https://legal.linkedin.com/pages-joint-controller-addendum
For details, please refer to LinkedIn’s privacy policy:
https://de.linkedin.com/legal/privacy/eu
We operate a profile on Instagram at the URL: https://www.linkedin.com/company/ilgspd/. The social network is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 Willow Rd, Menlo Park CA 94025, USA, hereinafter referred to as “Meta”.
We have an agreement with Meta regarding joint responsibility for data processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook profile. The Controller Addendum can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
For details, please refer to Meta’s privacy policy on Instagram:
https://privacycenter.instagram.com/policy/
Even if you do not exercise your rights listed below, your data will be stored by us in relation to the log files for 90 days and otherwise only for as long as is necessary for the above-mentioned purposes. This does not apply if a longer storage or retention period is required by law or necessary for law enforcement within the statutory limitation periods. If data is only retained for the aforementioned purposes, access to the data is limited to the extent necessary for this purpose.
We generally keep your data to ourselves and only make it available to those employees who need it for their work in the context of performing their tasks. This does not apply if we are legally obliged to disclose it.
We would like to inform you that the provision of your data is neither required by law nor contractually required. If you do not provide your data, this will not have any negative consequences for you.
Automated decision-making, including profiling within the meaning of Art. 22 (1) and (4) GDPR, does not take place.
We would like to point out that when using YouTube videos and our social media sites, user data may be processed outside the European Union. In particular, there is a possibility that data may be stored on servers in the United States or that security authorities may access the data at subsidiaries of US parent companies. In exceptional cases, it is then possible that your data may be processed by US authorities. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection and have concluded standard data protection clauses with receiving companies in third countries. Transfers by LinkedIn and Google to these countries are made after assurance on the basis of standard contractual clauses in accordance with Art. 46(2)(c) GDPR or on the basis of an adequacy decision in accordance with Art. 45 GDPR, if such a decision exists for the destination country.
You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
In this case, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to request information from us about the processing of data concerning you. In addition to a copy of the data, this right to information also includes the purposes of data processing, the recipients of the data and the storage period.
If incorrect data is processed, you can request that we correct this data immediately. If the legal requirements under Articles 17 and 18 of the GDPR are met, you also have the right to have the data deleted immediately or to restrict its processing. Please note that restricted processing of the data may not be possible under certain circumstances.
To exercise your above-mentioned rights, please contact:
Jonas Kernein
Graduate School
Leuphana University of Lüneburg
Universitätsallee 1, C14.026
D – 21335 Lüneburg
Email: jonas.kernein@leuphana.de
If you have any further questions, please contact our data protection officer.
If you have any complaints regarding data protection, please contact a data protection authority of your choice.
The authority directly responsible for Leuphana University Lüneburg is:
Der Landesbeauftragte für den Datenschutz Niedersachen
Prinzenstraße 5
30159 Hannover.