Data privacy information for applicants

Your personal data are processed as part of the process of applying for a university place at Universität Hamburg. Processing of this data is governed by law, particularly the General Data Protection Regulation (GDPR) and the Hamburg higher education act (Hamburgisches Hochschulgesetz, HmbHG).

In accordance with our obligations under Article 13 GDPR we would like to inform you of the details relevant to the data processing.

Personal and contact information

The Controller as per the GDPR

The Controller as per the General Data Protection Regulation is Universität Hamburg, a corporation under German public law. Contact details:

Universität Hamburg
represented by the President,
Mittelweg 177
20148 Hamburg
praesident@uni-hamburg.de (praesident"AT"uni-hamburg.de)

Contact person for questions about data processing

Questions about the data processing described below can be directed to

Department 3: Studies and Teaching, Section 30: Advising and Administration
Birte Schelling
www.uni-hamburg.de/kontakt-cc

Data protection officer

Additionally, you can contact the data protection officer:

Datenschutzbeauftragte der Universität Hamburg
Mittelweg 177
20148 Hamburg
datenschutz"AT"uni-hamburg.de

1. Purpose:

Personal data will be processed for the following purposes:

Universität Hamburg collects and stores the data provided by you in your application for the purpose of conducting the application process and notification of acceptance.

2. Legal basis

The processing of personal data as part of your application for enrollment is lawful pursuant to Article 6 paragraph 1 letter e and paragraph 3 GDPR in conjunction with Section 111 subsections 1 and 8 HmbHG in conjunction with the Universität Hamburg data privacy bylaws (Satzung der Universität Hamburg über die Erhebung und Verarbeitung von personenbezogenen Daten). This processing is required to perform a duty in the public interest, delegated to Universität Hamburg by government authority.

3. Categories of personal data

The following categories of personal data will be processed:

address, contact details, your student history, qualifications, identification data, authentication data.

4. Recipients / categories of recipients

The personal data will be transmitted to the following recipients / categories of recipients:

Internal: Universität Hamburg faculties

External: Stiftung für Hochschulzulassung (Foundation for Higher Education Admissions) for the purpose of coordinating state-wide application procedures as part of the Dialogue-Oriented Service Procedure (DoSV).

5. Communication of personal data to a third country

We do not plan to communicate your personal data to a third country / international organization.

6. Period of storage

Personal data will be stored for the following period:

Data pertaining to non-enrolled applicants will be deleted after one year without exception.

7. Your rights

You have the following rights:

a. Right to withdraw consent

If the processing of your data is based on your consent, you may withdraw your consent at any time with future effect and without observing any formal requirements. Upon receipt of withdrawal of your consent, your data may no longer continue to be processed and must be deleted immediately if there is no other legal basis for their processing. This does not affect any previous processing of data and information.

b. Right to information

You have a right to information from the Controller pursuant to Article 15 GDPR.

d. Right to rectification

You may demand the Controller rectify any inaccurate data pursuant to Article 16 GDPR.

d. Right to erasure (“right to be forgotten”)

You have the right to have your personal data and information deleted by the Controller—that is, “the right to be forgotten” pursuant to Article 17 GDPR.

e. Right to restriction of processing

You have the right to restrict the processing of your personal data pursuant to Article 18 GDPR.

f. Right to data portability

If you have granted your consent to the processing of your data, or an application for the processing of your data has been made, and the processing of such data is conducted using automated means, you have a right to data portability (Article 20 GDPR).

g. Right to object

If the processing of your data is based on Article 6 paragraph 1 letters e or f GDPR, you have a right to object to this processing to the Controller pursuant to Article 21 GDPR.

h. Right to lodge a complaint

You have the right to lodge a complaint with the Hamburg Commissioner for Data Protection and Information (HmbBfDI) against the processing of your personal data.

General information on these rights:

In some cases, your request cannot or may not be complied with. If there are statutory grounds why your request cannot be complied with, you will be informed of the reason for denial.

8. Provision of personal data

You are not obliged to provide Universität Hamburg with your personal data and information; however, failure to do so may render Universität Hamburg unable to process and handle your matter.

As part of your application, you need to provide only the personal data required for determining your enrollment and for statistical purposes.

Without these data, we are generally forced to reject your application.