Legal information

Sample text privacy policy

This is a sample text. Please adapt the relevant passages in square brackets and, where necessary, add the relevant contact details/links and delete what does not apply!

Privacy policy:

As a user of our website, you will receive the necessary information in this privacy policy about how and to what extent and for what purpose the [operatoring organization] collects data from you and how it is used. The data will only be processed and used within the [operating organization] and will not be passed on to third parties.

1. Legal basis

Your data is collected and used strictly in accordance with legal requirements. Regulations can be found in:

· European General Data Protection Regulation (EU GDPR)

· Federal Data Protection Act (BDSG)

· Lower Saxony Data Protection Act (NDSG)

· Teleservices Act (TDG)

· Interstate Media Services Treaty (MDStV)

· Teleservices Data Protection Act (TDDSG)

2. Personal data

Personal data is stored by us for the purpose of administrative user management, for contacting and interacting with you and for providing personalised services [to carry out your studies or your work at [operating institution]].

The following data is requested and stored for the use of Stud.IP:

· User name

· First name, surname

· e-mail address

· [other data if applicable]

Other data that may be stored are contents that you yourself enter in Stud.IP as part of your work. This includes

· Voluntary personal details

· Posts in forums

· Uploaded files

· chat histories

· internal messages

· Calendar entries and timetables

· Participation in courses, study groups, committees

· Personal settings and configurations

· [Plugin data, if applicable]

This content is saved and displayed with your real name. You can use the privacy settings to determine whether and, if so, which groups of people are allowed to see this data. This data is stored internally encrypted by Stud.IP.

3. Retention periods

Your personal data will be stored for the duration of your studies/your work at [operating organization]. Your data will be deleted after the end of your employment and expiry of the statutory retention periods.

4. Information, deletion, blocking

You can request information about the personal data we have stored about you and the purpose of data collection and data processing at any time. Please use the contact address below for this purpose.

You also have the right to request the correction, blocking or deletion of your data. You can revoke your consent without giving reasons by writing to the above contact address. Your data will then be deleted immediately. However, further use of Stud.IP [the operating organization] is then no longer possible.

Excluded from the deletion are data that are stored due to legal regulations or are required for proper business transactions. To ensure that a data lock can be realised at any time, data is stored in a lock file for control purposes.

If data is not covered by a statutory archiving obligation, we will delete your data at your request. If the archiving obligation applies, we will block your data. For all questions and concerns regarding the correction, blocking or deletion of personal data, please contact our data protection officer using the contact details in this privacy policy.

5. Data portability

You have the right to receive your data at any time. On request, we will provide you with your data in human-readable, common and editable formats.

6. Cookies

Stud.IP uses a session cookie. This small text file only contains an encrypted character string that helps you navigate the system. The cookie is deleted when you log out of Stud.IP or close the browser.

7. Server log files

When Stud.IP is accessed, the IP address, date, time and browser version at the time of access are registered and stored in anonymised form. This log file data is only collected and used for purely statistical research and evaluation purposes of the learning platform and is therefore not stored or analysed in connection with names or email addresses. This data is stored for a period of [X] months on secure systems of the [operating organization] and is also not passed on to third parties.

8. SSL encryption

The connection to Stud.IP is made using SSL encryption. Data encrypted via SSL cannot be read by third parties. Only transmit your confidential information if SSL encryption is activated and contact us if in doubt.

9. Contact details

[Address, person responsible / data protection officer, email contact, telephone number]