Privacy Policy according to the GDPR
1 Name and address of the Controller
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
HWR Berlin
Representative for students with disabilities and Chronic illnesses
Badensche Strasse 52
10825 Berlin
inklusion@hwr-berlin.de
2 Name and address of the official data protection officer
HWR Berlin
Vitali Dick (HiSolutions)
Badensche Str. 50/51
10825 Berlin
datenschutz@hwr-berlin.de
3 Data processing in the “Advice for students with disabilities and chronic diseases” procedure
3.1 Purposes of ProcessingPersonal data is processed for the following purposes:
Performance of the order from §28 (a) BerlHG
- Advice for university applicants on o Application and admission (hardship case regulation, special applications) o Study and examination conditions o Compensation for disadvantages o Accessibility o Inclusion services
- Sending of advice-specific information materials
- Contact for science and research
3.2 Legal basis for processing
The legal basis for processing is Section 6 (1) No. 12 BerIHG and Art. 6 (1) a GDPR for contacting us for scientific purposes. If the data is processed in accordance with Article 6 Paragraph 1 Letter a GDPR (consent), there is neither a contractual nor a legal obligation to provide the data. Consent is voluntary. The lawfulness of the processing remains unaffected until the consent is revoked. The provision of personal data is not required by law or contract or required for the conclusion of a contract. In principle, the consultation can also be carried out anonymously. However, certain advisory and support services can only be carried out to a limited extent or not at all without personal data.
3.3 Types and Categories of Personal Data
We process the following categories and types of data for the purposes stated in 3.1:
| Data categories | Data types | Affected categories | Legal basis |
| Master data 1 | Salutation / last name / first name / HWR email address / | Students / prospective students | Art. 6 (1) e GDPR in conjunction with Section 28a BerlHG in conjunction with Section 6 (1) 12 BerlHG |
| Master data 2 | Private phone number / private email | Students / prospective students | |
| Study data | Course of study / matriculation number / semester / desired course of study | Students / prospective students | |
| Opinion | Opinion on the appropriateness of inclusion services (no diagnoses) | Students / prospective students | |
| Document | Opinions on individual cases, e.g. in the DSTIP | Students / prospective students | |
| Health data | Health Diagnoses
/ type of impairment / type of disability |
Students / prospective students | Art. 9 (1) b GDPR in conjunction with Section 28a BerlHG in conjunction with Section 6 (1) 12 BerlHG |
3.4 Data Storage and Deletion Periods
The data is processed exclusively at the HWR Berlin. The data will be deleted 2 years after the last consultation contact. In addition, the data will be deleted as soon as the consent is revoked or the person concerned exercises their right to deletion under Art. 13 (2) b DSGVO.
4 General information on data processing
4.1 Scope of processing of personal data
In principle, we only process the personal data of our users to the extent that this is necessary.
4.2 Recipients or categories of recipients of the personal data
In individual cases, the data will be transmitted to third parties outside the university (external recipients) after consultation with the person to be advised, if the transmission is required, for example, for statements to the Studierendenwerk.
In individual cases, the data will be transmitted to internal recipients at the HWR Berlin after consultation with the persons to be advised if the transmission is necessary.
4.3 Transfer of data to a third country or an international organization
Connection data is not transmitted to a third country or an international organization.
4.4 Right oft he Data subject
The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:
- Information obligation when collecting personal data according to Art. 13 DSGVO
- Information obligation if the personal data was not collected from the person concerned according to Art. 14 DSGVO
- Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
- Right to correction of data stored by the person responsible (HWR Berlin) according to Art. 16 DSGVO
- Right to erasure of data stored by the person responsible (HWR Berlin) in accordance with Art. 17 GDPR
- Right to restriction of processing of data stored by the person responsible (HWR Berlin) in accordance with Article 18 GDPR
- Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 DSGVO
- Right to data portability according to Art. 20 GDPR
- Right to object to data processing if processing is required under Art. 6 (1) e GDPR to perform a task that is in the public interest or in the exercise of official authority or processing under Art. 6 (1) f GDPR is necessary to protect the legitimate interests of the person responsible or a third party according to Art. 21 DSGVO.
- Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
- Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.
4.5 Right to Information
The data subject can request information from the HWR as to whether personal data is being processed by the HWR.
4.6 Exercise of Rights
If you would like to exercise your rights, please contact the data protection officer named above or submit the request using the link . [1]
There is also the right to revoke the declaration of consent under data protection law at any time with effect for the future, whereby the revocation does not affect the legality of the data processing carried out on the basis of the consent up to the revocation (Art. 7 Para. 3 DSGVO). You can also withdraw your consent via the link above.
The person concerned has the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de
4.7 Data Security
In order to protect the security of the data appropriately and comprehensively during processing and in particular during transmission, the HWR Berlin uses appropriate technical and organizational measures to ensure the security of personal data, where necessary and based on the current state of the art.
5 Status, changes and validity of the General Data Protection Declaration
This privacy policy is dated 12/2021. We reserve the right to regularly update this data protection declaration in order to take current legal requirements and technical changes into account and to implement our services and offers in compliance with data protection regulations. We will inform you in the event of significant changes to the legal framework. If there are any changes, we will post a consent and data protection declaration adapted to this.
[1] https://dsgvo2.ds – manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9