Privacy Policy
IT Application – Mahara E-Portfolio for Students
Controller:
Berlin School of Economics and Law
Badensche Str. 52
10825 Berlin (Germany)
praesident@hwr-berlin.de
Legal representatives:
Prof. Dr. Andrew Zaby
Data Protection Officer:
Vitali Dick (HiSolutions AG)
Badensche Str. 52
10825 Berlin (Germany)
datenschutz@hwr-berlin.de
Information on the processing activity:
Purposes of the processing activity:
The e-portfolio system Mahara is a digital collection of information for the documentation, reflection, presentation and control of personal learning outcomes and development processes. In addition to keeping a learning diary (e.g. a blog), this learning method also includes the collection, connection and assessment of different digital artefacts (e.g. documents, images, videos, links, etc.) with reference to the respective learning objective.
The use of Mahara is particularly suitable for project work and for dovetailing theory and practice. Development and presentation portfolios can also be used to show professional career paths and for self-portrayal and to this extent shared with interested parties. Mahara also allows you to collect important files according to their purpose, organize them in folders, work in groups and share files and information.
Initially, only the name details are visible within the platform. All other personal information and files entered are only visible to other people after they have been approved or appropriate settings have been made.
Categories of Processed Personal Data
- Authorization Data / Authentication Data
- Master data
- Portfolio Content Data
- Profile data (voluntary)
- Log Data – Server
- Cookie data
Legal basis of the processing activity:
The legal basis for the general use of the platform for the above purposes, access data, cookies and log files is Article 6 Paragraph 1 Sentence 1.
The legal basis for the university-wide publication of portfolio content beyond the study group or the lecturer is Article 6 (1) a GDPR.
The legal basis for the processing of data that is not required for teaching and is voluntarily entered on the platform is Article 6 (1) a GDPR – Consent. This can be, for example, content sharing, further contact options, social media presence, CV information, photos, videos, uploaded files and artefacts. By using, uploading or sharing, you consent to data processing by HWR Berlin.
Consent is voluntary and can be revoked at any time. The legality of the processing carried out on the basis of the consent until the revocation remains lawful until the revocation.
Categories of recipients:
Data is not transmitted to external recipients.
Data transfer to a third country:
There are no planned transfers to third countries.
Duration of storage of personal data:
- Authorization Data / Authentication Data
- Master data
- Portfolio Content Data
- Profile data (voluntary)
- Log Data – Server (30 days)
- Cookie data (after ending the browser session)
Deletion periods for 1-4 for students (150 days after de-registration), for teachers (30 days after termination of employment) or after deletion by the user.
Obligation to provide personal data:
You are not obliged to provide the data.
Automated Decision Making:
There is no automated decision-making or profiling.
Rights of the data subject
The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:
- Information obligation when collecting personal data according to Art. 13 GDPR
- Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
- Right to correction of data stored by the person responsible (HWR Berlin) according to Art. 16 DSGVO
- Right to erasure of data stored by the person responsible (HWR Berlin) in accordance with Art. 17 GDPR
- Right to restriction of processing of data stored by the person responsible (HWR Berlin) in accordance with Article 18 GDPR
- Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 DSGVO
- Right to data portability according to Art. 20 GDPR
- Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
- Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.
Exercise of rights
If you would like to exercise your rights, please contact the data protection officer named above or submit the request using the link . [1]
Right of appeal
The person concerned also has the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de
[1] https://dsgvo2.ds – manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9