Data Prcessing Infrmatin fr Users f the Career and Alumni Prtal f HTW Berlin (Data Privacy Plicy) The prtectin f yur data is imprtant t us. In view f this and in rder t cmply with all f ur statutry disclsure and infrmatin duties, we infrm yu in the fllwing abut hw we, Hchschule für Technik und Wirtschaft Berlin, Treskwallee 8, 10318 Berlin, prcess yur data and what rights yu are entitled t with regard t this data prcessing. The career and alumni prtal f HTW Berlin was develped by IntraWrlds GmbH, Erika-Mann-Str. 7, 80636 Munich, and is perated by IntraWrlds GmbH n ur behalf. We therefre explain t yu belw what data we cllect thrugh IntraWrlds GmbH and hw this data is prcessed by us/intrawrlds GmbH. The bligatins f IntraWrlds GmbH twards us and with regard t data privacy are expressly defined in a prcessing agreement. Cntents 1. Subject Matter f Data Privacy... 1 2. Scpe and Purpse f Data Prcessing... 2 2.1. Data Prcessing für the Alumni and Career Service Wrk f HTW Berlin in Cnnectin with the Career and Alumni Prtal f HTW Berlin... 2 2.1.1. Data Prcessing when use the Career and Alumni Prtal... 2 2.1.2. Strage Perid f Data within the Scpe f the Alumni Wrk f HTW Berlin... 3 2.2. Other Data Prcessing Infrmatin... 4 2.2.1. IP Adresses... 4 3. Data Prcessing fr Specific Purpses, Disclsure f Data... 4 4. Perid f Data Prcessing... 4 5. Rights f Data Subjects (including the right t btain infrmatin, the right t withdraw cnsent, the right t bject, the right t request the erasure f persnal data, the right t cntact the data prtectin fficer)... 5 1. Subject Matter f Data Privacy The subject matter f data privacy is persnal data. Persnal data is defined as individual items f infrmatin relating t the persnal r factual circumstances f a specific natural persn and as all infrmatin relating t an identified r identifiable persn in accrdance with Art. 4 f the EU General Data Prtectin Regulatin (GDPR). This includes cntact data such as names, addresses, email addresses r telephne numbers. It als encmpasses cntent data which is typically used fr the alumni wrk f a university and in the cntext f career advisry r jb applicatin services, fr example CVs and ther prf f qualificatins. Cntent data furthermre includes user cmments r psts created within a platfrm. Of curse, persnal als includes user data such as IP addresses, lgin data r when access is made t specific pages r cntent. 1/5
2. Scpe and Purpse f Data Prcessing In the fllwing we infrm yu abut the scpe f data cllectin and strage as well as abut the use f such data (hereinafter referred t as Data Prcessing, as defined in Art. 4 (7) GDPR) and abut the purpse f data cllectin when yu use the career and alumni prtal f HTW Berlin. We first f all explain the specific data prcessing that is carried ut within the scpe f the career and alumni prtal f HTW Berlin and then explain ther frms f data prcessing in cnnectin with the use f the prtal. 2.1. Data Prcessing fr the Alumni and Career Service Wrk f HTW Berlin in Cnnectin with the Career and Alumni Prtal f HTW Berlin As yur university/frmer university, we use the career and alumni prtal as a central pint f cntact via which we wuld like t cmmunicate and exchange infrmatin with yu regarding yur persnal and prfessinal further educatin and develpment, news abut the university, pprtunities fr exchange and netwrking with (ther) alumni and university funding pprtunities. We will keep yu up t date n what is happening at HTW Berlin, infrm yu abut career pprtunities, further training, schlarships and mentring prgrammes. We will als ffer yu the chance t participate in events, funding prgrammes r further training. Apprximately 2 t 3 years after yur graduatin, we ask yu t give us yur feedback by lking back n yur studies at HTW Berlin. 2.1.1. Data Prcessing when yu use the Career and Alumni Prtal If yu als actively use the career and alumni prtal in rder t infrm yurself abut vacant psitins, wrkshps/events r what is currently ging n at HTW Berlin r in rder t interact abut these tpics, fr example by cmmenting n articles, psting cntent yurself r declaring yur participatin in events, we prcess the fllwing data frm yu which can be typically generated as part f yur interactive use f ur platfrm: - Cntent data such as The prfile visible n the platfrm filled ut by yu, including articles written by yu r cmments abut cntent such as articles, vides, event r wrkshp annuncements Articles created and upladed by yu, phtgraphs, vides Participatin messages regarding events r wrkshps Grup memberships Evaluatins f cntent r cmments Cntact requests and cnnectins Survey participatin Messages between users (they cannt be viewed by administratrs, i.e. emplyees f HTW Berlin) Messages t ur emplyees Registratin fr newsletters 2/5
- General ther usage data such as IP addresses LgIn data Access t certain cntent/pages such as articles, dcuments, events, frums, images, surveys, jbs, vides, etc. Opening newsletters r clicking n newsletter cntent We prcess such data in accrdance with Art. 6 (1 b) GDPR. This persnal data is created when yu use the platfrm. We have t prcess this data in rder t ffer yu the services f ur platfrm and in rder t enable such services. Please als read the infrmatin we prvide abut the prcessing f IP addresses. In additin, yu f curse have the right t bject t this data prcessing, fr mre infrmatin please read sectin 5. 2.1.2. Strage Perid f Data within the Scpe f the Alumni Wrk f HTW Berlin After yu leave the university, we save yur persnal data (here exclusively name(s), first names(s), title, private email address, HTW email address, student ID number, date f birth) and study prgramme data (here exclusively the start and end date f yur studies and study prgramme) fr a perid f six years (based n the end f the semester n 31.3. r 30.9.). If yu d nt actively use the platfrm, we will nly use this data recrd within the scpe f the career and alumni prtal fr the purpses f verifying wh yu are when yu sign in t the career and alumni prtal in fr the first time. If yu actively use the platfrm as a graduate, we prcess yur persnal data as described in sectin 2.1.1., i.e. such data that is generated by actively using the platfrm, fr up t 6 years after yur last interactin with ur platfrm (in each case based n the end f the semester n 31.3. r 30.9.). Interactin is deemed as lgging in t the platfrm lgin r any ther reactin t cmmunicatin initiated via the platfrm (e.g. expressin f interest in cperatin with HTW Berlin / event registratin by email t alumni@htw-berlin.de r telephne). The reasn fr this relatively lng strage perid is that cntact and cmmunicatin with yu as a (future) graduate is structured n a lng-term basis. We want t keep in cntact with yu in the lng term and t be able t cmmunicate and prvide yu with infrmatin in the lng term. We take int cnsideratin that as a graduate yu fllw the develpment f yur frmer university, HTW Berlin, and want t have access t pssibilities fr exchange. In additin, yu f curse have the right t bject t this data prcessing at any time, fr further infrmatin please read sectin 5. Befre deleting yur data, we will infrm yu in advance that yur data is ging t be deleted. 3/5
2.2. Other Data Prcessing Infrmatin 2.2.1. IP Addresses Withut Internet prtcl addresses, IP addresses fr shrt, the Internet explained in very simple terms wuld nt wrk. An IP address is an address in cmputer netwrks via which web servers and/r individual end devices are able t be addressed and reached. Withut IP addresses, the web server and end devices cannt cmmunicate and therefre cannt display anything. When yu want t use the prtal, the web server n which the career and alumni prtal f HTW Berlin is hsted is therefre pinged with a data request frm yu. T prvide yu with data, the web server has t knw yur IP address. As a result, the web server has t save yur IP address at the time the data request is received. In additin, the web server receives infrmatin abut which web page r file has been accessed and which brwser and perating system was used t d this. This infrmatin is called a lg file. IntraWrlds GmbH saves yur IP address in lg files fr seven days fr reasns f security and netwrk integrity. This enables attacks such as brute frce and denial f service t be better recgnised and mre quickly prevented. 3. Data Prcessing fr Specific Purpses, Disclsure f Data We bserve the principle f using data nly fr specific purpses. All f the afrementined data is nly prcessed by us fr the already listed purpses and fr thse purpses listed in the fllwing. Fr the alumni wrk f individual study prgrammes, n request we disclse lists that cntain yur name(s), first name(s) and email address nly t prfessrs and exclusively in cnnectin with specific activities. In cnnectin with the graduate survey cnducted every 2 t 3 years, we disclse a list cntaining yur name(s), first name(s) and email address, study prgramme and data f graduatin t the persn(s) respnsible fr the evaluatin f HTW Berlin. Persnal data will nt be disclsed t third parties utside f the scpe described here withut yur express permissin. Disclsure t state institutins and authrities that are entitled t receive such infrmatin shall nly be carried ut within the scpe f the statutry disclsure requirements r if we are bliged t prvide infrmatin as a result f a curt decisin. 4. Perid f Data Prcessing We are bliged t cmply with the principles f data limitatin and data minimisatin. We have already infrmed yu in the abve abut the perid f data prcessing. 4/5
5. Rights f Data Subjects (including the right t btain infrmatin, the right t withdraw cnsent, the right t bject, the right t request the erasure f persnal data, the right t cntact the data prtectin fficer) Independent f the freging, yu can bject t the use f yur data at any time and withdraw any given cnsent t the use f yur data at any time. If yu withdraw yur cnsent t data prcessing r bject t the use f yur data, this des nt affect the lawfulness f the data prcessing prir t the time f withdrawal. Yu can als ask us t rectify, blck r erase persnal data we have cllected and saved at any time. We expressly infrm yu that statutry requirements can require us t cntinue t save data, in which case the data can nly be blcked. Furthermre, we have t infrm yu that frm 25.05.2018 yu als have the right t data prtability as defined in Art. 20 GDPR and the right t ldge a cmplaint with the cmpetent supervisry authrity as defined in Art. 77 GDPR. If yu exercise yur rights directly in respect f IntraWrlds GmbH, the latter is bliged t immediately infrm HTW Berlin, and vice-versa, t enable yur request t be fulfilled as quickly as pssible. The cntact details f ur Data Prtectin Officer are as fllws: Prf. Dr. Hrst Theel Email: hrst.theel@htw-berlin.de Tel. 030/5019-2603 Building C, Rm 827 Treskwallee 8 10318 Berlin 5/5