Discover IGC

The taking of photographs or filming with your representation constitutes the processing of personal data within the meaning of the European General Data Protection Regulation (GDPR).

This regulation contains provisions on the protection of natural persons with regard to the processing of personal data. If Bremen University of Applied Sciences collects and processes personal data from you with your consent, your rights arise from the EU General Data Protection Regulation and the Bremen Implementation Act to this Regulation. According to Article 13 GDPR, those persons from whom personal data is collected must be provided with a range of information. You will receive this information here:

Name and contact details of the person responsible:

Bremen University of Applied Sciences, Corporation under public law and Institution of the Free Hanseatic City of Bremen

Neustadtswall 30,

28199 Bremen

Germany, represented by its Rector

Phone: +49 421 5905 2222

E-mail: info@hs-bremen.de

Website: www.hs-bremen.de

Responsible for data processing:

International Graduate Center, Ramón Spiecker, Managing Director IGC, Langemarckstr. 113, 28199 Bremen, +49 421 5905 4702, ramon.spiecker@hs-bremen.de

Contact details of the data protection officer

Data protection officer:r

Bremen University of Applied Sciences

Neustadtswall 30

28199 Bremen

Germany

Phone: +49 421 5905 2736

E-mail: datenschutz@hs-bremen.de

Purpose of data processing

The purpose of the data collection is to take photographs or film recordings with your presentation for the purpose of external presentation (Art. 6 para. 1 lit. a), Art. 9 para. 2 lit. a) GDPR) as described in paragraph I.  The photographs and/or film recordings made will be processed by video editing software after recording and then stored on an internal memory of Bremen University of Applied Sciences in a data protection-compliant and access-protected manner. Only IGC employees have access to this data. All persons have been obligated to handle personal data.

Legal basis for the processing       

The legal basis is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) with your consent as the data subject. Insofar as special personal data pursuant to Art. 9 GDPR can also be seen in the photos (e.g. information on origin, religion or health (e.g. skin color, headgear, glasses)), the legal basis for the processing is consent pursuant to Art. 9 para. 2 lit. a) GDPR.

Passing on the data

Your personal data (photographs and film recordings with your image) will only be passed on within the scope of the rights granted by you to realize the intended use of the images or recordings. The data will not be passed on to other bodies or persons outside of the use you have authorized.

If the recordings are also passed on or processed for purposes other than those stated here, you will be informed of this separately by the relevant HSB department.

Information on platforms (especially) social media channels

Shared responsibility

As soon as one of our profiles is accessed on the respective social media platform, the terms and conditions and data processing guidelines of the respective providers apply. The providers regularly process personal data in connection with analysis services. In addition to the IP address, user behavior and the information provided by the user is usually evaluated. As a result of the processing operations triggered by the call, we are jointly responsible with the provider of the social media platform in accordance with Art. 26 GDPR, insofar as personal data is processed by us and the respective platform operator. This applies in particular to so-called "insight data". In this case, we have concluded a joint controllership agreement with the respective platform operator, to which we provide a link below.  We are not the original provider and merely use the options offered by the social media platforms.

Data processing by the operators of the platforms

We maintain channels on the platforms listed below. The providers of these platforms process user data for their own purposes. We have no influence on the specific scope of data processing. The information on data processing provided by the respective provider is linked below.

• YouTube
  YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a group company of Google LLC 1600 Amphitheatre Parkway Mountain View CA 94043;
  The information on data protection as well as further information on contact options and data protection-related settings can be found under the following link:
  https://policies.google.com/privacy?hl=de&gl=de

• LinkedIn
  LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
  the information on data protection and further information on contact options and data protection-related settings can be found under the following link:
  https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy

• Xing
  Xing is provided by: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany;
  The information on data protection as well as further information on contact options and data protection-related settings can be found under the following link:
  https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy

• Facebook and Instagram
  Facebook and Instagram are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta"); the information on data protection and further information on contact options and data protection-related settings can be found at the following link:
   Facebook:
  https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
   Instagram:
  https://help.instagram.com/519522125107875/?helpref=hc_fnav

Data may also be collected from non-registered users by the portals using so-called cookies, which are stored on the users' end devices. The use of such cookies is carried out solely by the respective platform. We therefore have no influence on the type and scope of the specific data processing by the platforms named in this statement and refer to the information provided by the platforms for further details and setting options.

Data processing on the platforms by HSB

When you visit one of our websites, we collect and process personal data depending on how you use it.

Every visitor can contact us using the options available on the portal. Contact is made, for example, by e-mail or direct message. We process the data provided directly in the message and in the user profile. The data transmitted to us in this process is only processed for the purpose of communicating with the respective user. The legal basis for data processing is therefore Art. 6 para. 1 lit. f. GDPR, as in this case our legitimate interest in responding to the communication outweighs the interests of the data subject.

In addition, it is possible to use the platform-dependent functionalities (like buttons, comment functions, sharing posts) on the platforms. In this case, we and other visitors can see personal data (e.g. name of the user).

We only store the data until the purpose of the data processing has been achieved or until we are legally obliged to retain it.

General information on data processing on Facebook and Instagram

We operate company pages on the Facebook and Instagram platforms to inform users of these platforms about our company and to regularly inform users about current events and happenings. Users can comment on this information and/or add a "Like" using the "Like" button offered by Meta. It is also possible to leave your own contributions on our company pages. These interactions are publicly visible to other users.

On these pages, we can only view the information stored in your public profile, and only if you have such a profile and only if you access our company page with this profile or follow our company page.

In addition, Meta provides us with summarized usage statistics that we use to improve the user experience when visiting our company website. We do not have access to the usage data that Meta collects to compile these statistics and therefore cannot identify you personally on the basis of this data. This data processing serves our legitimate interest in improving the user experience when visiting our company website in line with our target group. The legal basis for data processing is therefore Art. 6 para. 1 lit. f) GDPR.

Meta also uses so-called cookies, which are stored on your end device when you visit our company website even if you do not have your own profile or are not logged into it during your visit to our company website. These cookies allow Meta to create user profiles based on your preferences and interests and to display customized advertising within and outside the platforms. Cookies remain on your device until you delete them. Details on this can be found in Meta's privacy policies for Facebook and Instagram linked above.

Meta has made a commitment to us under an agreement pursuant to Art. 26 GDPR to assume primary responsibility under the GDPR for the processing of this data, to fulfill all obligations under the GDPR with regard to this data and to provide the data subjects with the essentials of this obligation. Further information can be found at:

https://www.facebook.com/legal/terms/page_controller_addendum

Processing purposes

We process the data in order to interact with the users of our company website. This can be done via direct messages or via the community functions offered by Meta.

If you contact us via direct messages, we process, for example, your user name, profile picture, contact details and the data provided in your message. We process this data in order to communicate with the user and process the request. The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR if it concerns the initiation or execution of a contractual relationship and otherwise Art. 6 para. 1 lit. f) GDPR, whereby our legitimate interest lies in responding to your request. We delete this data as soon as it is no longer required for communication and we no longer need the data to pursue or defend against legal claims or to comply with statutory retention periods.

In addition, we process data when users interact with us via the community functions (e.g. posting or sharing posts or comments). For example, we process the user name, profile picture and contact details as well as the active interaction of the user. We process this data in order to be able to provide the community functions offered by Meta. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. Our overriding legitimate interest lies in being able to provide the functions offered by the platforms.

We only process the data collected as part of the use of the community function for as long as this is necessary. As a rule, this means as long as we operate the company page or your interaction on our company page has not been deleted by you. Beyond this, the data will only be stored if it is required for the pursuit of or defense against legal claims or for the fulfillment of any statutory retention obligations.

Handling sensitive data

Please do not share any personal data of third parties or sensitive data (e.g. special categories of personal data (Art. 9 GDPR)) via the platforms. If the transmission of such personal data is absolutely necessary, please contact us via the means of communication offered on our website.

Data transfer to third countries

The platforms collect diagnostic and service data, use it on their own responsibility for their own purposes and may also process personal data in third countries without us being able to influence this.

We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the legality and security of data processing. In particular, it cannot be ruled out that US security authorities may gain unrestricted access to the data. There are no legal protection options against such access by US security authorities that are comparable to the European level of protection.

Duration of storage

The personal data will be stored until the purpose of processing has been achieved. The electronic data of the photos and video recordings should be deleted no later than 5 years after completion of the study program.

Right of access, right to rectification, right to restriction of processing, right to erasure, right to data portability, right to lodge a complaint

You can request confirmation from Bremen University of Applied Sciences as to whether personal data concerning you is being processed by us. In the event of such processing, you have further rights. You may have the right to rectification and/or completion of your data. Under certain circumstances, you may request the restriction of the processing of your personal data. If there are certain reasons, you can request the immediate deletion of your personal data. You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. Under certain conditions, you also have the right to transmit this data to another controller without hindrance from the university. Finally, you have the right to lodge a complaint if you believe that the processing of your personal data violates the European General Data Protection Regulation.

Further information on your rights and the contact details of the complaints office of the Free Hanseatic City of Bremen can be found in Chapter XI "Rights of data subjects" in the university's privacy policy. You can find the data protection declaration on the website of Bremen University of Applied Sciences at 

https://www.hs-bremen.de/datenschutz/

Revocation of consent

You can revoke your consent to the processing of your data at any time without giving reasons by sending an email to: datenschutz@hs-bremen.de or marketing.weiterbildung@hs-bremen.de. Until you withdraw your consent, the lawfulness of the processing based on your consent remains unaffected. Media already created using the data up to the time of revocation remain unaffected.

Processing for other purposes

All data protection regulations are observed when processing your personal data. Data will not be processed for purposes other than those specified here.

Your personal data will not be processed for the purpose of automated decision-making (including profiling) in accordance with Art. 22 (1) and (4) GDPR.