Kaleidoscope

I. General Information

The party responsible for the processing of personal data on this website is

Hochschule Bremen,
Neustadtswall 30,
28199 Bremen,
Telephone: +49 (0)421 5905-0

 

The protection of personal data is a matter of great importance to Hochschule Bremen. We process personal data of users of our websites in compliance with the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the Bremen Implementation Act for the EU General Data Protection Regulation (Bremisches Ausführungsgesetz zur EU-Datenschutz-Grundverordnung, BremDSGVOAG).

 

Data collected will neither be published by Hochschule Bremen nor passed on to third parties without authorisation.

This privacy policy applies specifically to the website https://meine-karriere.hs-bremen.de/.

Further Privacy Information, Form for Rights of Access and IT Usage Policy

Below you will find additional privacy notices.

  • Privacy policy for applicants for a job advertisement or a professorship
  • Privacy notices when visiting our social media pages
  • IT Usage Policy (PDF, 38 KB, file is not accessible)

II. Contact Details of the Data Protection Officer

Hochschule Bremen
Neustadtswall 30
28199 Bremen Germany

Tel.: +49 421 5905 2736
E-mail: datenschutz@hs-bremen.de

Please note that communication via e-mail is generally insecure unless you take appropriate protective measures yourself.

If you wish to send us PGP-encrypted messages, please use our PGP communication key (ASC, 4 KB) (public key) for encryption.

For the unambiguous authentication of this public PGP key, the fingerprint is as follows: 238A 6279 7F6D BC83 C892 EB9A 76E0 9D7C 5783 C0E1

III. General Information on Data Processing

Scope of the Processing of Personal Data

As a general rule, we only process personal data of users of our online services to the extent necessary to provide a functional website as well as our content and services. It is generally not necessary for you to provide personal data in order to use our websites. If you wish to make use of specific offers and services provided by Hochschule Bremen via our websites, we may require your personal data. The processing of personal data of our users is carried out regularly only with their consent.

Legal Basis for the Processing of Personal Data

Where we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis.

In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which Hochschule Bremen is subject, Art. 6(1)(c) or (e) GDPR serves as the legal basis. Where the processing of personal data is necessary for the performance of a task carried out in the public interest and assigned to the responsible party, Art. 6(1)(e) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Where the processing is necessary for the purposes of the legitimate interests pursued by Hochschule Bremen or a third party, and where those interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

Deleation of Data and Storage Period

Unless we provide specific information on the storage period, we delete personal data when it is no longer required for the stated processing purposes and where no statutory retention obligations prevent deletion.

IV. Provision of the Website and Creation of Log Files

Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in our log files:

  1. Information about the browser type and version used
  2. The operating system of the user
  3. The IP address of the user is stored in anonymised form (the last three digits are removed)
  4. Date and time of access
  5. Websites from which the user’s system accessed our website
  6. Websites accessed by the user’s system via our website

Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s device. For this purpose, the IP address of the user must be stored for the duration of the session. Data is stored in log files to ensure the functionality of the website. The data also serves to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

Storage Period

The data is stored by our hosting service provider for 60 days.

Our hosting service provider is Mittwald CM Service GmbH & Co. KG, Königsberger Strasse 4-6, 32339 Espelkamp.

Where storage beyond this period takes place, the IP addresses of users are deleted or anonymised so that it is no longer possible to identify the accessing client.

Right to Object and Right to Deletion

The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Users therefore have no right to object.

V. Use of Cookies

Description and Scope of Data Processing

In order to optimise our website in terms of user-friendliness, effectiveness and security, we use cookies. These are small text files that are stored on your device and saved in your browser. These include cookies that are technically necessary for the operation of our website, as well as cookies for anonymous web analysis or for enhanced functions and services.

Necessary Cookies

Necessary cookies enable basic functions and are required for the proper operation of the website.

  • HSB Cookie: Stores the settings of visitors.
  • WordPress Cookie: Language selection and the session.
  • Eye-Able® is a software application by Web Inclusion GmbH that enables all people to access information on the internet in an accessible manner. The required files, such as JavaScript, stylesheets and images, are loaded from an external server. Eye-Able uses the browser’s local storage to save settings when functions are activated. All settings are stored exclusively locally and are not shared. A data processing agreement has been concluded with the company in accordance with Art. 28 GDPR.

Legal Basis for Data Processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR. The legal basis for storing technically necessary cookies is Section 25(2) No. 2 TDDDG.

Purpose of Data Processing

The purpose of using technically necessary cookies is to enable users to make use of the functions of the website (e. g. language selection in WordPress or Eye-Able for accessibility). Some functions of our websites cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognised even after navigating to a different page.

User data collected by technically necessary cookies is not used to create user profiles.

Optional Cookies

You can change your settings for optional cookies on this website at any time by clicking on “Manage Consent” (bottom right of the screen on the website) to edit your consents. This allows you to access the cookie banner with the available settings options.

Tracking Tool Matomo

Wir nutzen auf unserer Website das Open-Source-Software-Tool Matomo zur Analyse des Nutzungsverhaltens. Über die gewonnenen Statistiken können wir unser Angebot verbessern und für nutzende Personen interessanter ausgestalten.

We use the open-source software tool Matomo on our website to analyse user behaviour. The statistics obtained allow us to improve our range of services and make it more interesting for users.

The software places a cookie on the user’s device. The IP address is anonymised during this process, so that the user remains anonymous to us. The software runs exclusively on the servers of our website. Personal data of users is only stored there. Data is not passed on to third parties.

When individual pages of our website are accessed, the following data are stored:

  • Two bytes of the IP address of the user’s accessing system
  • Date and time of the page visit
  • The webpage accessed (title and URL)
  • The website from which the user reached the accessed webpage (referrer)
  • The sub-pages accessed from the visited webpage
  • Time spent on the webpage
  • Frequency of visits to the webpage
  • Screen resolution
  • Time according to the visitor’s time zone
  • Files that were clicked on and downloaded
  • Links to external websites that were clicked on
  • Page generation time (the time required to generate and display the page)
  • Location of the visitor: country, region, city, approximate latitude and longitude (geoposition) based on the internet access point
  • Primary language of the browser
  • Browser user agent

Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR), provided that you have given your consent via our banner. You may withdraw your consent at any time by clicking on “Manage Consent” (bottom right of the screen on the website).

Data is automatically deleted after 6 months.

 

Storage Period, Right to Object and Right to Deletion

Cookies are stored on the user’s device and transmitted from there to our website. You therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

VI. Data Processing upon Registration for the Use of Offers/Services

Purpose of Data Processing

The purpose of data processing upon registration for the use of offers and services is to provide the respective offer or to make available certain content and services (e. g. topic-based newsletters, conferences, general events, course offerings, preparatory courses, information services and events) on our websites.

Scope of Data Processing

Where registration is required to make use of offers or services, we generally process the personal data provided during registration. This typically comprises master data and contact details (name, address, telephone number, e-mail address) as well as, where applicable, the student registration number (Matrikelnummer).

Legal Basis for Processing

Where Hochschule Bremen obtains your consent as a data subject for individual processing operations of personal data on its websites, Art. 6(1)(b) GDPR serves as the legal basis.

Transfer of Data

Your personal data will not be passed on to other bodies or persons.

Storage Period

Personal data is stored until the processing purpose has been achieved and the respective procedure has been completed. It is deleted without delay as soon as the stated purpose has been achieved or the procedure in question has been concluded.

VII. Contact by E-mail

Description and Scope of Data Processing

It is possible to make contact via our website using the e-mail address or form provided. If a user makes use of this option, the personal data transmitted in the e-mail will be stored. No data is passed on to third parties in this context.

The data is used exclusively for processing the conversation. When submitting an e-mail form, your consent to the processing of your data is obtained, and separate reference is made to the information to be provided pursuant to Art. 13 GDPR as well as to the right to withdraw consent.

Legal Basis for Data Processing

Where the user has given their consent, the legal basis for the processing of data is Art. 6(1)(a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6(1)(f) GDPR. Where the purpose of the e-mail contact is to conclude a contract, Art. 6(1)(b) GDPR serves as an additional legal basis for the processing.

Purpose of Data Processing

The processing of personal data entered into a form serves solely for the purpose of responding to your enquiry. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

Storage Period

Data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of personal data sent by e-mail, this is when the respective conversation with the user has ended. A conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved. Any additional personal data collected during the submission process will be deleted no later than seven days after submission.

Right to Objection and Deletion

Users have the right to withdraw their consent to the processing of their personal data at any time. If users contact us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The withdrawal of consent and the objection to storage may be submitted by e-mail to: datenschutz@hs-bremen.de. All personal data stored in the course of making contact will be deleted in this case.

VIII. Social Media

Our websites may contain links to external social networks such as Facebook, Instagram, YouTube, XING, LinkedIn, etc. If you follow these links by clicking on them, your browser establishes a direct connection with the servers of the respective providers. Please note that this privacy policy applies exclusively to the websites of Hochschule Bremen. The functions associated with the links to these networks, in particular the transmission of information and user data, are not activated merely by visiting our websites, but only when you click on the relevant links.

For information on the purpose and scope of data collection by the networks, as well as the further processing and use of your data, your rights in this regard and the privacy settings available to you, please refer to the privacy notices of the respective networks.

Hochschule Bremen maintains online presences on various social networks (LinkedIn, Facebook, Instagram, YouTube, XING) for the purpose of informing the public about the fulfilment of its tasks (Section 4(9) of the Bremen Higher Education Act (Bremisches Hochschulgesetz)). When visiting these profiles, personal data of users may be processed outside the European Union. As a result, a lower level of data protection may exist in some cases. The relevant data processing is carried out by the external operators of these networks and is based on their respective privacy policies. Please consult these for information on the relevant processing procedures. Please note that you use social networks and their functionalities at your own responsibility. Hochschule Bremen has no influence over the nature and scope of the data processed by the respective providers, the manner of processing and use, or the transfer of such data to third parties.

We maintain profiles on the following social media platforms:

  • YouTube
  • Instagram
  • Facebook
  • XING
  • LinkedIn

The following provides information on the processing of your data.

Joint Controllership

As soon as one of our profiles on the respective social media platform is accessed, the terms and conditions and data processing policies of the respective provider apply. Providers regularly process personal data in connection with analytics services. In addition to the IP address, user behaviour and information provided by users is generally also evaluated. As a result of the processing operations triggered by accessing the profile, we are jointly responsible with the provider of the social media platform pursuant to Art. 26 GDPR, to the extent that personal data is processed by us and the respective platform operator. This applies in particular to so-called “insights data”. In this case, we have concluded a joint controllership agreement with the respective platform operator, which is linked to below. We are not the original provider and merely make use of the options offered by the social media platforms.

Data Processing by Social Media Platform Providers

User data is frequently processed within and outside social media platforms for market research and advertising purposes, without us being able to influence the nature and scope of the specific data processing. In order to create user profiles and statistics that capture user behaviour and the resulting interests, cookies are generally used that remain on your device until they are deleted by the user. We are unable to influence, prevent or control the creation and provision of such statistics. Data collection may therefore also affect users who are not logged in. Information on data processing provided by the respective provider, configuration options for protecting your privacy, contact information, further opt-out options and, where concluded, the agreement pursuant to Art. 26 GDPR can be found in the privacy policy of the respective provider. To the extent that we are able to influence the specific scope of data processing and configure data processing parameters, we endeavour, within the options available to us, to encourage the social media platform providers linked to below to handle data in a manner that complies with data protection requirements.

Embedded Videos (YouTube)

We embed videos on our websites that are not stored on our servers. In order to ensure that accessing our websites with embedded videos does not automatically result in third-party content being loaded, we initially display only locally stored preview images of the videos. This means that a third-party provider receives no information at this stage.

Third-party content is only loaded after you click on the preview image. This informs the third-party provider that you have accessed our website, along with the technically necessary usage data. In addition, the third-party provider is then able to implement tracking technologies. We have no influence over any further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load content from the third-party provider.

The embedding is carried out on the basis of your consent, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos results in your data being processed outside the EU or the EEA. In some countries, there is a risk that authorities may access data for security and surveillance purposes without you being informed or being able to take legal action.

Facebook

Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Instagram

Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Joint controllership is limited to the collection and transmission of data to Meta Platforms Ireland Limited, a company based in the EU. Further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, in particular with regard to the transfer of data to its parent company Meta Platforms, Inc. in the USA. This is based on the standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc. Under the above-mentioned agreement pursuant to Art. 26 GDPR, Meta has undertaken towards us to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data, and to make the substance of this commitment available to data subjects.

LinkedIn

YouTube

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a group company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Xing

Service provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Data Processing by Us

Data entered on our profiles, such as usernames, comments, videos, images, likes, public messages, shared posts, etc., are published by the respective social media platform and may be visible to other users. We reserve the right to delete content where necessary. Where applicable, we may share your content on our page if this is a feature of the social media platform, and we communicate with you via these platforms.

Users can contact us through the options available on the social media platform, for example by e-mail, direct message or via the community functions provided. In doing so, we process the data provided directly in the message as well as in the user profile. We can only view information stored in your public profile, and only if you have such a profile. Data transmitted to us in this context is processed solely for the purpose of communicating with the respective user and will not be used for any other purpose. The legal basis for this data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to communications and improving the user experience for our target audience when visiting our profiles.

Furthermore, we have a legitimate interest in the comprehensive external representation of Hochschule Bremen and in providing up-to-date information. The legal basis for data processing in connection with the external representation of Hochschule Bremen is therefore also Art. 6(1)(f) GDPR.

The legal basis for data processing is Art. 6(1)(b) GDPR where it concerns the initiation or performance of a contractual relationship.

We store data transmitted to us only for as long as the purpose for which the data is being processed has been achieved, and for as long as we require the data to pursue or defend legal claims or to fulfil statutory retention obligations. To the extent that you interact on the platform beyond this, such data may remain visible until it is deleted by you.

Data collected in connection with the use of the community function is processed by us for as long as we operate the company profile or until your interaction with our company profile is deleted by you.

Transfer of Data to Third Countries

We do not intend to transfer personal data to a third country.

Social media platforms collect diagnostic and service data, use this data independently for their own purposes and may process personal data in third countries without us being able to influence this. However, platform operators have generally concluded the standard data protection clauses adopted by the European Commission, which we have linked to above and on which data transfers to the USA can be based. Data transfers to the USA are also carried out on the basis of an adequacy decision by the European Commission pursuant to Art. 45 GDPR (the so-called EU–US Data Privacy Framework).

IX. Rights of the Data Subject

Where Hochschule Bremen processes your personal data, you have the following rights as a data subject within the meaning of the GDPR:

 

You have the right to withdraw any consent you have given at any time (Art. 7(3) GDPR). Furthermore, where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to the processing under the conditions set out in Art. 21 GDPR.

In addition, subject to the conditions of the relevant provisions, you have the right to access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to deletion (Art. 17 GDPR), the right to request the restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).

Furthermore, pursuant to Art. 77 GDPR, you also have the right to file a complaint with a supervisory authority.