Source: https://www.stw-bremen.de/en/data-privacy
Timestamp: 2019-04-26 17:07:43+00:00

Document:
The Studierendenwerk (Student Union) Bremen takes your privacy very seriously. No publication or transfer to third parties is performed .
Responsible for the following data collection and processing is the Studierendenwerk Bremen (Institution under Public law).
We store the IP address provided by your web browser strictly earmarked for a period of seven days, in the interest of detecting, limiting and eliminating attacks on our websites. After expiration of this period, we delete or anonymize the IP address. The legal basis is Art. 6 (1) (f) DGPR.
• the IP address of the requesting computer, which is shortened so that a personal reference is no longer produced.
The mentioned log data are only stored anonymously.
We take technical and organizational measures to protect your data from unwanted access as comprehensively as possible. An encryption method is used on our website. Your information will be transferred from your computer to our server and vice versa via the Internet using a TLS encryption. You will recognize this by the lock symbol being closed in the status bar of your browser and the address bar starting with https: //.
Within the framework of order processing pursuant to Art. Art. 28 GDPR, we use service providers who assist us in the operation of our websites (e.g. hosting) and the associated processes. Our service providers are strictly bound by instructions and contract to us.
Currently, we do not use analytical services.
You have the right to ask for confirmation of the processing of your personal data; If this is the case, you have a right to information about these personal data and to the information listed in Art. 15 GDPR.
You have the right to immediately request the correction of your incorrect personal data and, if necessary, the completion of incomplete personal data.
You also have the right to demand immediate deletion of your personal data, provided that one of the reasons listed in Art. 17 GDPR apply, for example, if the data is no longer needed for the purposes pursued.
You have the right to demand the limitation of processing if one of the conditions listed in Art. 18 GDPR has been used, for example if you object to the processing, for the duration of a possible examination.
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, common and machine-readable format or to request the transfer thereof to a third party.
If data are collected on the basis of Art. 6 (1) (f) (Data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons relating to your particular situation.
We will then no longer process the personal information unless there are evidently compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
According to Art. 77 GDPR, you have the right to lodge a complaint to a supervisory authority if you believe that the processing of your data violates data protection regulations. In particular, the right of appeal may be claimed by a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.

References: Art. 6
 Art. 28
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 77