Source: https://www.wi.uni-muenster.de/privacy-statement
Timestamp: 2019-04-21 20:18:58+00:00

Document:
Whenever processing such data is necessary for compliance with a legal regulation, to which the University of Münster is subject, Art. 6 (1 c) GDPR serves as the legal basis.
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, Art. 6 (1 e) GDPR serves as the legal basis for processing this data.
If processing is necessary for safeguarding the legitimate interests of the University of Münster or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1 f) GDPR serves as the legal basis for processing this data. This does not apply to processing tasks which the University of Münster is obliged to perform as a public authority.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. The data subject also has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay as soon as the purpose of storage is no longer necessary. In cases where data processing is performed on the basis of consent, the right to erasure exists if the data subject withdraws his/her consent and no other legal grounds exist for processing the data.
Personal data must be erased if the data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or if the personal data has been unlawfully processed, or if the personal data must be erased in order to comply with a legal requirement mandated by an EU or member state law, to which the University of Münster is subject.
The right to erasure as put forth in the cases stated above does not apply, however, if it would prevent compliance with a legal obligation which requires processing by European Union or member state law, to which the University of Münster is subject, or hinder the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, or if extended storage is necessary for the establishment, exercise or defence of legal claims.
If permission to process personal data was granted by the consent of the data subject, he or she may withdraw his/her consent at any time. All processing of personal data performed prior to withdrawal remains lawful irrespective of the subject’s withdrawal.
The data subject has the right to obtain confirmation from the University of Münster whether it is processing any personal data concerning him or her. If such is the case, the data subject has a right to information regarding the type of personal data and the purpose for which it is being processed. The data subject also has the right to obtain information on the duration of the planned storage of his/her data, or on the criteria for determining how long his/her data is to be stored.
All data stored in log files is erased within seven days. A longer period of data storage is possible. In such cases, the user’s IP address is erased or anonymised in such a way that renders it impossible to identify the querying client.
The legal basis for processing personal data using technically necessary cookies is provided in Art. 6 (1 f) GDPR. The legal basis for processing personal data using cookies for other purposes for which respective consent is granted by the user is provided in Art. 6 (1 a) GDPR.
The purpose of using technically necessary cookies is to make it easier for the client to use the website. Some functions on our website cannot be offered without cookies. Such functions require the browser to identify the user after a page change. These purposes correspond to the legitimate interests of processing personal data in accordance with Art. 6 (1 f) GDPR.
The software is configured in such a way that it does not store full IP addresses, but only two bytes of the user’s IP address. This renders it impossible to attribute the abbreviated IP address to the querying computer.
If you do not wish to have your data saved and analysed, you can withdraw your consent on cookie storage and usage with a mouse click at any time. In such cases, Matomo places an “opt-out cookie” onto your browser which prevents it from collecting any data during your visit to our website. Please note: If you choose to delete the cookies in your browser, the opt-out cookie will also be erased, which means you will have to reactivate the opt-out cookie during your next visit.
If you have activated the "Do not track" option in your browser, you do not require an opt-out cookie.
The legal basis for processing the user’s personal data is provided in Art. 6 (1 f) GDPR.
Processing the user's personal data allows us to analyse the browsing behaviour of our users. The analysis of the collected data permits us to generate information about how certain components of our website are used. This helps us to improve our website and enhance user friendliness on a continual basis. This corresponds to the legitimate interests of processing personal data in accordance with Art. 6 (1 f) GDPR.
All personal data processed in connection with newsletter delivery is not shared with third parties. This data is exclusively used for delivering the newsletter.
The legal basis for processing the user’s personal data after registering and granting his/her consent is provided in accordance with Art. 6 (1 a) GDPR.
Your email address is saved on our server for as long as your newsletter subscription is active. Other personal data collected during the registration process is normally erased within seven days.
The newsletter subscription can be cancelled by the user at any time. For this purpose, a cancellation link is embedded in every newsletter. When cancelling the subscription, the user can also withdraw his/her consent to having his/her personal data collected during the registration process saved on the University’s server.
On our website, users can personally contact the University via email by using the email address provided for such purposes. In this case, the email together with the user’s personal data is saved on our server.
The user’s personal data is not shared with third parties in this context. The data is exclusively used for purposes of establishing and maintaining contact with the user.
The user’s personal data is processed only for the purpose of establishing and maintaining contact with the user. This corresponds to the legitimate interests of processing personal data in accordance with Art. 6 (1 f) GDPR.
All personal data sent to us via email is deleted as soon as the respective dialogue with the user is concluded. The dialogue is deemed concluded when circumstances indicate that the issue in question has been clarified to the satisfaction of all parties.
Our website uses social media plugins of various providers. When you access a page from our website which contains such a plugin, your browser establishes a direct connection to the servers of the respective provider. The content of the plugin is directly transmitted to your browser which integrates it into the website.
Plugins enable the providers to know that you have accessed the respective page on our website. If you are logged in with the corresponding provider, the provider has the ability to assign this information to your account.

References: Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6