Source: https://www.ipu-berlin.de/en/data-protection.html
Timestamp: 2019-04-21 06:10:33+00:00

Document:
As per Art. 15 EU General Data Protection Regulation (EU-GDPR), an affected person (data subject) has the right to cost-free information about whether personal data about themselves is being processed, and if so, which personal data these concern. In this respect, a copy of the data can fundamentally be demanded, provided this does not come within the scope of any statutory exceptions or the greater interests of a third party. In the event that the data are incomplete or incorrect, there is a right to rectification as per Art. 16 EU-GDPR.
Art. 17 EU-GDPR: Erasure of one’s own personal data when one of the grounds listed there for deleting personal data occurs and there are no overriding legal grounds.
Art. 18 EU-GDPR: Restriction on processing of personal data when a ground named there applies.
Art. 20 EU-GDPR: Transmission of one’s own personal data to a provider (controller) when the processing occurs due to consent for same or on the basis of a contract.
Art. 21 EU-GDPR: For reasons of a particular personal situation, the data subject can have the right to object to processing of personal data that is legal otherwise.
Art. 22 EU-GDPR: Special rights are granted here to data subjects affected by automated individual decision-making, including profiling.
Processing of log data (access data): When using the website, the access to the pages, whether the access was successful, the point in time of same, the data volumes transferred and the IP address of the accessing computer are collected for the recognition of errors. The storage of the IP address occurs in an abbreviated form, so that identification is either impossible or only possible with outlays and efforts that are disproportionate to the knowledge gained about the accessing connection. The processing only occurs internally and on the basis of Art. 6 Para. 1 f) EU-GDPR, whereby the legitimate interest lies here in the recognition of errors. The stored log data are erased automatically after 7 calendar days.
A user account is required when using the non-public areas of the website, such as e.g. the study applicant and student management areas. In order to create an account, the following personal data are required and mandatory: Title, surname, first name, email address and a self-selected password.
Without the complete provision of the above-mentioned data, a user account cannot be allocated and in turn the non-public areas of the website cannot be used. The processing occurs on the basis of Art. 6 Para. 1 e) EU-GDPR for the purpose of restricting access to non-public, protected parts of the IPU Berlin website to registered users. The account data are not transferred to any third parties. Erasure occurs following the submission of an explicit deletion request by the user or when the account has not been used for more than 2 years.
Note on deactivation (objection to the data collection): For this purpose, a cookie is installed on the end device that prevents the collection of user data when visiting this website. In order that the objection to the data collection is effective, the cookie has to be installed on every end device being used. As the cookies is installed in the respective browser (internet program), when several browsers are used on one end device (e.g. Internet Explorer, Chrome, Mozilla Firefox), the cookie has to be installed on each browser. Furthermore, it should be noted that when all cookies are deleted, the above objection (deactivation) cookie will also be deleted and has to be reinstalled anew afterwards.
When using the contact form, the name, first name, country/state (if detailed), telephone number (if detailed) and the email address are processed. The processing occurs on the basis of Art. 6 Para. 1 e) EU-GDPR for the purpose of responding to the question posed in the contact form. Any forwarding of the data to a third party does not occur. The transmission to the university occurs via an SSL-encrypted connection, through which unauthorised viewing of same is significantly hampered.
The processing occurs on the basis of Art. 6 Para. 1 b), c), e) EU-GDPR. The processing of data, which is regulated in the university’s statutes and regulations in terms of the scope and purpose, is required solely for the purpose of conducting education there and the data are collected on the basis of statutory authorisations. Any transferring of the data to third parties does not occur.
The transmission to the university occurs via an SSL-encrypted connection, through which unauthorised viewing of same is significantly hampered.

References: Art. 15
 Art. 16

Art. 17

Art. 18

Art. 20

Art. 21

Art. 22
 Art. 6
 Art. 6
 Art. 6
 Art. 6