Data Protection of the Studentenwerk Frankfurt am Main

1. General information

With this data protection declaration we would like to inform you about the nature, extent and purpose of collected and processed personal data and about the rights you are entitled to.
The protection of your personal data is of great importance to the Studentenwerk Frankfurt am Main. Therefore, the use of our websites is principally possible without providing personal data; merely general access data under item 4 below is collected. However, if you wish to use certain offers of these sites, a processing of personal data may be necessary. These offers can be found under item 9 in more detail. The processing of personal data always occurs in accordance with the General Data Protection Regulation and other data protection provisions applicable to the Studentenwerk Frankfurt am Main.
For the processing of your personal data, we have implemented numerous technical and organisational measures to ensure the greatest possible protection of your data. Nevertheless, Internet-based data submissions can have security gaps so that absolute protection cannot be guaranteed. Therefore, you are free to submit personal data on alternative ways, such as per telephone or per mail.

2. Name and address of the person responsible

For the processing of your personal data according to the General Data Protection Regulation, the following person in responsible:

Konrad Zündorf (Managing Director)
Studentenwerk Frankfurt am Main
Anstalt des öffentlichen Rechts
Bockenheimer Landstraße 133
60325 Frankfurt am Main

Tel.: 069 798-34901
gf(at)studentenwerkfrankfurt.de

3. Name and address of the data protection officer

You can always contact the data protection officer directly with any questions and suggestions regarding data protection. The data protection officer of the Studentenwerk Frankfurt am Main can be contacted as follows:

Studentenwerk Frankfurt am Main
Anstalt des öffentlichen Rechts
Klaus-Peter Schadt
Bockenheimer Landstraße 133
60325 Frankfurt am Main

Tel.: 069 798-34920
datenschutz(at)studentenwerkfrankfurt.de

4. Collecting general data and information

Our website collects the following general data and information each time. This general data and information is stored in the server’s log files. Collected information is
(1) used browser types and versions, (2) the operating system of the accessing system,
(3) the website from which the access to our website occurs, (4) the accessed subsections via our website, (5) the date and time of access, (6) an Internet Protocol address (IP address) and (7) the accessing system's Internet service provider.

When using this data and information, we cannot gather personal data from this information.

5. Processing purpose

The processing of personal data by the Studentenwerk Frankfurt am Main always occurs to perform a contract with the affected person or to fulfil possibly pre-contractual measures.

If the processing of personal data is necessary and there is no legal or contractual basis for this, processing only takes place with the consent of the person concerned.

A given consent can be cancelled at any time, whereupon the blocking or deletion of the stored data occurs.

6. Collection, process, use and deletion of personal data

Normally, the Studentenwerk Frankfurt am Main directly collects personal data from the person concerned. Personal data is solely processed for the purpose of contract implementation or for the purpose described in the consent, and stored for the period required to achieve this purpose. Any further storage only occurs if this is determined by laws or regulations (for example, legal retention obligation).

If the purpose of the processing is omitted or if the retention obligation prescribed by law expires, the personal data is anonymised or deleted.

We only pass on your data to third parties if this is necessary for implementing a contract with you or if we are legally bound to do so. By the way, we only transfer data if you have authorised us to do so.

7. Rights of the person concerned

The General Data Protection Regulation gives each affected person, inter alia, the right to disclosure, correction, blocking and deletion of their personal data. If you wish to use this right or if you have questions about this data protection declaration, you can always contact our data protection officer (see contact details under item 3) or another employee of the Studentenwerk Frankfurt am Main.

In addition, data subjects also have the option to directly contact the responsible data protection supervisory authority. For the Studentenwerk Frankfurt am Main, this is:

The Hessian Data Protection Officer
Gustav-Stresemann-Ring 1
65189 Wiesbaden

Tel.: 0611 1408-0
poststelle(at)datenschutz.hessen.de

8. Websites of other providers (external links)

Our website also contains links to other websites. However, this data protection declaration exclusively refers to the content of the websites www.studentenwerkfrankfurt.de, www.wohnraum-gesucht.de, www.studentenwerke-hessen.de  and not to linked pages and their contents (for example, job exchange, job offers).

9. Notifications on individual offers of the Studentenwerk Frankfurt am Main

a) General email traffic

The email traffic of the Studentenwerk Frankfurt am Main is not coded. If you communicate with us by email, please bear in mind that unauthorised third parties may have access to these. If you would like to avoid this risk, please use the contact forms of our websites, which are transmitted encoded, or contact us personally by phone or by mail.

If you send us an email, we use it solely to process your request. Email redirections only occur if necessary to handle your request.

We store and archive emails because we are required to do so due to legal retention obligations.

b) Contact forms

When using our contact forms, provided personal data (name and email address) is only used for the purpose stated in the contact form (approval, criticism, inquiries, request of information material, etc.) and then deleted. A further use of data does not occur.

c) Registration form for cooking courses

Data (name, address, contact details, student status, if applicable matriculation number) transmitted during the use of this registration form is exclusively used for the implementing and billing of the respective cooking course and is deleted at the end of the legal retention obligation.

d) Application platform for residential halls

For the rental contract management of the residential halls, an online application procedure is used for the individual spaces within the student residential halls. Only data required for the rental contract management is collected and is provided by you directly (first and last name, birth name if applicable, gender, birthday, marital status, spouse's name if applicable, home address, semester address, country, telephone number, email address , nationality, number of children if applicable, university, subject area and semester number).

Your personal data is used for the realisation of the tenancy and is deleted after expiration of the legal retention obligation. If no rental contract occurs, your personal data is deleted within three months after the cancelation of your application.

e) Private housing agency

In our portal for the private housing agency, www.wohnraum-gesucht.de, you can only provide data as a landlord, if you have agreed to the terms and conditions. You communicate this to us by setting a corresponding tick. We exclusively store this data for publication under "Wohnraum gesucht!". The data is published for a maximum of eight weeks and afterwards deleted.

f) Refund of the RMV-AStA semester ticket of the Goethe University

The Studentenwerk Frankfurt am Main runs the administration of the semester ticket hardship fund on behalf of the AStA of the Goethe University. Personal data and documents submitted in connection with the refund application are exclusively stored and processed by the Studentenwerk. The data is deleted after a retention period of three years, beginning with the end of the refund semester.

g) ISIC - International Student Identity Card

The Studentenwerk Frankfurt am Main is also the issuing office of the ISIC. The requested data in the ISIC application is directly collected and processed by the systems of rds-Reisedienst Deutscher Studentenschaften GmbH, Hamburg (licensed representative of the ISIC for the Federal Republic of Germany). Their data protection information can be found here: www.isic.de/de/hinweise/datenschutzerklaerung/

The application forms are archived for a period of two years, beginning with the expiration of the application year, at the Studentenwerk Frankfurt and subsequently destroyed.

h) Insurance

The Studentenwerk Frankfurt am Main has taken out group accident and liability insurance for its students. Student data is not initially processed here.
Only when claiming the insurance in the event of damage personal data is collected and forwarded to the commissioned insurance company.

Their contact data is sent to you in the event of damage. Data and documents for processing and settlement claims are deleted at the Studentenwerk at the end of the legal retention obligation.

i) Donation tool

On our website we offer you the opportunity to make donations online. With the help of the donation tool, the data entered by you is stored with us and encoded before transmitted to the Bank for Sozialwirtschaft AG, Cologne as well as to the bank’s service providers who provide the form. A transmission to other third parties does not occur. If a donation receipt is requested, we process the data in order to issue and send it. The collected data is required to complete the donation order and confirm it. At the time the form is submitted, the user's IP address is also saved in order to prevent misuse of the donation tool. The IP address is used for the purpose of fraud prevention and to prevent unauthorised transactions to harm third parties.

The data is deleted once the purpose of the collection has been achieved. For bank data, this is the case immediately after debit of the donation amount. Address data is stored when requesting and awaiting a donation receipt as well as all other data provided within fiscal retention requirements. The additional collected IP address is deleted not later than after a period of seven days.

j) Social media (Facebook, Twitter, Youtube)

In order to easily access social media platforms, you will find links to these which the Studentenwerk Frankfurt am Main uses on their website. However, there are no components (such as a "like" button) integrated into our websites that transmit data to the social network operators.

k) Use of Matomo

Data is collected and stored using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Matomo") based on our authorised interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 para. 1 lit. f DSGVO. From this data, pseudonymised user profiles can be created and evaluated for the same purpose. To this, cookies can be used. Cookies are small text files locally stored in the cache of the visitor's Internet browser. The cookies enable, inter alia, the recognition of the Internet browser. Data collected by Matomo Technology (including your pseudonymised IP address) is processed on our servers. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor of this website or merged with personal data about the bearer of the pseudonym. If you do not agree with the storage and evaluation of this data during your visit, then you can refute the storage and usage any time via following mouse click. In this case, a so-called opt-out cookie is stored in your browser, with the result that Matomo cannot collect any session data.

Please note that the complete deletion of your cookies also deletes the opt-out cookie, which requires you to reactivate this.

l) Use of own "cookies"

This website uses its own "cookies" to increase the user-friendliness ("cookies" are data records sent by the web server to the user's browser and stored there for later retrieval). In our personal "cookies" no personal data is stored. You can generally prevent the use of "cookies" if you deny the storage of "cookies" in your browser.

If you have any questions regarding data protection declaration, please contact our data protection officer (see contact details above under item 3).