Privacy Policy

Privacy at a Glance

Privacy Policy

Privacy at a Glance

Background

This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller pursuant to Art. 13 and 14 General Data Protection Regulation (GDPR).

Scope and responsibility

This privacy policy applies to the website of Steinbeis Hochschule.

The responsible body for data processing on this website is:

Steinbeis‑Hochschule GmbH
Filderhauptstraße 142
70599 Stuttgart
Tel.: +49 30 47 39 14‑500
E‑Mail: info@steinbeis‑hochschule.de

Data protection officer

We have appointed a data protection officer for our university. They can be reached at the e-mail address: dsb-shb@steinbeis.de

Processing of your data on our website

How exactly is your data processed?
Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.

Provision of the website

Purpose
Technically necessary data is processed for the provision and display of the website, as well as to ensure its stability and security.

Categories of data processed
This includes, in particular, your IP address, browser type and version, operating system used, referrer URL, date and time of access, and the pages visited.

Recipients
The data may be transmitted to employees of the web hosting provider insofar as this is necessary for the provision and operation of the website.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data is generally stored only as long as necessary for the provision of the website and to ensure its stability and security.

Legal basis 1 lit. b DSGVO.

Contact Form

Purpose
The contact form is used to process and respond to your inquiries. The data you enter will be used to contact you and process your request.

Categories of data processed
When using the contact form, the following personal data are processed in particular: first name, last name, email address, possibly telephone number, content of your message, and technical metadata, e.g., time of inquiry and IP address.

Recipients
The recipient of the data is Steinbeis Hochschule. Data will only be passed on to third parties if this is necessary for processing your request or if there is a legal obligation.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data transmitted in the contact form will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.

Legal basis
Processing is carried out on the basis of Art. 6 para.
1 lit. b DSGVO.

Contacting us by e-mail or telephone

Purpose
If you contact us by email or telephone, we process the personal data you provide to process your request and communicate with you.

Categories of data processed
Depending on the content of the inquiry, we process contact and communication data, e.g., name, email address, telephone number, as well as the information contained in the inquiry.

Recipients
The recipient of the data is Steinbeis Hochschule. Data will only be passed on to third parties if this is necessary for processing or if there is a legal obligation.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.

Legal basis
Depending on the type of inquiry, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Password-protected areas

Purpose
We may provide individual content or pages of the website with password protection to restrict access to certain content.

Categories of data processed
As part of password protection, we process the password you enter, as well as technical usage data, e.g., IP address, time of access, browser or device information. Depending on the configuration, a cookie may be set to maintain access status.

Recipients
The recipient of the data is Steinbeis Hochschule. If service providers are used for hosting or technical support, they may gain access as processors.

Third-country data transfer
No third-country data transfer takes place.

Storage period
Technical log data is deleted according to the server log file retention periods. Any access cookie set will be stored for the duration of the session or according to the cookie lifetime specified in the consent tool, depending on the configuration.

Legal basis
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.

TOOLS & PLUGINS

Consent Management: Complianz

Purpose
The consent management tool Complianz is used to obtain, document, and manage your consent for data processing and the use of cookies and similar technologies in a manner compliant with data protection regulations. The objective is to enable you to make an informed decision regarding the use of services requiring consent on our website.

Categories of processed data
Within the framework of consent management, the following personal data in particular are processed:
Information regarding your consent behavior, IP address, date and time of consent, consent ID, as well as technical information about the browser and device used.
Recipient
The recipient of the data is
Complianz B.V.
Kalmarweg 14-5
9723JG Groningen
Netherlands
which acts as a data processor within the framework of consent management.
Third-country data transfer
A transfer of data to third countries cannot be ruled out. If a data transfer occurs, it is carried out on the basis of appropriate safeguards in accordance with Art. 46 GDPR, in particular through the use of standard contractual clauses of the European Commission.
Storage period
The consent data is stored for as long as it is necessary to prove that consent has been given. As a rule, deletion takes place after revocation of consent or after expiry of the intended storage period of the cookies.
Legal basis
The use of technically unnecessary cookies and comparable technologies is based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Technically necessary cookies are used on the basis of Art. 6 Para. 1 lit. f GDPR.

Web analysis with Google Analytics

Purpose
We use Google Analytics to evaluate the use of our website and obtain information about user behavior. This serves to technically, content-wise, and structurally improve the website and to analyze the reach of our offers.

Categories of processed data
When using Google Analytics, the following personal data may be processed in particular:
  • technical usage data (e.g., IP address in abbreviated form, device and browser information),
  • usage data (e.g., pages visited, dwell time, interactions),
  • timestamps and approximate location data (region/country),
  • pseudonymous identifiers (e.g., cookie or device IDs).

Processing is carried out using cookies or similar technologies.

Recipient
The data is received by
  • Cybot A/S, Denmark (Cookiebot) and
  • Usercentrics GmbH, Germany, which acts as a data processor within the scope of consent management.
Third-country data transfer
The transfer of data to third countries cannot be excluded. The data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.
Storage period
The consent data is stored for as long as it is necessary to prove that consent has been given. As a rule, deletion takes place after revocation of consent or after expiry of the intended storage period of the cookies.
Legal basis
The use of technically unnecessary cookies and comparable technologies is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a DSGVO. Technically necessary cookies are based on Art. 6 para. 1 lit. f DSGVO eingesetzt.

Multilingualism

Purpose
We provide the website in different languages and store your chosen language setting to facilitate the use of the website.

Categories of processed data
When using the multilingual function, technical usage data can be processed, e.g. IP address, browser or device information, date and time of access, as well as information on the selected language setting, e.g. via cookies or comparable technologies.
Recipient
The recipient of the data is Steinbeis Hochschule. If service providers are used for hosting or technical support, they may have access as data processors.
Third-country data transfer
A transfer to third countries does not take place.
Storage period
Information on the language setting is stored for the duration of the session or, if stored in cookies, according to the cookie lifetime specified in the consent tool. Log data is deleted after the periods provided for server log files.
Legal basis
The processing is based on Art. 6 Para. 1 lit. f GDPR.

SOCIAL & MEDIA

Vimeo

Purpose
Vimeo is used to provide and display videos attractively on the website.

Categories of data processed
When playing a Vimeo video, the following data may be processed in particular:
IP address, information about the device and browser used, date and time of access, and possibly technical usage data (e.g., referrer URL).

Recipients
The recipient of the data is Vimeo, Inc., USA. Vimeo processes the data as an independent controller.

Third-country data transfer
A transfer of data to the USA cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
The storage period is determined by Vimeo’s specifications. We have no influence on the specific duration of storage.

Legal basis
Processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Social media channels

Purpose
We maintain presences on various social media channels to inform about our offers and activities, provide insights into our work, and communicate with interested parties. Through the respective platforms, it is also possible to contact us, for example, via comments, posts, or direct messages.

Categories of data processed
When using our social media channels, we process the personal data that you actively provide to us via the respective platform, e.g., your name or username, profile information, message content, comments, or reactions.

Recipients
Within Steinbeis Hochschule, only authorized employees have access to content addressed to us via social media channels.

Third-country data transfer
A transfer of data to third countries, particularly to the USA, cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
We store the data processed by us in the context of communication via social media channels only as long as this is necessary to process your request.

Legal basis 1 lit. f DSGVO.
If you contact us specifically via social media channels, the processing of your data may also be necessary for the implementation of pre-contractual measures or to respond to your inquiry in accordance with Art. 6 (1) (b) GDPR. 1 lit. b DSGVO.

Data processing by the platform operators
When using our social media channels, the respective platform operators process personal data under their own responsibility. This includes, in particular, technical data (e.g., IP address, device information), usage and interaction data, and – if you have a user account and are logged in – further profile data. Processing may also take place for the platform operators’ own purposes, such as providing services, analyzing user behavior, or delivering personalized content and advertising. We have no influence on the nature and extent of this data processing. Further information can be found in the privacy policies of the respective platform operators.

Rights of data subjects

According to the General Data Protection Regulation (GDPR), you have the following rights:
  • Right to information about the processing of your personal data (Art. 15 GDPR),
  • Right to rectification of incorrect or incomplete data (Art. 16 GDPR),
  • Right to erasure of your personal data, provided that the legal requirements are met (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability, where applicable (Art. 20 GDPR),
  • Right to object to processing based on Art. 6 Para. 1 lit. f GDPR (Art. 21 GDPR),
  • Right to withdraw consent with effect for the future (Art. 7 Para. 3 GDPR),
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Current status: January 2026

Background

This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller pursuant to Art. 13 and 14 General Data Protection Regulation (GDPR).

Scope and responsibility

This privacy policy applies to the website of Steinbeis Hochschule.

The responsible body for data processing on this website is:

Steinbeis‑Hochschule GmbH
Filderhauptstraße 142
70599 Stuttgart
Tel.: +49 30 47 39 14‑500
E‑Mail: info@steinbeis‑hochschule.de

Data protection officer

We have appointed a data protection officer for our university. They can be reached at the e-mail address: dsb-shb@steinbeis.de

Processing of your data on our website

How exactly is your data processed?
Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.

Provision of the website

Purpose
Technically necessary data is processed for the provision and display of the website, as well as to ensure its stability and security.

Categories of data processed
This includes, in particular, your IP address, browser type and version, operating system used, referrer URL, date and time of access, and the pages visited.

Recipients
The data may be transmitted to employees of the web hosting provider insofar as this is necessary for the provision and operation of the website.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data is generally stored only as long as necessary for the provision of the website and to ensure its stability and security.

Legal basis 1 lit. b DSGVO.

Contact Form

Purpose
The contact form is used to process and respond to your inquiries. The data you enter will be used to contact you and process your request.

Categories of data processed
When using the contact form, the following personal data are processed in particular: first name, last name, email address, possibly telephone number, content of your message, and technical metadata, e.g., time of inquiry and IP address.

Recipients
The recipient of the data is Steinbeis Hochschule. Data will only be passed on to third parties if this is necessary for processing your request or if there is a legal obligation.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data transmitted in the contact form will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.

Legal basis
Processing is carried out on the basis of Art. 6 para.
1 lit. b DSGVO.

Contacting us by e-mail or telephone

Purpose
If you contact us by email or telephone, we process the personal data you provide to process your request and communicate with you.

Categories of data processed
Depending on the content of the inquiry, we process contact and communication data, e.g., name, email address, telephone number, as well as the information contained in the inquiry.

Recipients
The recipient of the data is Steinbeis Hochschule. Data will only be passed on to third parties if this is necessary for processing or if there is a legal obligation.

Third-country data transfer
No third-country data transfer takes place.

Storage period
The data will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.

Legal basis
Depending on the type of inquiry, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Password-protected areas

Purpose
We may provide individual content or pages of the website with password protection to restrict access to certain content.

Categories of data processed
As part of password protection, we process the password you enter, as well as technical usage data, e.g., IP address, time of access, browser or device information. Depending on the configuration, a cookie may be set to maintain access status.

Recipients
The recipient of the data is Steinbeis Hochschule. If service providers are used for hosting or technical support, they may gain access as processors.

Third-country data transfer
No third-country data transfer takes place.

Storage period
Technical log data is deleted according to the server log file retention periods. Any access cookie set will be stored for the duration of the session or according to the cookie lifetime specified in the consent tool, depending on the configuration.

Legal basis
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.

TOOLS & PLUGINS

Consent Management: Complianz

Purpose
The consent management tool Complianz is used to obtain, document, and manage your consent for data processing and the use of cookies and similar technologies in a manner compliant with data protection regulations. The objective is to enable you to make an informed decision regarding the use of services requiring consent on our website.

Categories of processed data
Within the framework of consent management, the following personal data in particular are processed:
Information regarding your consent behavior, IP address, date and time of consent, consent ID, as well as technical information about the browser and device used.
Recipient
The recipient of the data is
Complianz B.V.
Kalmarweg 14-5
9723JG Groningen
Netherlands
which acts as a data processor within the framework of consent management.
Third-country data transfer
A transfer of data to third countries cannot be ruled out. If a data transfer occurs, it is carried out on the basis of appropriate safeguards in accordance with Art. 46 GDPR, in particular through the use of standard contractual clauses of the European Commission.
Storage period
The consent data is stored for as long as it is necessary to prove that consent has been given. As a rule, deletion takes place after revocation of consent or after expiry of the intended storage period of the cookies.
Legal basis
The use of technically unnecessary cookies and comparable technologies is based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Technically necessary cookies are used on the basis of Art. 6 Para. 1 lit. f GDPR.

Web analysis with Google Analytics

Purpose
We use Google Analytics to evaluate the use of our website and obtain information about user behavior. This serves to technically, content-wise, and structurally improve the website and to analyze the reach of our offers.

Categories of processed data
When using Google Analytics, the following personal data may be processed in particular:
  • technical usage data (e.g., IP address in abbreviated form, device and browser information),
  • usage data (e.g., pages visited, dwell time, interactions),
  • timestamps and approximate location data (region/country),
  • pseudonymous identifiers (e.g., cookie or device IDs).

Processing is carried out using cookies or similar technologies.

Recipient
The data is received by
  • Cybot A/S, Denmark (Cookiebot) and
  • Usercentrics GmbH, Germany, which acts as a data processor within the scope of consent management.
Third-country data transfer
The transfer of data to third countries cannot be excluded. The data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.
Storage period
The consent data is stored for as long as it is necessary to prove that consent has been given. As a rule, deletion takes place after revocation of consent or after expiry of the intended storage period of the cookies.
Legal basis
The use of technically unnecessary cookies and comparable technologies is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a DSGVO. Technically necessary cookies are based on Art. 6 para. 1 lit. f DSGVO eingesetzt.

Multilingualism

Purpose
We provide the website in different languages and store your chosen language setting to facilitate the use of the website.

Categories of processed data
When using the multilingual function, technical usage data can be processed, e.g. IP address, browser or device information, date and time of access, as well as information on the selected language setting, e.g. via cookies or comparable technologies.
Recipient
The recipient of the data is Steinbeis Hochschule. If service providers are used for hosting or technical support, they may have access as data processors.
Third-country data transfer
A transfer to third countries does not take place.
Storage period
Information on the language setting is stored for the duration of the session or, if stored in cookies, according to the cookie lifetime specified in the consent tool. Log data is deleted after the periods provided for server log files.
Legal basis
The processing is based on Art. 6 Para. 1 lit. f GDPR.

SOCIAL & MEDIA

Vimeo

Purpose
Vimeo is used to provide and display videos attractively on the website.

Categories of data processed
When playing a Vimeo video, the following data may be processed in particular:
IP address, information about the device and browser used, date and time of access, and possibly technical usage data (e.g., referrer URL).

Recipients
The recipient of the data is Vimeo, Inc., USA. Vimeo processes the data as an independent controller.

Third-country data transfer
A transfer of data to the USA cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
The storage period is determined by Vimeo’s specifications. We have no influence on the specific duration of storage.

Legal basis
Processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Social media channels

Purpose
We maintain presences on various social media channels to inform about our offers and activities, provide insights into our work, and communicate with interested parties. Through the respective platforms, it is also possible to contact us, for example, via comments, posts, or direct messages.

Categories of data processed
When using our social media channels, we process the personal data that you actively provide to us via the respective platform, e.g., your name or username, profile information, message content, comments, or reactions.

Recipients
Within Steinbeis Hochschule, only authorized employees have access to content addressed to us via social media channels.

Third-country data transfer
A transfer of data to third countries, particularly to the USA, cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
We store the data processed by us in the context of communication via social media channels only as long as this is necessary to process your request.

Legal basis 1 lit. f DSGVO.
If you contact us specifically via social media channels, the processing of your data may also be necessary for the implementation of pre-contractual measures or to respond to your inquiry in accordance with Art. 6 (1) (b) GDPR. 1 lit. b DSGVO.

Data processing by the platform operators
When using our social media channels, the respective platform operators process personal data under their own responsibility. This includes, in particular, technical data (e.g., IP address, device information), usage and interaction data, and – if you have a user account and are logged in – further profile data. Processing may also take place for the platform operators’ own purposes, such as providing services, analyzing user behavior, or delivering personalized content and advertising. We have no influence on the nature and extent of this data processing. Further information can be found in the privacy policies of the respective platform operators.

Rights of data subjects

According to the General Data Protection Regulation (GDPR), you have the following rights:
  • Right to information about the processing of your personal data (Art. 15 GDPR),
  • Right to rectification of incorrect or incomplete data (Art. 16 GDPR),
  • Right to erasure of your personal data, provided that the legal requirements are met (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability, where applicable (Art. 20 GDPR),
  • Right to object to processing based on Art. 6 Para. 1 lit. f GDPR (Art. 21 GDPR),
  • Right to withdraw consent with effect for the future (Art. 7 Para. 3 GDPR),
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Current status: January 2026