This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller pursuant to Art. 13 and 14 General Data Protection Regulation (GDPR).

This privacy policy applies to the website of Steinbeis Hochschule.

Steinbeis‑Hochschule GmbH
Filderhauptstraße 142
70599 Stuttgart
Tel.: +49 30 47 39 14‑500
E‑Mail: info@steinbeis‑hochschule.de

We have appointed a data protection officer for our university. They can be contacted at the following email address: dsb-shb@steinbeis.de

How exactly is your data processed?
Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.

Purpose
Technically required data is processed to provide and display the website and to ensure its stability and security.

Categories of processed data
In particular, your IP address, browser type and browser version, operating system used, referrer URL, date and time of access and the pages accessed are processed.

Recipient
The data may be transmitted to employees of the web hosting provider, insofar as this is necessary for the provision and operation of the website.

Third-country data transfer
A transfer to third countries does not take place.

Storage period
The data is generally only stored for as long as this is necessary for the provision of the website and to ensure stability and security.

Legal basis 1 lit. b DSGVO.

Purpose
The contact form is used to process and answer your inquiries. The data you enter will be used to contact you and process your request.

Categories of processed data
When using the contact form, the following personal data in particular is processed: first name, last name, e-mail address, telephone number (if applicable), the content of your message and technical metadata, e.g. time of the request and IP address.

Recipient
The recipient of the data is Steinbeis Hochschule. The data will only be passed on to third parties if this is necessary to process your request or if there is a legal obligation to do so.

Third-country data transfer
A transfer to third countries does not take place.

Storage period
The data transmitted in the contact form will be deleted as soon as your request has been fully processed and there are no legal retention obligations to the contrary.

Legal basis 1 lit. b DSGVO.

Purpose
If you contact us by e-mail or telephone, we process the personal data you provide in order to process your request and communicate with you.

Categories of processed data
Depending on the content of the request, we process contact and communication data, e.g. name, e-mail address, telephone number, as well as the information contained in the request.

Recipient
The recipient of the data is Steinbeis Hochschule. The data will only be passed on to third parties if this is necessary for processing or if there is a legal obligation to do so.

Third-country data transfer
A transfer to third countries does not take place.

Storage period
The data will be deleted as soon as your request has been fully processed and there are no legal retention obligations to the contrary.

Legal basis
The processing is based on Art. 6 Para. 1 lit. b GDPR, depending on the nature of the request.

Purpose
We may provide individual content or pages of the website with password protection in order to restrict access to certain content.

Categories of processed data
As part of the password protection, we process the password you enter and technical usage data, e.g. IP address, time of access, browser or device information. Depending on the configuration, a cookie may be set to maintain the access status.

Recipient
The recipient of the data is Steinbeis Hochschule. If service providers are used for hosting or technical support, they may have access as data processors.

Third-country data transfer
A transfer to third countries does not take place.

Storage period
Technical log data is deleted in accordance with the server log file periods. An access cookie that may be set is stored for the duration of the session or in accordance with the cookie lifetime specified in the consent tool, depending on the configuration.

Legal basis
The processing is based on Art. 6 Para. 1 lit. f GDPR.

Purpose
The consent management tool Complianz is used to obtain, document, and manage your consent to data processing and the use of cookies and similar technologies in accordance with data protection regulations. The aim is to enable you to make an informed decision about the use of services on our website that require consent.

Purpose
We use Google Analytics to evaluate the use of our website and obtain information about user behavior. This serves to technically, content-wise, and structurally improve the website and to analyze the reach of our offers.

• technical usage data (e.g., IP address in abbreviated form, device and browser information),
• usage data (e.g., pages visited, dwell time, interactions),
• timestamps and approximate location data (region/country),
• pseudonymous identifiers (e.g., cookie or device IDs).

Processing is carried out using cookies or similar technologies.

• Cybot A/S, Denmark (Cookiebot) and
• Usercentrics GmbH, Germany, which acts as a data processor within the scope of consent management.

Purpose
We provide the website in various languages and store your selected language setting to facilitate the use of the website.

Purpose
Vimeo is used to provide and present videos on the website in an appealing way.

Categories of processed data
When playing a Vimeo video, the following data in particular can be processed:
IP address, information about the device and browser used, date and time of access and, if applicable, technical usage data (e.g. referrer URL).

Recipient
The recipient of the data is Vimeo, Inc., USA. Vimeo processes the data as an independent controller.

Third-country data transfer
The transfer of data to the USA cannot be excluded. The data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
The storage period depends on the requirements of Vimeo. We have no influence on the specific duration of the storage.

Legal basis
The processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Purpose
We maintain presences on various social media channels to inform about our offers and activities, provide insights into our work, and communicate with interested parties. Through the respective platforms, it is also possible to contact us, for example, via comments, posts, or direct messages.

Categories of processed data
When you use our social media channels, we process the personal data that you actively provide to us via the respective platform, e.g., your name or user name, profile information, message content, comments, or reactions.

Recipients
Within Steinbeis University, only authorized employees have access to content sent to us via social media channels.

Third-country data transfer
The transfer of data to third countries, in particular to the USA, cannot be excluded. The data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.

Storage period
We only store the data we process in the context of communication via social media channels for as long as is necessary to process your request.

Legal basis
Your personal data is processed on the basis of our legitimate interest in modern public relations and communication in accordance with Art. 6 (1) (f) GDPR. 1 lit. f DSGVO.
If you contact us specifically via social media channels, the processing of your data may also be necessary for the implementation of pre-contractual measures or to respond to your inquiry in accordance with Art. 6 para. 1 lit. b DSGVO.

• Right to information about the processing of your personal data (Art. 15 GDPR),
• Right to rectification of incorrect or incomplete data (Art. 16 GDPR),
• Right to erasure of your personal data, provided that the legal requirements are met (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability, where applicable (Art. 20 GDPR),
• Right to object to processing based on Art. 6 Para. 1 lit. f GDPR (Art. 21 GDPR),
• Right to withdraw consent with effect for the future (Art. 7 Para. 3 GDPR),
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).