Background
This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data protection controllers pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR).
Scope and responsibility
This privacy policy applies to the online offering of Steinbeis University of Applied Sciences.
The controller responsible for data processing on this website is:
Steinbeis‑Hochschule GmbH
Filderhauptstraße 142
70599 Stuttgart
Tel.: +49 30 47 39 14‑500
E‑Mail: info@steinbeis‑hochschule.de
Data Protection Officer
We have appointed a Data Protection Officer for our university. You can reach them at the following email address: dsb-shb@steinbeis.de
Processing of your data on our website
How is your data processed in detail?
Below, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. No automated decision-making in individual cases, including profiling, takes place.
Provision of the website
Purpose
Technically necessary data is processed for the provision and display of the website, as well as to ensure its stability and security.
Categories of data processed
This includes, in particular, your IP address, browser type and version, operating system used, referrer URL, date and time of access, and the pages visited.
Recipients
The data may be transmitted to employees of the web hosting provider insofar as this is necessary for the provision and operation of the website.
Third-country data transfer
No third-country data transfer takes place.
Storage period
The data is generally stored only as long as necessary for the provision of the website and to ensure its stability and security.
Legal basis
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Contact form
Purpose
The contact form is used to process and respond to your inquiries. The data you enter will be used to contact you and process your request.
Categories of data processed
When using the contact form, the following personal data are processed in particular: first name, last name, email address, possibly telephone number, content of your message, and technical metadata, e.g., time of inquiry and IP address.
Empfänger
Empfänger der Daten ist die Steinbeis Hochschule. Eine Weitergabe an Dritte erfolgt nur, sofern dies zur Bearbeitung Ihrer Anfrage erforderlich ist oder eine gesetzliche Verpflichtung besteht.
Third-country data transfer
No third-country data transfer takes place.
Storage period
The data transmitted in the contact form will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.
Legal basis
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Contact by email or telephone
Purpose
If you contact us by email or telephone, we process the personal data you provide to process your request and communicate with you.
Categories of data processed
Depending on the content of the inquiry, we process contact and communication data, e.g., name, email address, telephone number, as well as the information contained in the inquiry.
Recipients
The recipient of the data is Steinbeis University of Applied Sciences. Data is only passed on to third parties if this is necessary for processing or if there is a legal obligation to do so.
Third-country data transfer
No third-country data transfer takes place.
Storage period
The data will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.
Legal basis
Depending on the type of inquiry, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Password-protected areas
Purpose
We may provide individual content or pages of the website with password protection to restrict access to certain content.
Categories of data processed
As part of password protection, we process the password you enter, as well as technical usage data, e.g., IP address, time of access, browser or device information. Depending on the configuration, a cookie may be set to maintain access status.
Recipients
The recipient of the data is Steinbeis University of Applied Sciences. If service providers are used for hosting or technical support, they may have access as processors.
Third-country data transfer
No third-country data transfer takes place.
Storage period
Technical log data is deleted according to the server log file retention periods. Any access cookie set will be stored for the duration of the session or according to the cookie lifetime specified in the consent tool, depending on the configuration.
Legal basis 1 lit. f DSGVO.
TOOLS & PLUGINS
Consent Management: Complianz
Purpose
The consent management tool Complianz is used to obtain, document, and manage your consent for data processing and the use of cookies and similar technologies in a manner compliant with data protection regulations. The objective is to enable you to make an informed decision regarding the use of services requiring consent on our website.
Information regarding your consent behavior, IP address, date and time of consent, consent ID, as well as technical information about the browser and device used.
Recipients
Complianz B.V.
Kalmarweg 14-5
9723JG Groningen
Netherlands
which acts as a data processor within the framework of consent management.
Third-country data transfer
Storage period
Legal basis
Web analytics with Google Analytics
Purpose
We use Google Analytics to evaluate the use of our website and obtain information about user behavior. This serves to technically, content-wise, and structurally improve the website and to analyze the reach of our offers.
- technical usage data (e.g. IP address in truncated form, device and browser information),
- usage data (e.g. pages visited, time spent on site, interactions),
- timestamps and approximate location data (region/country),
- pseudonymous identifiers (e.g. cookie or device IDs).
Processing is carried out using cookies or comparable technologies.
- Cybot A/S, Denmark (Cookiebot), and
- Usercentrics GmbH, Germany, which act as processors within the scope of consent management.
Storage period
Legal basis
Multilingualism
Purpose
We provide the website in different languages and store your chosen language setting to facilitate the use of the website.
Recipients
Third-country data transfer
Storage period
Legal basis
SOCIAL & MEDIA
Vimeo
Purpose
Vimeo is used to provide and display videos attractively on the website.
Categories of data processed
When playing a Vimeo video, the following data may be processed in particular:
IP address, information about the device and browser used, date and time of access, and possibly technical usage data (e.g., referrer URL).
Recipients
The recipient of the data is Vimeo, Inc., USA. Vimeo processes the data as an independent controller.
Third-country data transfer
A transfer of data to the USA cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.
Storage period
The storage period is determined by Vimeo’s specifications. We have no influence on the specific duration of storage.
Legal basis
Processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Social media channels
Purpose
We maintain presences on various social media channels to inform about our offers and activities, provide insights into our work, and communicate with interested parties. Through the respective platforms, it is also possible to contact us, for example, via comments, posts, or direct messages.
Categories of data processed
When using our social media channels, we process the personal data that you actively provide to us via the respective platform, e.g., your name or username, profile information, message content, comments, or reactions.
Recipients
Within Steinbeis University of Applied Sciences, only authorized employees have access to the content addressed to us via social media channels.
Third-country data transfer
A transfer of data to third countries, particularly to the USA, cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR.
Storage period
We store the data processed by us in the context of communication via social media channels only as long as this is necessary to process your request.
Legal basis
The processing of your personal data is based on our legitimate interest in contemporary public relations and communication in accordance with Art. 6 para. 1 lit. f GDPR.
If you specifically contact us via social media channels, the processing of your data may also be necessary for the implementation of pre-contractual measures or to answer your inquiry in accordance with Art. 6 para. 1 lit. b GDPR.
When using our social media channels, the respective platform operators process personal data under their own responsibility. This includes, in particular, technical data (e.g., IP address, device information), usage and interaction data, and – if you have a user account and are logged in – further profile data. Processing may also take place for the platform operators’ own purposes, such as providing services, analyzing user behavior, or delivering personalized content and advertising. We have no influence on the nature and extent of this data processing. Further information can be found in the privacy policies of the respective platform operators.
APPLICATIONS
Purpose
If you apply with us, we process your personal data to conduct the application process and to decide on establishing an employment or service relationship.
Categories of processed data
As part of the application process, we process in particular the application documents you submit and the personal data contained therein, e.g., name, contact details, cover letter, CV, certificates, proof of qualifications, references, information on education, studies, professional career, teaching and research portfolio, publication list, and other information you provide.
Recipients
Recipients of the data are the departments and persons within Steinbeis University of Applied Sciences involved in the application process, in particular the responsible administrative offices, departments, and persons and committees involved in the selection or appointment process. Data is only passed on to third parties if this is necessary to conduct the application process or if there is a legal obligation to do so.
Third-country data transfer
No third-country data transfer takes place.
Storage period
Your application data will be deleted as soon as it is no longer required for the application process and no legal retention obligations or other legitimate reasons for longer storage exist. Application documents of unsuccessful candidates are generally deleted no later than six months after completion of the application process.
Legal basis
Processing is based on Art. 6(1)(b) GDPR and Section 26(1) BDSG. Insofar as special categories of personal data are processed, this is based on Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG.
Campus Web / AcademyFIVE
Personal data is processed to provide a secure online platform for students. Via Campus Web, study-related information such as study plans, performance overviews, grades, documents, exam registrations, and internal messages can be provided and accessed.
Categories of processed data
In particular, master data, contact data, account and access data, study progress data, examination and performance data, documents, communication data, and technical log and usage data are processed.
Recipients
Authorized persons within Steinbeis-Hochschule GmbH have access to the data insofar as this is necessary for the respective task fulfillment. This may include in particular administrative staff, institute staff, teaching staff, and—where applicable—external persons, such as company supervisors in the context of student projects. The technical service provider for academyFIVE is Simovative GmbH, which acts on the basis of a data processing agreement in accordance with Art. 28 GDPR.
Third country data transfer
According to the current status, no third country transfer takes place.
Storage period
The data is stored as long as this is necessary for the implementation and organization of studies and to fulfill legal or statutory retention and archiving obligations. The archiving statute of Steinbeis University is particularly relevant.
Legal basis 1 lit. b GDPR, insofar as it is necessary for the implementation of the study relationship. Insofar as legal or statutory obligations exist, processing is based on Art. 6(1)(c) GDPR. For the secure and functional operation of the platform, processing is based on Art. 6(1)(f) GDPR.
Rights of data subjects
- Right of access to information about the processing of your personal data (Art. 15 GDPR),
- Right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
- Right to erasure of your personal data, provided the legal requirements are met (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability, where applicable (Art. 20 GDPR),
- Right to object to processing based on Art. 6(1) lit. f GDPR (Art. 21 GDPR),
- Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR),
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Last updated: July 2026