{"id":3932,"date":"2024-12-02T10:27:28","date_gmt":"2024-12-02T09:27:28","guid":{"rendered":"https:\/\/dev.steinbeis-hochschule.de\/privacy-policy\/"},"modified":"2026-07-07T11:40:28","modified_gmt":"2026-07-07T09:40:28","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.steinbeis-hochschule.de\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Background<\/h2><\/div>

This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data protection controllers pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR).<\/p>\n<\/div>

Scope and responsibility<\/h2><\/div>

This privacy policy applies to the online offering of Steinbeis University of Applied Sciences.<\/p>\n<\/div>

The controller responsible for data processing on this website is:<\/h2><\/div>

Steinbeis\u2011Hochschule GmbH
\nFilderhauptstra\u00dfe\u202f142
\n70599 Stuttgart
\nTel.: +49\u202f30\u202f47\u202f39\u202f14\u2011500
\nE\u2011Mail: info@steinbeis\u2011hochschule.de<\/a><\/p>\n<\/div>

Data Protection Officer<\/h2><\/div>

We have appointed a Data Protection Officer for our university. You can reach them at the following email address: dsb-shb@steinbeis.de<\/a><\/p>\n<\/div>

Processing of your data on our website<\/h2><\/div>

How is your data processed in detail?<\/strong>
\nBelow, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. No automated decision-making in individual cases, including profiling, takes place.<\/p>\n<\/div>

Provision of the website<\/h2><\/div>

Purpose<\/strong>
\nTechnically necessary data is processed for the provision and display of the website, as well as to ensure its stability and security.<\/p>\n

Categories of data processed<\/strong>
\nThis includes, in particular, your IP address, browser type and version, operating system used, referrer URL, date and time of access, and the pages visited.<\/p>\n

Recipients<\/strong>
\nThe data may be transmitted to employees of the web hosting provider insofar as this is necessary for the provision and operation of the website.<\/p>\n

Third-country data transfer<\/strong>
\nNo third-country data transfer takes place.<\/p>\n

Storage period<\/strong>
\nThe data is generally stored only as long as necessary for the provision of the website and to ensure its stability and security.<\/p>\n

Legal basis<\/strong>
\nProcessing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.<\/p>\n<\/div>

Contact form<\/h2><\/div>

Purpose<\/strong>
\nThe contact form is used to process and respond to your inquiries. The data you enter will be used to contact you and process your request. <\/p>\n

Categories of data processed<\/strong>
\nWhen using the contact form, the following personal data are processed in particular: first name, last name, email address, possibly telephone number, content of your message, and technical metadata, e.g., time of inquiry and IP address.<\/p>\n

Empf\u00e4nger<\/strong>
\nEmpf\u00e4nger der Daten ist die Steinbeis Hochschule. Eine Weitergabe an Dritte erfolgt nur, sofern dies zur Bearbeitung Ihrer Anfrage erforderlich ist oder eine gesetzliche Verpflichtung besteht. <\/p>\n

Third-country data transfer<\/strong>
\nNo third-country data transfer takes place.<\/p>\n

Storage period<\/strong>
\nThe data transmitted in the contact form will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.<\/p>\n

Legal basis<\/strong>
\nProcessing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.<\/p>\n<\/div>

Contact by email or telephone<\/h2><\/div>

Purpose<\/strong>
\nIf you contact us by email or telephone, we process the personal data you provide to process your request and communicate with you.<\/p>\n

Categories of data processed<\/strong>
\nDepending on the content of the inquiry, we process contact and communication data, e.g., name, email address, telephone number, as well as the information contained in the inquiry.<\/p>\n

Recipients<\/strong>
\nThe recipient of the data is Steinbeis University of Applied Sciences. Data is only passed on to third parties if this is necessary for processing or if there is a legal obligation to do so. <\/p>\n

Third-country data transfer<\/strong>
\nNo third-country data transfer takes place.<\/p>\n

Storage period<\/strong>
\nThe data will be deleted as soon as your request has been fully processed and no legal retention obligations prevent deletion.<\/p>\n

Legal basis<\/strong>
\nDepending on the type of inquiry, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.<\/p>\n<\/div>

Password-protected areas<\/h2><\/div>

Purpose<\/strong>
\nWe may provide individual content or pages of the website with password protection to restrict access to certain content.<\/p>\n

Categories of data processed<\/strong>
\nAs part of password protection, we process the password you enter, as well as technical usage data, e.g., IP address, time of access, browser or device information. Depending on the configuration, a cookie may be set to maintain access status. <\/p>\n

Recipients<\/strong>
\nThe recipient of the data is Steinbeis University of Applied Sciences. If service providers are used for hosting or technical support, they may have access as processors. <\/p>\n

Third-country data transfer<\/strong>
\nNo third-country data transfer takes place.<\/p>\n

Storage period<\/strong>
\nTechnical log data is deleted according to the server log file retention periods. Any access cookie set will be stored for the duration of the session or according to the cookie lifetime specified in the consent tool, depending on the configuration. <\/p>\n

Legal basis<\/strong> 1 lit. f DSGVO.<\/p>\n<\/div>

TOOLS & PLUGINS<\/h3><\/div>

Consent Management: Complianz<\/h2><\/div>

Purpose<\/strong>
\nThe consent management tool Complianz is used to obtain, document, and manage your consent for data processing and the use of cookies and similar technologies in a manner compliant with data protection regulations. The objective is to enable you to make an informed decision regarding the use of services requiring consent on our website. <\/p>\n

Categories of data processed<\/strong><\/div>\n
Within the framework of consent management, the following personal data in particular are processed:
\nInformation regarding your consent behavior, IP address, date and time of consent, consent ID, as well as technical information about the browser and device used.<\/div>\n
<\/div>\n

\nRecipients<\/strong><\/div>\n
The recipient of the data is
\nComplianz B.V.
\nKalmarweg 14-5
\n9723JG Groningen
\nNetherlands
\nwhich acts as a data processor within the framework of consent management.<\/div>\n
<\/div>\n

\nThird-country data transfer<\/strong><\/div>\n
A transfer of data to third countries cannot be ruled out. If data is transferred, this is done on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular through the use of the European Commission\u2019s standard contractual clauses. <\/div>\n
<\/div>\n

\nStorage period<\/strong><\/div>\n
Consent data is stored for as long as is necessary to provide evidence of the consent given. As a rule, it is deleted after consent is withdrawn or after the intended storage period of the cookies has expired. <\/div>\n
<\/div>\n

\nLegal basis<\/strong><\/div>\n
The use of technically non-essential cookies and comparable technologies is carried out exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR. Technically necessary cookies are used on the basis of Art. 6(1) lit. f GDPR. <\/div>\n<\/div>

Web analytics with Google Analytics<\/h2><\/div>

Purpose<\/strong>
\nWe use Google Analytics to evaluate the use of our website and obtain information about user behavior. This serves to technically, content-wise, and structurally improve the website and to analyze the reach of our offers. <\/p>\n

Categories of data processed<\/strong><\/div>\n
When using Google Analytics, the following personal data may be processed in particular:<\/div>\n
    \n
  • technical usage data (e.g. IP address in truncated form, device and browser information),<\/li>\n
  • usage data (e.g. pages visited, time spent on site, interactions),<\/li>\n
  • timestamps and approximate location data (region\/country),<\/li>\n
  • pseudonymous identifiers (e.g. cookie or device IDs).<\/li>\n<\/ul>\n

    Processing is carried out using cookies or comparable technologies.<\/p>\n

    Recipients<\/strong><\/div>\n
    The recipients of the data are<\/div>\n
      \n
    • Cybot A\/S, Denmark (Cookiebot), and<\/li>\n
    • Usercentrics GmbH, Germany, which act as processors within the scope of consent management.<\/li>\n<\/ul>\n
      Third-country data transfer<\/strong><\/div>\n
      A transfer of data to third countries cannot be ruled out. Data is transferred on the basis of the European Commission\u2019s standard contractual clauses pursuant to Art. 46 GDPR. <\/div>\n
      <\/div>\n

      \nStorage period<\/strong><\/div>\n
      Consent data is stored for as long as is necessary to provide evidence of the consent given. As a rule, it is deleted after consent is withdrawn or after the intended storage period of the cookies has expired. <\/div>\n
      <\/div>\n

      \nLegal basis<\/strong><\/div>\n
      The use of technically non-essential cookies and comparable technologies is carried out exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR. Technically necessary cookies are used on the basis of Art. 6(1) lit. f GDPR. <\/div>\n<\/div>

      Multilingualism<\/h2><\/div>

      Purpose<\/strong>
      \nWe provide the website in different languages and store your chosen language setting to facilitate the use of the website.<\/span><\/p>\n

      Categories of data processed<\/strong><\/div>\n
      When using the multilingual function, technical usage data may be processed, e.g. IP address, browser or device information, date and time of access, as well as information about the selected language setting, e.g. via cookies or comparable technologies.<\/div>\n
      <\/div>\n

      \nRecipients<\/strong><\/div>\n
      The recipient of the data is Steinbeis University of Applied Sciences. If service providers are used for hosting or technical support, they may have access as processors. <\/div>\n
      <\/div>\n

      \nThird-country data transfer<\/strong><\/div>\n
      No third-country transfer takes place.<\/div>\n
      <\/div>\n

      \nStorage period<\/strong><\/div>\n
      Information about the language setting is stored for the duration of the session or, if stored in cookies, in accordance with the cookie lifetime specified in the consent tool. Log data is deleted after the retention periods specified for server log files. <\/div>\n
      <\/div>\n

      \nLegal basis<\/strong><\/div>\n
      Processing is carried out on the basis of Art. 6(1) lit. f GDPR. <\/div>\n<\/div>

      SOCIAL & MEDIA<\/h3><\/div>

      Vimeo<\/h2><\/div>

      Purpose<\/strong>
      \nVimeo is used to provide and display videos attractively on the website.<\/span><\/p>\n

      Categories of data processed<\/strong>
      \nWhen playing a Vimeo video, the following data may be processed in particular:
      \nIP address, information about the device and browser used, date and time of access, and possibly technical usage data (e.g., referrer URL).<\/span><\/p>\n

      Recipients<\/strong>
      \nThe recipient of the data is Vimeo, Inc., USA. Vimeo processes the data as an independent controller.<\/span><\/p>\n

      Third-country data transfer<\/strong>
      \nA transfer of data to the USA cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR. <\/span><\/p>\n

      Storage period<\/strong>
      \nThe storage period is determined by Vimeo’s specifications. We have no influence on the specific duration of storage. <\/span><\/p>\n

      Legal basis<\/strong>
      \nProcessing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. <\/span><\/p>\n<\/div>

      Social media channels<\/h2><\/div>

      Purpose<\/strong>
      \nWe maintain presences on various social media channels to inform about our offers and activities, provide insights into our work, and communicate with interested parties. Through the respective platforms, it is also possible to contact us, for example, via comments, posts, or direct messages. <\/p>\n

      Categories of data processed<\/strong>
      \nWhen using our social media channels, we process the personal data that you actively provide to us via the respective platform, e.g., your name or username, profile information, message content, comments, or reactions.
      \n<\/span><\/p>\n

      Recipients<\/strong>
      \nWithin Steinbeis University of Applied Sciences, only authorized employees have access to the content addressed to us via social media channels.
      \n<\/span><\/p>\n

      Third-country data transfer<\/strong>
      \nA transfer of data to third countries, particularly to the USA, cannot be ruled out. Data transfer is based on standard contractual clauses of the European Commission in accordance with Art. 46 GDPR. <\/span><\/p>\n

      Storage period<\/strong>
      \nWe store the data processed by us in the context of communication via social media channels only as long as this is necessary to process your request.
      \n<\/span><\/p>\n

      Legal basis<\/strong>
      \nThe processing of your personal data is based on our legitimate interest in contemporary public relations and communication in accordance with Art. 6 para. 1 lit. f GDPR.
      \nIf you specifically contact us via social media channels, the processing of your data may also be necessary for the implementation of pre-contractual measures or to answer your inquiry in accordance with Art. 6 para. 1 lit. b GDPR.
      \n<\/span><\/p>\n

      Data processing by the platform operators
      \n<\/span><\/b>When using our social media channels, the respective platform operators process personal data under their own responsibility. This includes, in particular, technical data (e.g., IP address, device information), usage and interaction data, and \u2013 if you have a user account and are logged in \u2013 further profile data. Processing may also take place for the platform operators’ own purposes, such as providing services, analyzing user behavior, or delivering personalized content and advertising. We have no influence on the nature and extent of this data processing. Further information can be found in the privacy policies of the respective platform operators.<\/span><\/div>\n<\/div>

      APPLICATIONS<\/h3><\/div>

      Purpose<\/strong>
      \nIf you apply with us, we process your personal data to conduct the application process and to decide on establishing an employment or service relationship.<\/p>\n

      Categories of processed data
      \n<\/strong>As part of the application process, we process in particular the application documents you submit and the personal data contained therein, e.g., name, contact details, cover letter, CV, certificates, proof of qualifications, references, information on education, studies, professional career, teaching and research portfolio, publication list, and other information you provide.<\/p>\n

      Recipients<\/strong>
      \nRecipients of the data are the departments and persons within Steinbeis University of Applied Sciences involved in the application process, in particular the responsible administrative offices, departments, and persons and committees involved in the selection or appointment process. Data is only passed on to third parties if this is necessary to conduct the application process or if there is a legal obligation to do so. <\/p>\n

      Third-country data transfer<\/strong>
      \nNo third-country data transfer takes place.<\/p>\n

      Storage period<\/strong>
      \nYour application data will be deleted as soon as it is no longer required for the application process and no legal retention obligations or other legitimate reasons for longer storage exist. Application documents of unsuccessful candidates are generally deleted no later than six months after completion of the application process. <\/p>\n

      Legal basis
      \n<\/strong>Processing is based on Art. 6(1)(b) GDPR and Section 26(1) BDSG. Insofar as special categories of personal data are processed, this is based on Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG.<\/p>\n<\/div>

      Campus Web \/ AcademyFIVE<\/h2><\/div>
      Purpose<\/strong><\/div>\n
      \n

      Personal data is processed to provide a secure online platform for students. Via Campus Web, study-related information such as study plans, performance overviews, grades, documents, exam registrations, and internal messages can be provided and accessed. <\/p>\n

      Categories of processed data<\/strong>
      \nIn particular, master data, contact data, account and access data, study progress data, examination and performance data, documents, communication data, and technical log and usage data are processed.<\/p>\n

      Recipients<\/strong>
      \nAuthorized persons within Steinbeis-Hochschule GmbH have access to the data insofar as this is necessary for the respective task fulfillment. This may include in particular administrative staff, institute staff, teaching staff, and\u2014where applicable\u2014external persons, such as company supervisors in the context of student projects. The technical service provider for academyFIVE is Simovative GmbH, which acts on the basis of a data processing agreement in accordance with Art. 28 GDPR. <\/p>\n

      Third country data transfer<\/strong>
      \nAccording to the current status, no third country transfer takes place.<\/p>\n

      Storage period<\/strong>
      \nThe data is stored as long as this is necessary for the implementation and organization of studies and to fulfill legal or statutory retention and archiving obligations. The archiving statute of Steinbeis University is particularly relevant. <\/p>\n

      Legal basis<\/strong> 1 lit. b GDPR, insofar as it is necessary for the implementation of the study relationship. Insofar as legal or statutory obligations exist, processing is based on Art. 6(1)(c) GDPR. For the secure and functional operation of the platform, processing is based on Art. 6(1)(f) GDPR.
      \n
      \n<\/em><\/p>\n<\/div>\n<\/div>

      Rights of data subjects<\/h2><\/div>
      Under the General Data Protection Regulation (GDPR), you have the following rights:<\/div>\n
      <\/div>\n
        \n
      • Right of access to information about the processing of your personal data (Art. 15 GDPR),<\/li>\n
      • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR),<\/li>\n
      • Right to erasure of your personal data, provided the legal requirements are met (Art. 17 GDPR),<\/li>\n
      • Right to restriction of processing (Art. 18 GDPR),<\/li>\n
      • Right to data portability, where applicable (Art. 20 GDPR),<\/li>\n
      • Right to object to processing based on Art. 6(1) lit. f GDPR (Art. 21 GDPR), <\/li>\n
      • Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR),<\/li>\n
      • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).<\/li>\n<\/ul>\n

        Last updated: July 2026<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":7103,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3932","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/pages\/3932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/comments?post=3932"}],"version-history":[{"count":60,"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/pages\/3932\/revisions"}],"predecessor-version":[{"id":7394,"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/pages\/3932\/revisions\/7394"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/media\/7103"}],"wp:attachment":[{"href":"https:\/\/www.steinbeis-hochschule.de\/en\/wp-json\/wp\/v2\/media?parent=3932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}