GESS Application and Admissions Process

1. Controller and data protection officer

University of Mannheim
Schloss
68131 Mannheim
Phone: 0621/181-1001
E-mail: rektormail-uni-mannheim.de

Data Protection Officer
Jan Morgenstern
Email: datenschutzbeauftragtermail-uni-mannheim.de

2. Description and Extent of data processing

In the application and admissions process at the Graduate School of Economic and Social Sciences (GESS) at the University of Mannheim the following personal data are collected and stored in the online application portal and the graduate school’s local servers in order to process your application in the selection and admissions process: first and last name(s), title, date of birth, mailing address, e-mail address, possibly further contact details, qualification data (such as the university entrance qualification, vocational trainings, test results, etc.), data you provide to us voluntarily when using the university online services, data for and from IT use (e.g. usernames, passwords, access logs) is required.

3. Legal Basis and Purpose of Data Processing

The data to be provided in the online application form are required for processing your application for, admission to, and enrollment into the structured doctoral program of your choice at the GESS. If the data and documents are not provided through the portal, the application for admission or enrollment cannot be processed.

The legal basis for data processing is Art. 6 para. 1 lit. e in conjunction with Art. 6 para. 3 of the European Union’s General Data Protection Regulation (GDPR) and Sections 4, 5, 6, and 8 of the Baden-Württemberg State Data Protection Act (LDSG BW), in connection with Sections 12 and 38 of the Act on Higher Education of the Land of Baden-Württemberg (LHG) and the doctoral regulations of the respective faculties and schools, the Hochschul‐Datenschutzverordnung (university data protection regulation) and the Hochschulstatistikgesetz (Higher Education Statistics Act –  HStatG).

The legal basis for processing of data marked optional is Art. 6 para. 1 lit. a GDPR.

General information on the processing of personal data when using the website of the University of Mannheim can be found in the data protection declaration of the University of Mannheim.

4. Recipients

The data provided in the application process are forwarded to the following organizational units of the University of Mannheim as far as this is permissible according to the Act on Higher Education of the Land of Baden-Württemberg and the University Privacy Policy Act. Internal recipients are, in particular, the responsible authorities in the schools (Business School, School of Social Sciences and the Department of Economics), the university administration, as well as central operational units, in particular the University Computing Center. Employees of the university only receive access to your data that were collected in the application process if they require this information to fulfill their tasks.

When you enroll in a program of study, your personal data are transmitted, inter alia, to the Statistical Office of the Land of Baden-Württemberg in accordance with the Hochschulstatistikgesetz (HStatG).

5. Deletion of Data and Storage Period

Your personal data is deleted from the online application portal and the graduate school’s local servers eight weeks after the beginning of the fall semester at the latest. If you receive an offer and accept, your personal data is saved until disenrollment. As for the rest, the data are deleted after the respective retention period has expired according to Sect. 12 Hochschul‐Datenschutzverordnung.

6. Your rights

  • In accordance with Art. 15 GDPR, you have the right to request information from the University of Mannheim about any data it stores that is related to your person and/or to have incorrect data corrected as per Art. 16 GDPR.
  • You also have the right to demand that your data be deleted (Art. 17 GDPR), that the processing and use thereof be restricted (Art. 18 GDPR), as well as to object to the processing and use of your data (Art. 21 GDPR), unless legal requirements stipulate otherwise.
  • You also have the right to file a complaint with the regulating authority if you believe that the processing and use of your personal data is in violation of the law (Art. 77 GDPR).

The responsible contact person at the regulating authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (state commissioner for data protection and the freedom of information Baden-Württemberg).

7. Information on your right to object according to Art. 21 Paragraph 1 GDPR

You have the right to object to the processing of your personal data that was collected according to Art. 6 para. 1 lit. e, and Art. 6 para. 3 of the European Union's General Data Protection Regulation (GDPR) (data processing in the public interest).