Privacy Policy for Course Registrations

  1. Controller and data protection officer

    University of Mannheim
    68131 Mannheim
    phone: 0621/181-1001

    L 1, 1
    68161 Mannheim
    Phone: 0621/181-1126

  2. Description and extent of data processing
    Each time you register for a course, the personal information you enter into the online registration form will be stored on our webserver and the GESS local servers. This includes your first and last name(s), email address, doctoral program, the date and time of registration, and the course you have registered for.

  3. Legal basisfor the processing of personal data
    • Art. 6 para. 1 lit. e in connection with para. 3 of the European Union's General Data Protection Regulation (GDPR) in connection with art. 12 and art. 38 para. 2 cl. 5 of the Act on Higher Education of the Land of Baden-Württemberg (LHG) from 01.01.2005, whose Article 1 was last amended on 13.03.2018 (published in GBI. p. 85), and the Ministry of Science, Research and the Arts‘ legal regulation (HSchulDSV) on the collection and processing of personal data of university applicants, students and examination candidates for administrative purposes of the institutions of higher education from 28.08.1992 (GBI. p. 667), whose Article 2 was last amended on 14.05.2019 (GBI. p. 225),
    • Landesdatenschutzgesetz (data protection act) from 12.06.2018 (GBI. p. 173).
  4. Purpose for data processing
    The information collected in the online registration form will be processed for the purpose of registration into the selected courses of the doctoral programs of the GESS and the exam administration. Your email address will be used for the purpose of contacting you.
  5. Recipients
    • The data will be forwarded to the following organizational units of the University of Mannheim: Division II (Students Affairs/Services) and the lecturer of the course you have registered for.
    • Passing on data to third parties: Personal data in the online registration form is not passed on to third parties outside the university unless there is a statutory or legal obligation to disclose the data.
  6. Deletion of data and storage period
    The data will be deleted from our webserver as soon as we have downloaded it and at the latest after three weeks after the registration period has ended. It will then be stored on our local servers. The date and time of registration will be deleted once the purpose for which they have been collected ceases to apply, in this case three weeks after the end of the registration period. Your email address will be deleted after the end of the examination procedure.

    The following data must be kept for 40 years after exmatriculation or the end of the examination procedures according to art. 12 of the University Privacy Policy Act (HSchulDSV):

    • last name(s), first name(s)
    • doctoral program
    • course you have registered for
  7.  Your rights
    • In accordance with article 15 GDPR, you have the right to request information from the University of Mannheim about any data it stores that is related to your person and/or to have incorrect data corrected as per article 16 GDPR.
    • You also have the right to demand that your data be deleted (article 17 GDPR), that the processing and use thereof be restricted (article 18 GDPR), as well as to object to the processing and use of your data (article 21 GDPR), unless legal requirements stipulate otherwise.
    • You also have the right to file a complaint with the regulating authority if you believe that the processing and use of your personal data is in violation of the law (article 77 GDPR). The responsible contact person at the regulating authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (state commissioner for data protection and the freedom of information Baden-Württemberg).
  8. Information on your right to object according to art. 21 para. 1 GDPR
    You have the right to oppose for legitimate reasons the treatment of your personal data that was collected according to art. 6 para. 1 lit. e GDPR (data processing in public interest).