The website https://www.dshs-koeln.de/ (hereinafter referred to as the “website”) is provided by the German Sport University Cologne (hereinafter referred to as the “German Sport University” or “we”). Whenever this website is used, data is automatically collected, processed and stored. In doing so, the German Sport University complies with the legal requirements of the European General Data Protection Regulation (hereinafter referred to as the ‘GDPR’) and – insofar as this is compatible with the GDPR – with national data protection laws, such as, in particular, the Data Protection Act of North Rhine-Westphalia. With the following information, we therefore wish to inform you about which of your personal data is collected when you use this website and how we will handle this data. You can access this privacy policy at any time via the link www.dshs-koeln.de/datenschutz/.
Furthermore, the German Sport University has implemented organisational and technical measures to ensure the security of your data and to protect your personal data against unauthorised access. We review these security measures regularly and adapt them, where necessary, to technological progress.
The data controller within the meaning of data protection legislation is:
German Sport University Cologne
Am Sportpark Müngersdorf 6
50933 Cologne
Germany
Tel.: +49 221 49820
Email: infopoint@dshs-koeln.de
Website: www.dshs-koeln.de
The data protection officer of the data controller can be contacted as follows:
German Sport University Cologne
The Data Protection Officer – in person –
Am Sportpark Müngersdorf 6
50933 Cologne
Germany
If you have any questions or suggestions regarding data protection, please feel free to contact us at any time by email at datenschutz@dshs-koeln.de.
The subject matter of data protection is personal data. In accordance with Article 4(1) of the GDPR, this refers to any information relating to an identified or identifiable natural person (data subject). A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by association with specific pieces of information. Such details include, for example, name, residential or postal address, telephone number and, where applicable, usage data. Usage data refers to data required to use our website, such as details regarding the start, end and scope of use of our website.
As a result of the collection and processing of your personal data, you have the following rights in relation to the personal data concerning you:
Right to withdraw consent: If you have given us your consent, you may also withdraw it at any time with effect for the future. The withdrawal of consent does not apply retrospectively and therefore does not affect the lawfulness of the data processing up to the time of withdrawal.
Right to object: If your data is processed for the performance of a task carried out in the public interest or in the exercise of official authority vested in the German Sport University, you may object to this processing at any time at the address given above in accordance with Article 21 of the GDPR, provided that there are grounds arising from your particular situation which preclude such data processing. Data processing will then cease, unless the German Sport University can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subjects, or where the processing serves to establish, exercise or defend legal claims.
To exercise these rights, you may contact the Data Protection Officer at any time in writing (by post or email) using the contact details provided in section 2 above.
Notwithstanding this, you also have the right under Article 77 of the GDPR to lodge a complaint with the competent supervisory authority if you consider that your rights set out above have been infringed within the meaning of applicable data protection law. To do so, you may contact
The State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia
Kavalleriestraße 2–4, 40213 Düsseldorf
PO Box 20 04 44, 40102 Düsseldorf
Telephone: +49 211 38424 – 0
email: poststelle(at)ldi.nrw.de
Further information is available at http://www.ldi.nrw.de.
5.1 Data collected automatically
When you visit our website, we automatically collect data for technical reasons which is transmitted from your browser to our servers. This takes place without any action on your part and concerns the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:
This data is stored for a period of seven days and then deleted, unless further storage of the data is permitted and required under statutory provisions (e.g. in the context of civil or criminal proceedings against an attacker).
The legal basis for data processing is Article 6(1), first sentence, point (e) of the GDPR in conjunction with Section 3(1) of the DSG NRW and Section 3 of the HG NRW
5.2 Cookies
We use so-called ‘cookies’ on our website. These are small text files which are stored on your hard drive via your web browser and through which certain information is transmitted to the entity that set the cookie (in this case, the German Sport University). When you visit a website again, your browser transmits the stored cookie information back to the site. This enables personalised, tailored information to be displayed or services to be provided to users. As a result, the website can be made more user-friendly and effective overall. Cookies cannot run programmes or transmit viruses to your computer.
This website uses transient cookies.
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you close your browser.
The legal basis for data processing is Article 6(1), first sentence, point (e) of the GDPR in conjunction with Section 3(1) and (3) of the HG NRW.
You can configure your browser settings as you wish and, for example, refuse to accept third-party cookies or all cookies, or delete cookies that have already been set. If you disable the setting of cookies in the web browser you are using or delete cookies that have already been set, you may not be able to use all the functions of our website to their full extent.
Usercentrics: For the purpose of complying with legal obligations (duty of proof pursuant to Article 7(1) of the GDPR) and the associated documentation of consents, and thus on the basis of Article 6(1)(c) GDPR, we use a consent management tool provided by Usercentrics GmbH. As part of its role as a data processor, Usercentrics processes data relating to log files, the browser used and cookie consent (consent or refusal, timestamp, scope of data, data attributes, ControllerID, ProcessorID and ConsentID). Further information on the data collected and contact details can be found at https://usercentrics.com/privacy-policy/.
Matomo: For the sole purpose of statistically analysing visits to our website and thereby improving our online presence, we integrate the analytics programme from the open-source project Matomo, subject to your consent (Article 6(1)(a) of the GDPR). Matomo uses cookies. However, the information generated in this way is stored on our servers (i.e. in Germany). Furthermore, the last two segments of your IP address are anonymised immediately after processing and before storage (IP masking). The data collected is not passed on to third parties. You have the right to withdraw your consent at any time. The easiest way to do this is to change your selection under ‘Settings’ in the consent management tool integrated into our website. Alternatively, Matomo offers its own opt-out option for the analysis. You can find this, along with Matomo’s privacy policy, at https://matomo.org/privacy-policy/.
Further information on any cookies used on our website can also be found in the settings of the Usercentrics cookie management platform used on our website.
5.3 Data entered by users
You also have the option of submitting personal data to the German Sport University via the website for the purposes listed below.
5.3.1 Contacting the German Sport University by email
Our website offers you the option of making quick and straightforward electronic contact via email. Under ‘Contact’, you will find a selection of email addresses to which you can direct your enquiry. This serves, on the one hand, to enable us to fulfil our legal obligations as effectively as possible and, on the other hand, to answer your questions regarding our services and our university. If you contact us by email or via a contact form, you are voluntarily consenting to the storage of the personal data you provide in this way. Your data will be stored and further processed solely for the purpose of processing your enquiry or contacting you. The legal basis for data processing is Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. Your personal data will then be deleted without delay, unless further storage is permitted and required by law. Withdrawing your consent does not affect the lawfulness of any data processing carried out on the basis of your consent up until the time of withdrawal. Unless you withdraw your consent, your personal data will be deleted in full once your enquiry or question has been dealt with. This personal data will not be disclosed to third parties. As the provision of your data to us is voluntary, we would like to point out that – in view of the principle of minimising the disclosure of your data in electronic communications – you should only provide data that is relevant to your enquiry. We would also like to point out that contact via email is unencrypted; therefore, the information provided in the email could be read by unknown third parties.
5.3.2 Submission of application documents
You also have the option of applying to the German Sport University to take up a professional role, to commence a degree programme or – if you are already studying at the German Sport University – to undertake a period of study abroad at another educational institution. Any applicant data collected in this context is collected and processed by us solely for the purpose of handling the application process. With regard to applications to commence a degree programme or to undertake a period of study abroad, please refer to the further data protection information provided on the respective encrypted registration form (LSF or OMA). In the case of applications for employment, your personal data may also be processed electronically. This is particularly the case when application documents are submitted to us electronically via email. Your data is processed solely for the purpose of handling your application. The legal basis for data processing is Article 6(1)(b) of the GDPR. In the case of applications submitted by email, we expressly point out that the communication is not encrypted and that the data you transmit may therefore be read by unknown third parties. We therefore always recommend that you send your application documents to us by post rather than by email.
If the German Sport University enters into an employment contract with an applicant, the data provided will be stored for the purpose of administering the employment relationship in accordance with the relevant legal provisions. If, however, no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that further storage of the data is not required by law.
5.3.3 Events
The German Sport University regularly organises various events (e.g. open days, workshops, specialist conferences, congresses), including those held on campus. These are announced on the website. For organisational reasons, in order to take part in such events, you must register via the online registration forms provided on our website. To do so, you must provide certain personal details and contact information (e.g. name, postal address, email address, date of birth). We collect and store this data exclusively for the purposes explained in more detail in the specific event description. Where the German Sport University collaborates with other partners on events, we may pass on your personal data to third parties. We will inform you of this, where applicable, at the time of data collection. Please therefore take note of the further data protection information regarding the exact purpose, legal basis, manner, scope, any transfer and the duration of the processing of this data. We will provide you with this information in a separate statement, which will be displayed to you in connection with the event details.
5.3.4 Newsletters/Press Distribution List
The German Sport University offers you the opportunity to subscribe to one or more free newsletters and to join press distribution lists. As part of these newsletters or press releases, we provide information on, amongst other things:
In order for us to send you this information, you must subscribe to the newsletter via the so-called double opt-in procedure. To do this, you must complete the online registration form for the relevant newsletter, then tick the box marked ‘I would like to subscribe to the newsletter’ and finally click the ‘Submit’ button. A confirmation email will then be sent to the email address you provided. To confirm your subscription to the newsletter, you must click on the link contained in this email. If you do not confirm your subscription within 24 hours, your details will be automatically deleted. In addition, we store the IP addresses you use and the times of your subscription and confirmation. The purpose of this procedure is to verify your subscription and, if necessary, to investigate any potential misuse of your personal data.
To receive the newsletter, we require only your email address. The provision of any further, separately marked data is voluntary and will be used to address you personally, should you wish. Following your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(a) of the GDPR.
You may withdraw your consent to receive the newsletter at any time and unsubscribe from it. You can withdraw your consent by clicking on the link provided in every newsletter email or via the relevant unsubscribe form, which is linked in the subscription form for the respective newsletter. Your personal data stored by the German Sport University in connection with the newsletter, including your email address, will then be deleted immediately.
Please note that, after sending the newsletter, we analyse user behaviour statistically, i.e. we record which links in the newsletter have been clicked. This is done to improve our newsletter service. This analysis is carried out without storing your IP address and without any link to your email address; it is therefore not personalised.
To enable you to use all the functions of our website, we occasionally rely on the services of contractually affiliated third-party companies and external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
We have embedded YouTube videos in our online content; these are stored on www.YouTube.com and can be played directly from our website. These are all embedded in ‘enhanced privacy mode’, meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data specified in paragraph 2 transmitted. We have no influence over this data transmission.
When you visit the website, YouTube receives the information that you have accessed the relevant subpage of our website. In addition, the data specified in section 5.1 of this policy is transmitted. This occurs regardless of whether you are logged in to a YouTube user account or do not have a user account. If you are logged in to YouTube or Google (YouTube is part of the Google Group), your data will be directly associated with your account. If you do not wish for this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular (even for users who are not logged in) to provide personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: www.google.de/intl/de/policies/privacy.
To do this, you can access the and change your preferences there.