Data Protection

Privacy Notice for the social media channels of the German Sport University Cologne

This privacy notice applies to the following social media channels of the German Sport University Cologne (DSHS):

1. Name and contact details of the data controllers and the data protection officer(s)

The social media channels are operated on a joint responsibility basis in accordance with Article 26 of the General Data Protection Regulation (GDPR).

1.1 Data controller and contact person on behalf of the DSHS:

The data controller within the meaning of data protection legislation is, in the first instance:

German Sport University Cologne
(DSHS) Im Sportpark Müngersdorf 6
50933 Cologne
Germany
Tel.: +49 221 4982 0
Email: infopoint@­dshs-koeln.de

The content of the social media accounts is managed by the DSHS’s University Communications and Continuing Education Unit. This unit can be contacted as follows:

German Sport University Cologne
Office for University Communications and Continuing Education
Am Sportpark Müngersdorf 6
50933 Cologne
Tel.: +49 221 4982-3850
Email: presse@­dshs-koeln.de

The DSHS Data Protection Officer can be contacted regarding data protection issues or the exercise of data subjects’ rights as follows:

German Sport University Cologne
The Data Protection Officer (in person)
Am Sportpark Müngersdorf 6
50933 Cologne
Germany
Email: datenschutz@­dshs-koeln.de

1.2 In addition to the DSHS, the providers of the respective platforms listed below are also jointly responsible for compliance with data protection requirements, as follows:

  • Facebook, Instagram and WhatsApp

On the basis of an agreement on joint responsibility for personal data pursuant to Article 26 of the GDPR: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (‘Meta’). This agreement, known as the ‘Page Insights Addendum’, can be found at https://www.facebook.com/legal/terms/page_controller_addendum. Further information on Page Insights data is available at: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Facebook Privacy Policy: https://de-de.facebook.com/about/privacy
Privacy settings: https://www.facebook.com/privacy/controls.

Instagram Privacy Policy: https://privacycenter.instagram.com/policy
Privacy settings: https://help.instagram.com/811572406418223

We also use the German Sport University Cologne’s WhatsApp channel as a one-way communication channel to inform interested parties about news from the university, subject to their consent. To this end, we have entered into a data processing agreement with Meta regarding our WhatsApp channel in accordance with Article 28 of the GDPR. You can find the text of this agreement here: https://www.whatsapp.com/legal/business-data-processing-terms, and the addendum for the underlying WhatsApp Business account here: https://www.whatsapp.com/legal/business-data-transfer-addendum. By adjusting the settings, we do not collect any personal data from subscribers to our WhatsApp channel via WhatsApp ourselves, not even your mobile phone number.

WhatsApp Privacy Policy: WhatsApp Privacy Policy and Privacy Policy for WhatsApp Channels.

  • LinkedIn

On the basis of an agreement on joint responsibility for personal data pursuant to Article 26 of the GDPR: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn). This agreement, known as the ‘Page Insights Addendum’, can be found at https://www.linkedin.com/legal/l/page-joint-controller-addendum.

Privacy policy: https://de.linkedin.com/legal/privacy-policy and https://de.linkedin.com/legal/privacy/eu.
Privacy settings: https://www.linkedin.com/mypreferences/d/categories/privacy

  • TikTok

On the basis of an agreement on joint responsibility for personal data pursuant to Article 26 of the GDPR: TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Dublin, Ireland (TikTok)

https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de.
Privacy settings: https://support.tiktok.com/de/account-and-privacy/account-privacy-settings.

  • X (no longer active)

Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Privacy policy: https://x.com/de/privacy
Privacy settings: https://x.com/settings/account

  • YouTube 

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google)

Privacy Policy: https://policies.google.com/privacy
Privacy settings: https://myadcenter.google.com/personalizationoff?sasb=true&ref=ad-settings
Further information at: https://policies.google.com/privacy/frameworks?gl=de

2. Purposes of data processing and categories of data subjects

The DSHS’s social media profiles complement the DSHS website (https://www.dshs-koeln.de).

As soon as users access the DSHS’s social media profiles on the relevant platform, the terms of use and data processing policies of the respective operators apply.

The DSHS has no influence whatsoever on the nature or scope of the data processed by these operators, the manner in which it is processed and used, or the transfer of this data to third parties, particularly to third countries. When visiting a social media account, the provider of the relevant social media platform may therefore collect, for example, IP addresses (in anonymised form where applicable) or further details of visitor behaviour, or set cookies or similar technologies. Visitor statistics (so-called ‘Insights’) compiled on this basis are generated without our involvement and, where applicable, are transmitted to us exclusively in anonymised form. Where relevant options are available within the respective social media accounts, we endeavour, within the scope of the options available to us, to ensure data protection-friendly practices (for example, by adjusting the relevant settings in the respective social media accounts). In addition, you can set specific data protection preferences yourself in your respective social media settings, where technically possible.

To enable operators of a WhatsApp channel to reach users more effectively, demographic and geographical analyses are also carried out using the information collected by Meta, in order to suggest WhatsApp channels that are precisely tailored to users’ needs. We have no access to this data and cannot influence which users are offered our WhatsApp channel.

Meta, LinkedIn, X and Google are, in particular, part of international corporate groups headquartered in the USA, whilst the corporate group to which TikTok belongs is headquartered in China. Both are non-European third countries where an adequate level of data protection, as in the EU/EEA, does not automatically apply. However, Meta Platforms, Inc., LinkedIn Corporation and Google LLC have voluntarily subjected themselves to the so-called EU-USData Privacy Framework and have thereby committed to maintaining a level of data protection equivalent to that required by data protection law in the EU/EEA (https://www.dataprivacyframework.gov/list). In addition, the companies enter into so-called standard contractual clauses with their affiliated group companies. Further details on which data is processed by the provider and for what purposes can be found in the respective provider’s privacy policy above.

The DSHS social media editorial team processes personal data for the following purposes:

  • To generate and make social media content available
  • To process contact enquiries and communicate with users, provided these are not one-way channels
  • To analyse which content is relevant to users and to tailor the content accordingly
  • To inform interested parties about events, offers and other news from the DSHS

The data subjects are visitors to the DSHS’s social media channels.

3. Legal basis

Where the data subjects have given their consent to the DSHS for the above-mentioned processing operations, Article 6(1), first sentence, point (a) of the GDPR serves as the legal basis.

Where the processing of personal data is necessary for the performance of social media activities that are in the public interest or are carried out in the exercise of official authority, Article 6(1), first sentence, point (e) of the GDPR, in conjunction with Section 3(1) of the DSG NRW and Section 3 of the HG NRW, serves as the legal basis.

4. Retention period

The length of time for which personal data is stored on social media platforms depends on the respective platform operators. Further information can be found in the respective privacy policies of the social media providers listed above. The DSHS has no access to the data stored by the platform operators.

Within the DSHS’s social media editorial team, personal data is deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislation in EU regulations, laws or other provisions to which the data controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

5. Further information

Further information on data protection, in particular regarding your rights as a data subject, can be found in the DSHS’s general privacy policy at https://www.dshs-koeln.de/datenschutz/.


(March 2026)