Data Controller and Data Protection Officer
IUBH Internationale Hochschule GmbH, Juri-Gagarin-Ring 152, D-99084 Erfurt, Germany („IUBH“), is responsible for the processing of your personal data. We have appointed Dr Annette Demmel, SPB DPO Services GmbH, Unter den Linden 21, 10117 Berlin, firstname.lastname@example.org, as our Data Protection Officer.
Purpose of the processing
Your personal data will be processed for the following purposes:
Legal basis for the processing
Your personal data will be processed on the basis Art. 6 (1) (b) of the General Data Protection Regulation (‘GDPR’) for the execution of the study contract with you. Where we are obliged to comply with a statutory obligation to process your personal data, this will take place on the basis of Art. 6 (1) (c) GDPR, or, in cases where we transfer your personal data to another group company or other recipients in pursuance of our legitimate interests or those of a third party, we will undertake this on the basis of, and in accordance with, Art. 6 (1) (f) GDPR so that we can use shared operational infrastructure, for example, IT systems or online tools for teaching activities and examinations, including plagiarism checks, and offer practice-based learning partnerships with companies. In exceptional cases where the processing of your personal data is not required to execute the study contract with you, but where we would nonetheless like to propose data processing of this kind, we will ask you separately for your consent pursuant to Art. 6 (1) (a). You will then be offered further information in this connection.
Access to your personal data will be limited exclusively to those employees and teaching staff of IUBH entrusted with the tasks described in the section entitled ‘Purpose of the processing’. Our group companies may additionally offer us IT services. We will gladly send you an overview of the group companies. Employees of these companies may have access to your personal data to the extent necessary for the fulfilment of the task. We also call on the assistance of external service providers for the operation of our IT infrastructure, including electronic communications and the operation of our website, the billing system for your use of the canteen and cafeteria, the provision and management of residential accommodation and access control.
In the context of the courses offered via the Internet including plagiarism checks, for example, online tutorials, we use various functions offered by external providers (hereinafter referred to as ‘Online Tools’) who will be given your name and information about your courses and their contents, including recordings of your voice and video recordings of your person. In these cases, your personal data will if necessary be transferred to countries outside the European Union, particularly the United States of America. We conclude standard EU contracts for data processing in third countries to ensure that these transfers are secure. If you would like to see such a contract, contact us at email@example.com , and we will gladly provide you with a copy. You will find detailed information concerning the Online Tools used to process data next to the Start button for each of the relevant Online Tools.
We process the following data categories:
Master and contact data
Date of birth
Identity card or passport number and country or authority of issue
Private contact information
Information concerning relatives as emergency contacts
Information on the study contract
Details relating to enrolment, the execution and completion of the study course, and practice-based learning partnerships
Course of studies
Details from application procedures, for example, curriculum vitae
Entry and exit date
Vocational training and career
Qualifications and certificates or degrees
Attendance and absenteeism records
Bank account or other payment data
Canteen and cafeteria payment data
Access control and security monitoring data
Information on care, health, labour and social insurance
Information on any further mandatory or voluntary insurance policies
Information relating to the IT infrastructure
Usage data from the operational IT infrastructure, including electronic means of communication, for example, Internet, phone and intranet
Login information, such as date or time, websites used, data transmitted and received, courses booked and attended
Recordings of your voice and video recordings of your person in the context of the implementation of courses or sitting of examinations over the Internet
How long will your personal data be stored?
Your personal data will be stored for the duration prescribed by law or determined by us in respect of fulfilment of the task. To find out more about the duration of storage for individual data categories, please email us at firstname.lastname@example.org.
You can contact IUBH either in writing or by email at email@example.com in order to exercise the following rights:
You also have the right to complain to a supervisory authority in respect of the processing of your personal data.
Why is your personal data collected?
We need your personal data for the implementation of the contract with you. You have the option of refusing to provide your personal data or of providing us with incomplete data. This may mean, however, that we will be unable to implement the study contract with you. Please bear in mind that, as an international company, we have to make it possible for our students to take part in courses, in part and sometimes exclusively via the Internet with the use of Online Tools. For this purpose, we use the products of various software providers, especially in the United States of America or other countries outside the European Union. You will find detailed information concerning the Online Tools used to process data next to the Start button for each of the relevant Online Tools.