We appreciate your interest in the services offered by Studierendenwerk Stuttgart, and we want you to feel safe when visiting our website. On this page we have compiled some important information about data protection.

Further information on data protection can be found:

• in our general data protection declaration.
• in our Data protection for the residential complexes for tenants and applicants
• in our Data protection for Online-Job-Appicants

Responsible party

The responsible body is:

Studierendenwerk Stuttgart AöR

Rosenbergstraße 18

D-70174 Stuttgart

Telefon: +49 711 4470-1247

E-Mail: info@sw-stuttgart.de 

You can contact our data protection officer at:

Studierendenwerk Stuttgart AöR

- Datenschutzbeauftragter -

Rosenbergstraße 18

D-70174 Stuttgart

E-Mail: datenschutz@sw-stuttgart.de

Personal data

You can use most of our pages without providing any personal information. If personal data is requested on individual pages, your information is always provided on a voluntary basis. You can also receive all our offers and information in person, by telephone or by post without disclosing any data.

We collect, process and use data only to fulfil our legal obligations. Your data will only be used to the extent permitted by law or with your consent. We do not pass on your data to third parties unless you have expressly given your consent or it is permitted or required by law.

Data for statistical evaluations

When you visit our website, data is automatically transmitted to us. This is necessary for technical reasons when operating any website. We store this data in anonymised form and use it for statistical evaluations to optimise our offer. This data is also evaluated in the event of malfunctions and to determine risks. The data is deleted after 35 days at the latest. The legal basis for the processing is Article 6 para. 1 lit. f DSGVO, because the functionality of the website is in the special interest of our company.

The following information is stored:

• Your IP address in anonymised form
• The name of the page or file accessed
• The date and time of the request
• The amount of data transferred
• The previously visited page (referrer address)
• The access status (file transferred, file not found etc.)
• The type of browser used

Cookies for comfortable surfing

Our internet pages use so-called cookies. They serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Storage duration of the various cookies:

• TYPO3 session (30 minutes)
• Cookie bar (365 days)
• MATOMO tracking (duration 365 days) (formerly PIWIK)
• MATOMO opt-out (if set, 2 years) (formerly PIWIK)
• Max-Manager Menu (Session-Cookie)

Some elements of our website require that the calling browser can be identified even after a page change.

The legal basis for the processing of cookie data is Article 6 (1) (f) DSGVO, insofar as the technical functionality of the website depends on these cookies, because this is in the special interest of our company.

For cookie data that is processed without a technically compelling necessity, we ask for your consent in advance in accordance with Article 6 (1) a DSGVO.

You can set your web browser so that it does not store cookies; however, this leads to restrictions on some pages.

Matomo (former Piwik)

Our website uses MATOMO (formerly PIWIK), a web analysis service. The processing of the users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.
Your IP address is anonymised before storage so that you remain unknown to us as a user and no profiling can take place. The data is deleted as soon as it is no longer required for our recording purposes.

MATOMO uses cookies, which are text files that are stored on your computer. The information generated by the cookie about your use of this website is not passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The legal basis for the processing lies in the fulfilment of our public tasks according to Art. 6 (1) e DSGVO, as well as in our legitimate interest according to Art. 6 (1) f DSGVO in optimising our web offer.

If you do not agree to the storage and analysis of this data from your visit, you can object to its storage and use at any time by clicking on the following link. In this case, a so-called opt-out cookie will be stored in your browser, which means that MATOMO will not collect any session data. Attention: If you delete your cookies, this will also delete the opt-out cookie and you may have to reactivate it.

appeal:

Contact form

Our website contains a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. The data to be processed can be found in the contact form. For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration. We expressly point out that some of this data is sent to us unencrypted. Therefore, please do not send us any special categories of personal data (e.g. health data) via the contact form; use secure channels, such as the postal service, for this purpose. The legal basis for the processing of the data is Art. 6 (1) lit. a DSGVO if the user has given his or her consent

In addition, the following further data is collected during registration:

• IP address of the calling computer
• Date and time of registration

The collection of this data as part of the registration process serves to prevent misuse of the services or the e-mail address used. This is a legitimate interest of the company.

The processing of the personal data from the input mask serves us solely to process the request for contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

E-Mails

If you send us an email, we will only use this email and your email address to process your request. Other offices will only receive your data if this is necessary to deal with your request. We store and archive e-mails because we are obliged to do so due to legal retention periods.

Our e-mail procedure is not encrypted. If you communicate with us by e-mail, please bear in mind that unauthorised third parties may be able to view this information. If you wish to avoid these risks, you can contact us by telephone, in person or by post instead. We ask that you do not send us any special categories of personal data (e.g. health data) by email; use secure channels such as the post.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. Insofar as emails are to be regarded as business letters or these could be relevant for tax purposes, statutory retention periods of up to 10 years apply.

press mailing list

On our website you have the option of subscribing to a free press distribution list. When registering for the press distribution list, the data from the input mask is transmitted to us. This includes the email address as well as other data visible in the input mask.

Your consent to the processing of the data is obtained during the registration process and reference is made to this data protection declaration. The data will be used exclusively for sending the press mailing list. The legal basis for the processing of data after registration for the press distribution list is consent.

In addition, the following data will be collected during registration:

• IP address of the calling computer
• Date and time of registration

The collection of this data as part of the registration process serves to prevent misuse of the services or the e-mail address used. This is a legitimate interest of the company.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the press distribution list is active. The subscription to the press distribution list can be cancelled by the user concerned at any time. For this purpose, please send us an e-mail.

Online application housing

You can use our online portal to apply for a place in our residential complexes. We use the software of a specialised IT service provider. The service provider's forms are embedded in our web portal. Your data will be processed by the service provider on our behalf.

We will send you your details by e-mail immediately after they have been entered so that you can check them again. This e-mail is not encrypted; if you do not want to communicate with us unencrypted, you are welcome to contact us by phone to receive a conventional application form.

Private accommodation agency

You can only use our portal for private accommodation (as a tenant or landlord) if you agree to the conditions of participation. You inform us of this by pressing the corresponding confirmation button.

We process your data as far as this is necessary for the implementation of the housing agency. Please note that we publish your data automatically - i.e. without prior verification and without further consultation with you.

Autoload procedure

With our autoload procedure, you can easily add value to your electronic purse. We work together with the financial service provider PayPal, and access to the PayPal portal is embedded in our website. Our server for the Autoload portal is hosted in an external data centre and administered by an external IT service provider.
Further information about Autoload.
 

BAföG short application digital

BAföG is granted from the month of application at the earliest. A short application is sufficient to meet the deadline, you can submit the complete BAföG application later. A quick way is the digital BAföG short application. We process personal data in order to further digitize our administrative processes and become faster. The legal basis for this is § 67a,b SGB X. For the collection by means of the online procedure, we need your consent. The transmitted data from the short application will be included in your BAföG file. After expiry of the retention period, which is six years, the file will be deleted. After submitting the digital BAföG short application, you will receive an (unencrypted) confirmation email.

Social Media

A social network (also called social media) describes websites and apps that serve as a social meeting place for an online community. Users can be interactive: communicate with each other, create and share content, and network with each other. A social network can also be a platform for exchanging opinions, information and experiences.
Our Usage concept of social media you can find here

Our website links to various social media sites (Facebook, Twitter, Instagram and YouTube). We do not use any active components, but only links to the external offers. Therefore, no data is transferred to third parties simply by calling up our website.

If you call up a social media page from our website, we use the so-called "two-click method", which means that we first display information about this page again. Only when you actively click on the link to the social media page will you be taken to the desired page.

As soon as you activate a social media page, the operator receives information. We have no knowledge of which data the external operator collects and how it is linked or used. If you activate social media sites, you must comply with their data protection provisions.

• Facebook (Meta)
  Here you can, among other things, create private profiles, upload photos and videos and network with other users.
  The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the data controller is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Information on the collection, processing and use of personal data by Facebook, as well as setting options for the protection of privacy, can be found in the Privacy Policy of Facebook
• Instagram (Meta)
  Instagram allows you to share photos and videos and to network with other users.
  The operator of the Instagram services is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
  Privacy policy of Instagram.
• Twitter
  Twitter is a publicly accessible microblogging service. You can publish and distribute short messages (tweets). These short messages can also be accessed by people who are not registered with Twitter. You can network with other users via Twitter and follow them as a follower. Twitter makes it possible to address a broad audience via hashtags, links or retweets.
  Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland.
  Information about Data Policy of Twitter.
• Mastodon
  Mastodon is a decentralized service for microblogging. Users can distribute short messages on Mastodon. These are called “Toots” or “Tröts”. Users have to create an account on one of the servers. They can interact with all other servers from there. Our profile is located on the Mastodon instance sueden.social.
  Privacy policy sueden.social
• YouTube
  YouTube is an internet video portal. You can publish videos here or watch, rate and comment on videos by other users.
  YouTube is operated by Google Ireland Limited.
  Privacy Policy of YouTube and Google

Google Maps

We use the map service Google Maps. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
For technical reasons, it is necessary to process the IP address of your computer. In the process, data is usually transferred to a Google server in the USA and stored there. We have no influence on this transfer.

Your data is processed for the purpose of making it easy for you to find the places indicated on our website. The legal basis is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO; your consent can be revoked at any time in the future. Please note that we cannot show you maps of this service without your consent.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Information on this can be found at:https://privacy.google.com/businesses/gdprcontrollerterms/  and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find information about how Goole handles user data in Google's privacy policy.

External bodies with which we cooperate

We are supported by various external service providers in the operation of this website. They work on our behalf and according to our specifications.

They have access to personal data only to the extent absolutely necessary for the provision of the services.

We are supported by a professional web agency for the design and programming of the website. The website is hosted in a high-performance data centre of an internet provider in order to achieve high speed and availability for our users.

Disclaimer

Studierendenwerk Stuttgart regularly maintains its internet pages to keep them up-to-date and correct. Nevertheless, we cannot guarantee the permanent correctness of the information provided.

Our online offer contains references to other websites (links). We have no influence on the content of these sites and therefore accept no liability for their content. We dissociate ourselves from possible infringements of the law by external sites to which we refer.

Deleting data

Insofar as this has not already been described, we generally delete data when the purpose of the processing has been fulfilled. If there are statutory retention periods, we may only delete data after these periods have expired. Otherwise, we keep data stored insofar as there is an overriding operational interest.

your rights

Data subjects have the right to information about their data, to correction of data, deletion of data, the right to restriction of data processing and the right to data portability.

There is also the right to revoke consent given, to object to processing for the legitimate interest of the company and to automated decisions within the framework provided by law. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation.

Data subjects also have the right to complain to a supervisory authority for data protection.

Data Protection Officer

If you have any further questions, please contact the data protection officer at Studierendenwerk Stuttgart: (E-Mail: datenschutz@sw-stuttgart.de) or by post at our address, "for the attention of the Data Protection Officer".

(Stand 23.03.2023)