Responsible organisation
Studierendenwerk Stuttgart AöR
Rosenbergstraße 18
70174 Stuttgart
 

Data protection coordinator & contact person:
Stefanie Rausch, Marketing / Online-Referentin
E-Mail: presse@sw-stuttgart.de

Data protection officer:
Studierendenwerk Stuttgart AöR
- Datenschutzbeauftragter -
Rosenbergstraße 18
70174 Stuttgart
E-Mail: datenschutz@sw-stuttgart.de

 

What personal data do we process?
We process the data that you enter in the respective survey form. In addition, we process metadata (IP addresses, cookies, timestamps, log data, etc.) that are required for the secure technical operation of the surveys.

We would like to keep our surveys as anonymous as possible. We therefore ask you to refrain from providing personal details in free text fields unless they are expressly requested (e.g. e-mail address for queries).

To prevent multiple participation in the survey, we sometimes activate an IP block. To enable IP blocking, the IP address is read out and only stored on the survey server after automatic encryption in a hashtag that cannot be re-encrypted. This means that the IP address can no longer be read later. As soon as the survey is finished, the hashtag is deleted.
 
Cookies are small files that are set in the browser when the survey is called up. Using these cookies, the survey system can recognise whether the survey has already been visited and reassign the answers you have already given (interrupting and continuing a survey). The use of cookies can also prevent multiple participation. The cookie is automatically deleted after 90 days or if the survey is cancelled prematurely.

Purposes and legal basis of processing
The main purpose of our surveys is to improve our services. We therefore ask users for their opinions and assessments in the surveys. The legal basis is the fulfilment of our tasks under the Studierendenwerk Act. If and insofar as we obtain consent, this forms the legal basis.

We process some of our data for archiving, research and statistical purposes for legal reasons and to fulfil our tasks.

We carry out checks and audits to ensure data protection and the security of our IT systems. These are based on the legal obligation to ensure the security of processing and on our general fulfilment of tasks.

Recipients of the data
We only use the survey data internally, i.e. in the Marketing division and the respective division concerned. Depending on the type of survey, we pass on statistically summarised survey results to other interested parties.
For the survey, we use the platform of the specialised service provider easyfeedback GmbH, Koblenz. This company has access to the survey data as part of its service fulfilment. We have made contractual arrangements with easyfeedback for the protection of personal data.
In addition to the recipients mentioned above, we have commissioned specialised service providers to support us in the operation of our IT applications, including web hosts, software providers, system administrators, auditors, testers and data centre operators. These bodies sometimes have access to personal data as part of their service fulfilment.

How long is personal data stored?
We store the raw data from the surveys permanently so that we can compare them with the results of subsequent surveys and thus identify developments.

Is the provision of data mandatory?
Participation in the surveys is voluntary. It is possible to cancel the survey at any time by closing the browser window. The answers provided up to that point remain saved.

SSL encryption
The collection of survey data is encrypted by default using the SSL encryption method SHA256.

What data protection rights do data subjects have?
Data subjects have the right to information about their data and, under certain circumstances, the right to rectification of data, erasure of data, the right to restriction of data processing and the right to data portability. 
There is also the right to withdraw consent granted, to object to processing based on the company's legitimate interest and to object to automated decisions within the legally prescribed framework. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Data subjects also have the right to lodge a complaint with a data protection supervisory authority.

status: 08.02.2024