Privacy policy

Data protection
Data protection is a high priority at the University of Lübeck. Therefore, the protection of your personal data is also of particular concern to us. When handling your personal data, we comply with all relevant regulations (such as the General Data Protection Regulation (DSGVO), the German Telemedia Act (TMG), the State Data Protection Act LDSG-SH, the Federal Data Protection Act (BDSG)) as amended. In addition, we take the technical and organizational measures necessary for appropriate data security.

In the following, we would like to inform you about how we process your personal data. You will find an overview of our data processing here. Depending on the relationship you have with us, the respective data processing applies to you.

Note: We always try to present the information in a comprehensible way. Should you nevertheless have any questions or other comments, please feel free to contact us about this at any time.

Person responsible for processing:

University of Lübeck
Prof. Dr. med. Gabriele Gillessen-Kaesbach - President -
Ratzeburger Allee 160
23562 Lübeck
Germany

Phone: +49 451 3101 1000
E-mail: praesidentin(at)uni-luebeck(dot)de
Website: www.uni-luebeck.de

Your rights
If personal data is processed by you (collected, recorded, stored, evaluated, modified, read, queried, disclosed, disseminated, matched, linked, restricted, deleted, destroyed, etc.), you are a data subject within the meaning of the GDPR. As a data subject, you are entitled to the following rights vis-à-vis any* controller who* processes your personal data:

Information (Art. 15 DSGVO)
Correction (Art. 16 DSGVO)
Deletion (Art. 17 DSGVO)
Restriction (Art. 18 DSGVO)
Data portability (Art. 20 DSGVO)
Objection (Art. 21 DSGVO)

Note on the right of objection
Pursuant to Art. 21 DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO. The right to object may therefore be exercised if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or
is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (in particular where you are a child), and the controller cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing does not serve to assert, exercise or defend legal claims. The right to object may furthermore be asserted if the processing is carried out for direct marketing purposes.

Complaint
If you are of the opinion that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, please contact us. This will enable us to address your concerns. However, you also have the right to contact the Independent Center for Data Protection Schleswig-Holstein https://www.datenschutzzentrum.de/meldungen.

Data Protection Officer
The University of Lübeck has appointed x-tention Informtaionstechnologie GmbH as its external data protection officer. This person primarily has the following tasks: he advises and monitors the University of Lübeck as an independent body with regard to compliance with obligations in connection with data protection requirements.
In addition, the data protection officer is available as a point of contact for data subjects. Data subjects may consult the Data Protection Officer on all matters relating to the processing of their personal data and the exercise of their rights under this Regulation.
The Data Protection Officer is subject to a legal duty of confidentiality in the performance of his/her duties (Article 38 (5) GDPR). This applies in particular with regard to the identity of data subjects who contact or have contacted the data protection officer.