The following information informs the users of the CampusCard of the University of Oldenburg about the purposes, the processing framework, the legal basis and the rights regarding the processing of personal data in connection with the use of the CampusCard and thus represents, among other things, the information required by Article 13 of the European General Data Protection Regulation (GDPR) for those affected by data processing.

For the processing of personal data in the context of the CampusCard as a whole

University of Oldenburg,
Ammerländer Heerstraße 114-118,
26129 Oldenburg,
represented by its President

In case of technical problems or other questions (e.g. reissue, validation, etc.) with the CampusCard, please contact the

IT services of the university

sesk@uol.de

+49 441 798-5555

For all questions regarding the electronic wallet, please contact the

Student Services Oldenburg

+49 441 798-2709

And therefore the contact person for all questions relating to data protection is

The Data Protection Officer

Ammerländer Heerstr. 114-118
26129 Oldenburg

+49 441 798-4198

uol.de/data-protection

Data processing in connection with the CampusCard is governed by Art. 6 para. 1 lit. e) of the European General Data Protection Regulation (GDPR) in conjunction with Section 17 para. 1 sentence 2 of the Lower Saxony Higher Education Act (NHG) in conjunction with the Regulations on the Introduction and Use of the Electronic Student ID Card (CampusCard) at the University of Oldenburg.

The purposes for which users' personal data is processed are set out in §§ 3-5 of the CampusCard Regulations:

• Student ID/visual inspection
• Semester public transport pass
• Electronic wallet
• Library card
• Use of lockers

The CampusCard contains both visual data printed on the card and electronic data stored in the card chip. This data is collected directly from users as part of their enrolment / re-registering student or generated by the corresponding university systems.

(1) The following is printed on the CampusCard:

• the first name and surname;
• the student ID number;
• the photograph provided (this is required for use as a semester public transport pass);
• the library card number in clear text and as a barcode;
• the card serial number;
• the period of validity of the CampusCard and the semester public transport pass;
• the visual features for use as a semester public transport pass;
• the University logo and the type of card.

(2) The following data is stored physically or logically separated in the data memory of the RFID chip in the CampusCard for identification purposes:

• the library card number;
• the number of the electronic wallet (wallet number) of the Studierendenwerk and, if the wallet is used, the current credit balance;
• the card serial number;
• the type of card;
• the period of validity of the CampusCard and the semester public transport pass;
• the locking system code;
• the access number.

(3) The personal data required for the use of the CampusCard will be processed on secure systems of the IT services of the University of Oldenburg.

(4) The personal data not yet required for one of the functions listed in §§ 3 to 5 of the CampusCard Regulations (see also: Purposes) will be processed for the purpose of preparing further functions.

(5) If users make use of the electronic wallet function, Studentenwerk Oldenburg will only process the wallet number (pseudonym), which it cannot personally assign to any user without a corresponding reason to be triggered by the user (e.g. refund of credit) (see also: Terms of use for the electronic wallet). The University has concluded a corresponding cooperation agreement with the Studentenwerk Oldenburg and has also regulated data processing in an order processing contract. Beyond this, no personal data will be transmitted to third parties unless the University of Oldenburg is subject to a legal obligation to do so.

(6) The photograph is generally stored for the purpose of reissuing a card.
The stored image, as well as the necessary personal data processed in the background systems, can only be accessed by the employees of the Admissions Office and the system administrators of the IT services of the University of Oldenburg.

(7) The personal data required for the use of the CampusCard will be deleted from the systems used for this purpose one year after De-registration has taken place.
This does not apply to the data required to determine authorised credit holders (wallet function). The latter will be deleted three years after De-registration.

(8) The users themselves must ensure that the CampusCard is handled and used in accordance with data protection regulations.

CampusCard users have the following rights as data subjects affected by data processing:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• You can revoke any consent you have given at any time with effect for the future without affecting the legality of the processing carried out on the basis of the consent until revocation (Art. 7 para. 3 GDPR)

If you, as a CampusCard user, are of the opinion that the processing of your personal data violates data protection regulations, please contact the data protection officer (contact details: see above). Irrespective of this, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is

The State Commissioner for Data Protection of Lower Saxony

Prinzenstraße 5
30159 Hanover

+49 511 120-4500

+49 11 120-4599