Last revised on: 17/06/2019

1 Details of the data processor

1.1 Name and contact details of the controller:
University of Oldenburg
Ammerländer Heerstr. 114-118
26129 Oldenburg
Phone: +49 (0)441 7980

1.2 Contact person
Tim Zentner
C3L – Centre for Lifelong Learning
University of Oldenburg
Ammerländer Heerstr. 136
26129 Oldenburg
c3l-datenschutz@uni-oldenburg.de

1.3 Name and contact details of the Data Protection Officer
University of Oldenburg
The Data Protection Officer
Ammerländer Heerstr. 114-118
26129 Oldenburg
Phone: + 49 (0)441 7984196
Email: dsuni@uni-oldenburg.de
uol.de/datenschutz/

2 Scope of processing

2.1 Duration for which the personal data is stored
It is not possible to give a specific indication of the storage duration. The storage duration is determined according to the following criteria:

• Storage for information purposes
  Your contact details and interests will be stored unless you object so that you can receive current offers and information.
• Storage for newsletters etc.
  Your contact details will be stored unless you object so that you can receive the latest version.
• Storage in the context of participation in degree programmes, certificates, courses, further training sessions etc.:
  We will store your contact details and any other data you have provided us exclusively in connection with your participation. The contact details will be processed permanently (unless permission is revoked accordingly) in the online learning environment in the context of alumni networking expressly requested by the students/participants. This approach is also reflected in Section 17.1 of the  NHG (“„[…] Maintaining contact with former university members […]”). You can freely edit any additional personal data you may have provided on a voluntary basis at any time. The University of Oldenburg’s retention periods apply to all degree programmes. The minimum duration is 5 years for all examination-related records. For all other certificates, courses, further training sessions etc., we will also store your data for a duration of 5 years.

2.2 Purpose for which personal data is processed:
Your data will be exclusively used and processed to fulfil the desired purpose and mission, in particular within the framework of our contractual and legal obligations. Moreover, we will only use your contact information to keep you informed of new developments, courses etc.

2.3 Legal basis for processing
The legal basis for processing within the context of a study programme is Art. 6.1 (e) GDPR in conjunction with Section 17 of the Lower Saxony Higher Education Act (NHG).
If there is a contractual relationship, the legal basis is Art. 6.1 (b) GDPR in conjunction with the respective continuing education/training contract.
The legal basis for all other purposes is the consent in accordance with Art. 6.1 (a) GDPR.

2.4 Provision of data
Provision of personal data is required for participation in courses, further training sessions, certificates, degree programmes etc. as well as the administration involved.

2.5 Consequences of failure to provide personal data
Failure to provide personal data would result in us being unable to provide you with the desired information or would make it impossible to participate in our programmes.

2.6 Existence of automated individual decision-making (incl. profiling)
There is no automated individual decision-making (incl. profiling).

3 Transfer and international dimension

3.1 Recipients or categories of recipients of personal data
As a matter of principle, data is not transmitted to third parties.

However, your contact details will be processed as part of the alumni work in the online learning environment and can only be viewed by current or former students/participants (as well as lecturers and mentors) of your (former) degree programme / training course.

3.2 Transfer to a third country / an international organisation
Transfer to a third country / an international organisation is not intended.

In principle, any country outside of the European Union is considered a third country.

4 Your rights as a data subject

The data subject has the following rights:

• You can request information about the personal data stored about you at any time free of charge.
• If there is incorrect personal data about you, you can request that it be rectified at any time.
• You can request the erasure of your personal data at any time unless legal retention periods (e.g. for participation in degree programmes) prevent this.
• You can request the restriction of processing of your personal data at any time.
• You can object to processing of your personal data at any time.
• You have the right to data portability under the conditions of Art. 20 GDPR.
• You can revoke any consent you may have given at any time with effect for the future without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
• If you believe that the processing of your personal data violates data protection regulations, please contact the Data Protection Officer (see point 1.3). Irrespective of this, you have the right to lodge a complaint with the competent supervisory authority.
  
  The competent supervisory authority is:
  
  The State Commissioner for Data Protection of Lower Saxony
  Prinzenstraße 5
  30159 Hanover
  Phone: +49 (0)511 1204500
  Fax: +49 (0)511 1204599
  Email: poststelle@lfd.niedersachsen.de

C3L – Centre for Lifelong Learning
University of Oldenburg
Ammerländer Heerstr. 136
26129 Oldenburg

5 Interested party data management (CRM)

Purpose
Customer acquisition; support of interested parties

Processed data

• Last name, first name
• Email address
• Phone
• Role in the company
• Address
• Date of birth 
• Employer
• Professional experience

Legal basis 
Consent, Art. 6.1 (a) GDPR (general)

Storage duration 
Deletion after registration/application or after completion of the (personal) process. Set period: 2 years following the start of the (personal) process

Contact person for revoking consent
University of Oldenburg
C3L – Centre for Lifelong Learning
Email: c3l@uni-oldenburg.de