PRIVACY INFORMATION
As of January 18, 2024
I. Information on the processing of your data in accordance with Article 13 of the European Union General Data Protection Regulation (GDPR)
Folkwang University of the Arts
Department of Design / Industrial Design / SBYD.SPACE
Martin-Kremmer-Str. 21
D-45327 Essen
Tel: +49 201 6505-1545
Folkwang University of the Arts is a corporation under public law, legally represented by the Rector Prof. Dr. Andreas Jacob.
The universities of art and music in North Rhine-Westphalia, Germany have appointed a joint supervisory authority, whom you can contact as follows:
Folkwang University of the Arts
Regulatory Data Protection Officer
Klemensborn 39
45239 Essen
Phone: +49 201 4903-0
E-mail: behoerdlicher-datenschutz@folkwang-uni.de
2. Data processed for website provision and log file creation
a. What data is processed for what purpose?
On each access to the website content, data is temporarily stored that may allow identification. The following data is collected:
– Date and time of access
– IP address
– Hostname of the accessing computer
– Website from which the website was accessed
– Websites accessed through the website
– Visited page on our website
– Notification as to whether the retrieval was successful
– transferred data volume
– Information about the browser type and version used
– Operating system
The temporary storage of data during a website visit is required to enable the website delivery. Further storage in log files is done to ensure the functionality of the website and the security of information technology systems. Our legitimate interest in data processing is also based on these purposes.
b. On what legal basis this data is processed?
The data is processed based on of Article 6(1)(f) GDPR.
c. How long will the data be stored?
The data is deleted as soon as it is no longer required for the purpose of its collection. In the case of website provision, this occurs when the respective session is terminated. The log files are stored directly and exclusively accessible to administrators for up to 24 hours. Afterwards, they are only available indirectly through reconstruction of backup tapes and are permanently deleted after four weeks of storage.
3. Social media presences
As part of our public relations work, as well as our freedom of research, teaching, and art we create content on official social media accounts and thus see contributions and interactions of the community with them. It is our ambition to provide the target audience with specific content and to encourage them to interact with us on these platforms.
Content and contributions or inquiries that violate the rights of third parties or constitute a criminal offense or administrative offense do not comply with legal or contractual obligations. In such cases we disclose them to the relevant authorities and social media providers and may block or delete them.
The legal basis for data processing on our social media offerings and elements is in accordance with Article 6(1)(e) GDPR in conjunction with § 3(3) KunstHG.
Social media posts and messages that you have not publicly transmitted to us are regularly reviewed to determine if whether storing your inquiries is still necessary. If no further requirements exist your data will be restricted in processing and stored according to legal retention obligations and in compliance with archive law.
If you have communicated with us through social media recognized by the public or parts thereof, you may decide on the duration of publication yourself or request deletion. We delete this data in compliance with archiving law within our area of responsibility. If copies of the data remain in our possession after deletion, they will be restricted in processing and stored according to legal retention obligations and considering archive law.
Additional data privacy policies given by service providers or services:
Social media providers often create comprehensive profiles of their members and those who get in touch with their telemedia services (e.g., clicking a “like” button or visiting websites). These profiles are used, among other things, for advertising purposes. If you use our offerings with these providers, they are aware that there is a relationship between you and us. As we are in parts jointly responsible for these data processing activities with the providers, we provide further information on data processing by the providers here.
You can limit the amount of these data processing activities through general browser settings or browser extensions. Recommended information can be found at https://www.privacy-handbuch.de/handbuch_21.htm. Providers also offer individual settings to manage, for example, advertisements and tracking. This sometimes requires accounts with the respective providers. We have listed important information, including essential terms of use, here for you.
a. Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com
Terms of Use: https://help.instagram.com/581066165581870
Privacy policy: https://help.instagram.com/519522125107875
Cookie policy: https://help.instagram.com/1896641480634370
Platform policy: https://help.instagram.com/325135857663734/
Opt-out options: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/
b. LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland
Website: https://www.linkedin.com
Privacy Policy: https://de.linkedin.com/legal/privacy-policy
User agreement: https://www.linkedin.com/legal/user-agreement
Cookie policy: https://www.linkedin.com/legal/cookie-policy
Page policies: https://www.linkedin.com/help/linkedin/suggested/34593/linkedin-professional-community-policies
Opt-out options: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
4. Rights of the data subject
a. Right of access
You may request information in accordance with Article 15 GDPR about your personal data processed by us.
b. Right to object
You have the right to object for specific reasons (see point II).
c. Right to rectification
If the information concerning you is not (anymore) accurate, you may request rectification in accordance with Article 16 GDPR. If your data is incomplete, you may request completion.
d. Right to deletion (‘right to be forgotten’)
You may request the erasure of your personal data in accordance with Article 17 GDPR.
e. Right to restriction of processing
In accordance with Article 18 GDPR, you have the right to request restriction of the processing of your personal data.
f. Right to complain
If you believe that the processing of your personal data violates privacy law, you have the right to lodge a complaint with a supervisory authority of your choice in accordance with Article 77 (1) GDPR. This includes the supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
g. Right to data portability
If the conditions of Article 20 (1) GDPR are met, you have the right to receive the data processed based on your consent or in fulfilment of a contract in an automated manner, either to yourself or to third parties. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR but are justified pursuant to Article 6(1)(f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not fulfilled in this regard.
5. Validity of this data privacy information
We reserve the right to amend this privacy information to adapt it to changes in relevant laws or regulations or to better meet your needs. This privacy information is valid in the last version published by the university.
II Right to object in accordance with Article 21 (1) GDPR
You have the right, for reasons arising from your particular situation to object at any time to the processing of your personal data based on Article 6(1)(e) GDPR. The controller will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise, or defence of legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website and are therefore mandatory.