In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to the data protection regulations.
1. Contact persons
The responsible person in the sense of the general data protection regulation is:
University of Applied Sciences Potsdam
represented by the president
Prof. Dr. Schmitt-Rodermund
The data protection officer of the University of Applied Sciences Potsdam is:
Contact of the processing office
The central IT of the University of Applied Sciences Potsdam will provide information if you have any questions or comments:
2. Purpose and legal basis of the processing of personal data
The basic personal data (name, login, email address) are required for the provision of the service to users.
For students and lecturers, the basis for this processing is the EU general data protection regulation (EU-GDPR Art. 6 Para. 1 lit. e) and the Brandenburg university act (BbgHG §14 section 9).
For employees, it is the basis EU-GDPR Art. 88 and § 26 BbgDSG.
Furthermore, log files are generated by the services, which may contain personal or personal-related data. This processing is based on the EU general data protection regulation (EU-GDPR Art. 6 para. 1 lit. f), with the legitimate interest of ensuring IT security, the possibility of error diagnosis and for resource planning. This is regulated in the "Usage regulations for the IT facilities of the University of Applied Sciences Potsdam".
When recording conferences, the organiser/recorder must obtain and document the consent of the participants in advance.
3. What data do we use and from which sources does it originate?
When using FHPcast, you can also watch videos on the video portal without logging in. In this case, no data is requested from the user.
The log name and the IP address are stored in log files, together with the time of the event.
In order to constantly improve our website, we use the open source web analysis software Matomo.
Matomo allows us to receive real-time reports on the number of visitors, the search engines used and the search terms that led users to our website. This helps us to always optimise our offer according to the needs of our users and to adjust it accordingly.
In contrast to web analysis tools from external providers, the use of Matomo offers the advantage that the analysis is carried out by the responsible body itself (see section A) and not by an external service provider, i.e. no data (in particular your IP address) is transferred to third parties.
You can object to tracking with Matomo at any time via your browser settings ("Do Not Track") or at this point.
This is where the Matomo opt-out comes in
4. Who gets my data?
The administrators of the system must have access to the basic personal data (name, login, email address) in order to control access and for other administrative tasks.
Access to user files is only permitted in exceptional cases. This is regulated in the"Usage Regulations for the IT facilities of the University of Applied Sciences Potsdam" § 6, paragraph 6.
Video recordings are visible to the authorised groups of persons.
Technical and analysis data are only visible to the responsible administrators of the central IT. 5.
5. Duration of data storage / deletion periods
Account in Opencast
Until campus account is deleted, then 28 days.
Stored until the organiser/recorder deletes them or submits a deletion request to the central IT. The recordings on the recorders in the lecture halls are automatically deleted after 60 days from the recording date or when the hard disk capacity is reached by overwriting.
Log files are kept for 7 days and then automatically deleted.
Analysis data is automatically deleted after 6 months.
This does not apply to reports compiled from the analysis data (e.g. semester summary), but these no longer contain any personal data.
6. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
- You may request confirmation from the controller as to whether personal data concerning you are being processed. If such processing is taking place, you can request information about and a copy of this data from the controller in accordance with Article 15 of the GDPR.
- You also have the right to rectification (pursuant to Article 16 of the GDPR). If incorrect data is stored, you can partly adjust it yourself (profile data you have collected yourself) or request the persons responsible to do so. The data controllers will comply with the request, provided that the correction is justified and appropriate.
- You have a right to have the personal data concerning you deleted (in accordance with Art. 17 GDPR). You have a right to have data deleted that is actually incorrect or has no further purpose for the data controllers. You do not have the right to have data deleted if the data controller is obliged to retain the data for legal reasons or due to other obligations. The obligation to store data may also exist after exmatriculation. There is also no right to deletion if information was written by you yourself and this is in the context of information from other users (e.g. forum posts).
- You have a right to restriction of processing by the data controllers (in accordance with Art. 18 of the GDPR). The controllers will ensure that, in the event of restriction, data is only accessible to those persons who absolutely need to see the data. For this purpose, they may use the means of pseudonymisation and anonymisation.
- You have the right to object to this processing (in accordance with Art. 21 GDPR). You can object to the further use of the data. This can only take effect in the future. The right to object is not an automatic obligation for the data controller to delete the data. If the data controllers have storage obligations for other reasons, they will consider this and inform you.
- You have a right to data portability (in accordance with Art. 20 GDPR). You have a right to receive data that you have written yourself in an electronic format that can be used elsewhere. The right is limited to data that may not be transferred to another body or that affect the rights of others, e.g. copyright.
- You also have the right to lodge a complaint with a supervisory authority (pursuant to Art. 77 GDPR). In the event of a breach of legal provisions for the protection of data stored about you, you can contact the competent supervisory authority. (State commissioner for data protection and for the right to inspect files, www.lda.brandenburg.de).
Please first contact the processing agency, the person responsible or the official data protection officer at the University of Applied Sciences Potsdam (see point 2). In most cases, this will help to clarify questions and resolve complaints.
7. Is there an obligation for me to provide data?
No, the use of FHPcast is only an offer of the University of Applied Sciences Potsdam. Users can decide whether they want to use the service.