Privacy

This notice explains how personal data are processed when you visit our website or contact us. It applies to fsr-ins.sturahsa.de in German and English. Linked services are covered by their respective providers’ privacy notices.

1. Controller and privacy contact

Email: stura@hs-anhalt.de

The executive committee (Sprecherrat) of the Student Council at Anhalt University of Applied Sciences is responsible for data protection on this website. Please address privacy enquiries to the Sprecherrat at the postal or email address above.

2. Website access and technical logs

When you visit our website, we process technically necessary connection data, including your IP address, the time of access, the requested address and usual HTTP connection information. We need these data to deliver the website, identify errors and protect the service. The legal basis is Article 6(1)(e) GDPR in conjunction with section 65 of the Higher Education Act of Saxony-Anhalt (HSG LSA).

We do not keep routine access logs or compile usage statistics. Error logs may contain IP addresses, timestamps, requested addresses and technical error messages.

Website error logs are rotated daily and automatically deleted within seven days during normal operation. Missed clean-up runs are completed on restart after an interruption. Where a specific security incident occurs, necessary extracts may be retained separately until investigation and mitigation are complete, then deleted unless statutory retention duties apply.

3. Hosting and recipients

Our website is hosted on a server in Germany. We use the following hosting provider:

Hostinger processes data on our behalf under an agreement pursuant to Article 28 GDPR. The Data Processing Addendum covers sub-processors and international data transfers. Where data are transferred to third countries, the agreement provides in particular for EU Standard Contractual Clauses as safeguards. Hosting the server in Germany therefore does not mean that all processing takes place exclusively in Germany. You can request information about the relevant safeguards and, where applicable, a copy from our privacy contact.

Access is limited to people entrusted with operation and handling enquiries, and necessary processors within their duties. Data may be disclosed to competent authorities where required by law.

4. Contact by email

If you email us, we process your email address, message and other information you provide to handle your enquiry. The legal basis is Article 6(1)(e) GDPR in conjunction with section 65 HSG LSA. Article 6(1)(b) GDPR applies to steps prior to entering a contract or its performance.

Providing information is voluntary. We may be unable to handle an enquiry without necessary details. General enquiries are deleted no later than six months after final resolution. Statutory retention duties and necessary retention for establishing, exercising or defending specific legal claims remain applicable.

5. Cookies, language and local resources

The website sets no cookies and uses neither Local Storage nor Session Storage. It uses no analytics, advertising or tracking services. There is no automated decision-making, including profiling.

The page address determines the language. No language preference is stored. Fonts, including Inter, images, styles and scripts are served locally from our own server. Normal browser caching remains possible.

6. External links

Campus Köthen, the Student Council’s feedback portal, our meeting minutes on docs.sturahsa.de, Instagram and Erik Engler’s website are accessible through ordinary links. The legal pages also include information links to Inter, Hostinger, legislation and the data protection authority. These services are not contacted merely by loading a page. They are accessed only when you follow a link; their own privacy notices then apply.

The FSR website does not receive entries submitted through the external feedback form. It contains no external embeds.

7. Members’ names and roles

We publish our members’ names and roles so that you can find out about your student representatives. The legal basis is Article 6(1)(e) GDPR in conjunction with section 65 HSG LSA. This information is publicly accessible, including to search engines. It is published during members’ terms and removed when the website is updated after they leave. Please report outdated details to the FSR at ins.fsr@hs-anhalt.de or the privacy contact.

8. Photographs

We display a group photograph to introduce the FSR and a photograph of StudiLink to give you an impression of the room. People are identifiable in the group photograph. It is publicly accessible and may be indexed by search engines and saved by third parties.

The group photograph is published with the consent of the people shown, on the basis of Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time with effect for the future by contacting our privacy contact or ins.fsr@hs-anhalt.de. Withdrawal does not affect the lawfulness of publication before consent was withdrawn.

We publish the group photograph for as long as it is needed to introduce the FSR and the necessary consents remain in place. If consent is withdrawn, we end the publication on our website that relies on that consent. We have no direct access to copies independently stored by third parties.

9. Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and, where applicable, data portability (Article 20).

Right to object: Where processing is based on Article 6(1)(e) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will then stop processing the relevant data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is necessary to establish, exercise or defend legal claims.

Where processing relies on consent, you may withdraw it at any time with effect for the future under Article 7(3) GDPR. This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, contact the privacy contact above.

10. Right to lodge a complaint

Under Article 77 GDPR, you may complain to a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The authority in Saxony-Anhalt is:

Email: poststelle@lfd.sachsen-anhalt.de
Official contact page of the supervisory authority (German)

Full text of the General Data Protection Regulation