Privacy Statement for (external) Business Relations

In the following, you will find information about the processing of your personal data in the context of the business relationship between the University of Koblenz and you or your employer, as well as about the rights you are entitled to.

1. Name and address of the controller

University of Koblenz

Universitätsstraße 1

D-56070 Koblenz

Germany

Phone: +49 261 287-0

E-Mail: service@uni-koblenz.de

2. Name and address of data protection officer

Konstantin Wagner

Universitätsstraße 1

D-56070 Koblenz

Germany

Phone: +49 261 287 2860

Contact via E-Mail: datenschutz@uni-koblenz.de

Working with external partners such as suppliers, cooperation partners, guest speakers, lecturers and other contractual partners, and concluding related contracts, requires the processing of personal data necessary for this cooperation. Generally, this includes master data, contact details, contract data and data relating to the business relationship. Without this data, we would not be able to cooperate with you or your employer.

In addition, information may be processed in the course of existing business relationships if it is necessary for the provision of services specified in our contract, including internal records and administration. Further details on the processing of personal data may also arise from our contractual relationship with you or your employer.

Furthermore, we store this data in order to comply with legal obligations to which we are subject and, where applicable, to assert and defend legal claims. Legal obligations may arise, for example, from commercial, tax, money laundering and financial law.

The legal basis for the above data processing is Article 6(1)(b) (initiation or performance of a contract), (c) (compliance with legal obligations) and (e) (performance of a task carried out in the public interest), paragraphs 2 and 3 of the General Data Protection Regulation (GDPR), Section 3 of the Rhineland-Palatinate State Data Protection Act (LDSG-RLP) and, where applicable, Article 6(1)(f) GDPR, which stipulates that the University has a legitimate interest in storing data as evidence for asserting and defending legal claims.

4. Obligation to provide personal data

In principle, there is no obligation to provide your personal data. However, depending on the specific case, the provision of your data may be necessary for the initiation or performance of a contract. Not providing personal data for this purpose may result in delays in processing your enquiry, failure to conclude a contract or termination of the contract.

In addition, the provision of data may be necessary in individual cases to fulfil our legal obligations (in particular documentation obligations). Failure to provide data would mean that we would not be able to comply with our legal obligations, which could make you liable for damages in the event of a penalty being imposed on us.

5. Source and recipients of personal data

We may process not only personal data that we have received directly from you, but also data that we have received from third parties, such as your employer. This could be contact details that your employer has provided to us, for instance.

Depending on the business relationship, personal data may also be transferred to business partners or public authorities if this is necessary for the execution of the contract. These parties are contractually or legally bound to maintain confidentiality. Under certain circumstances, we may also pass on your data to authorities or courts if we are legally obliged to do so. In addition, we use service providers whom we commission to provide services, for example in the areas of technical infrastructure and maintenance of our IT systems. This may also involve access to personal data. These processors have been carefully selected by us and may only use the data for the purposes specified by us.

Furthermore, personal data processed by the University of Koblenz will not be transferred to other third parties unless you have expressly consented to the transfer in advance or there is a legal obligation to do so.

6. Retention period and data deletion

We store your personal data for as long as is necessary to fulfil the respective purposes and until any limitation periods and retention periods have expired.

If the purpose of storage no longer applies or if a storage period prescribed by law to which University of Koblenz is subject has expired, the personal data will be routinely deleted or its processing restricted in accordance with the statutory provisions.

7. Location of data processing

In principle, we process your personal data only in Germany and they are not transmitted to third countries.

8. Automated decision-making

There is no automated decision-making, including profiling, within the meaning of Article 22 of the GDPR.

9. Data subject rights

As a data subject, you have the following rights under the GDPR:

Right of access: You have the right to receive information about the personal data pertaining to you that we process.

Right to rectification: You may demand that inaccurate personal data will be rectified. Furthermore, you may demand that incomplete data will be completed.

Right to erasure: In certain cases, you are entitled to demand the erasure of your personal data.

Right to restriction of processing: In certain cases, you are entitled to demand that we restrict the processing of your data.

Right to data portability: If you have made the data available to us based on a contract or consent, you are entitled to demand to receive the data which you provided to us in a structured, commonly used and machine-readable format or to have them transmitted by us to another controller.

Withdrawal of consent: If you have given us your consent as to the processing of your data, you may withdraw the consent at any time with effect for the future. This does not affect the legitimacy of the processing of your personal data before the withdrawal of the consent.

Right to object: You have the right to object at any time to the processing of your personal data on the basis of Art. 6(1)(e) and (f) GDPR for reasons arising from your particular situation.Your personal data will then no longer be processed unless we can provide compelling protected reasons for such processing that outweigh your interests, rights and freedoms, or the processing is necessary for the assertion of, exercise of, or defence against any legal claims.

Asserting your rights: To assert any of your abovementioned rights, please contact us by email at datenschutz@uni-koblenz.de or in writing at the above address. Please ensure that we are able to clearly identify you.

Right to complain to a supervisory authority: You have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The supervisory authority responsible for us is:

The Rhineland-Palatinate DPA (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany

E-Mail: poststelle@datenschutz.rlp.de