Privacy policy for online surveys
In this
privacy policy, we provide information on how we process your personal data in
connection with online surveys (via IT-supported survey systems).
Further
information on the handling of your data can be found at:
https://www.rwu.de/kontakt/datenschutz
Name and address of the responsible body
Responsible body within the meaning of Art. 4 (7) GDPR:
Hochschule Ravensburg-Weingarten, University of Applied Sciences
Represented by the Rector Prof. Dr.-Ing. Thomas Spägele
Doggenriedstraße
88250 Weingarten
Phone +49 751 501-9344
Email: info@rwu.de
Website: www.rwu.de
External data protection officer
Our external data protection officer can be contacted at:
Email: dsb@rwu.de
Website: https://www.exacon-gmbh.de
Data
subjects can contact the responsible body or the data protection officer
directly with any questions relating to data protection and the processing of
their personal data.
Information on data processing
Type and
purpose of processing:
The Ravensburg-Weingarten
University of Applied Sciences uses IT-supported survey systems to conduct,
create and publish web-based surveys. The survey results are recorded in a
database and can be evaluated or exported by the survey creator using internal
functions. To create surveys, a registration in the corresponding system is
required, participation in however, participation in surveys is generally
possible without registration. As a rule, personal identification data is not
collected, which means that participation in the survey is largely anonymous.
However, demographic data may be collected on the basis of which cannot be
completely ruled out (especially in the case of small groups of participants).
Data categories:
Whether personal
data is processed when conducting a survey and what type of data/data
categories are collected depends on the type of survey and is the
responsibility of the survey creator responsible for the survey. Typically, e.g.
demographic data can be requested and processed, such as age, gender, place of
residence, income and social characteristics such as occupation, marital
status, number of certain family members. Belonging to certain groups of people
or personal preferences or behaviors may also be the subject of a survey. In
addition (depending on the survey tool used), the following system data may be
processed automatically:
- IP addresses of users
- Browser cookies to exclude repeated participation
- Browser type and version / operating system used by the user
- Date and time stamp
- CAPTCHA test, if applicable
Legal basis:
Participation
in online surveys and the resulting data processing takes place on the basis of
your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
We do not
pass on the data to third parties unless they are intended for disclosure or we
are legally obliged to do so. Please note that content from online surveys in generally
constitutes project-related data and is disclosed to colleagues or other project
participants who are involved in the relevant project. In addition, statistical
data may be published from surveys or passed on to external project
participants.
Recipients
of the data are technical service providers (such as providers of survey tools)
who act asprocessors for us.
SoSci
Survey: When conducting surveys with the software solution “SoSci Survey”, data
is transferred to the provider “SoSci Survey GmbH, Marianne-Brandt-Str. 29,
80807 Munich / Germany”, with whom we have concluded an order processing
contract in accordance with Art. 28 GDPR.
Storage period:
If a
personal reference can be established, the data will be anonymized at the
earliest possible time. The data is deleted as soon as it is no longer required
for the project for which it was collected. Depending on the type or duration
of the project, this may be a different period (typically between 6 months and
10 years).
Consequences of not providing data:
Participation
in online surveys and the provision of all data is voluntary. You are neither
legally nor contractually obliged to provide Ravensburg-Weingarten University
of Applied Sciences with your personal data. However, it is possible that
participation in a survey depends on the provision of demographic and thus
personal data as well as the processing of system data. If you refuse the
processing of your data in these cases, this may result in the survey not being
available or only being available to a limited extent.
Withdrawal of consent:
Consent can
be withdrawn at any time with effect for the future. Please send your
revocation to to the survey creator(s) responsible for the survey.
Alternatively, you can also contact the responsible body or data protection
officer. Please note, however, that an effective revocation is only possible if
the Ravensburg-Weingarten University of Applied Sciences can assign your
revocation to a specific data set. As a rule, this is only possible for surveys
that were conducted with the disclosure of your identity.
Automated decision-making
There is no
automated decision-making within the meaning of Art. 22 GDPR. If we should use
such a procedure in individual cases in the future, we will inform you of this
separately if this is required by law.
Your rights
as a data subject
To exercise
your data subject rights and other concerns in connection with data protection,
please contact the responsible body using the contact details provided or of
the data protection officer. As a data subject within the meaning of the GDPR,
you have the following rights vis-à-vis the responsible body:
Right to information (Art. 15 GDPR)
You can
request information about your stored data.
Right to rectification (Art. 16 GDPR)
You can
have incorrect data corrected.
Right to erasure (Art. 17 GDPR)
You can
request that we erase your data, provided that the legal
requirements
for this are met.
Right to restriction of processing (Art. 18
GDPR)
You can
request the restriction of the processing of your data, provided that the
legal
requirements are met.
Right to data portability (Art. 20 GDPR)
Where
technically feasible, you have the right to receive your data in a structured
format
Right to object (Art. 21 GDPR)
You may
object to the processing of your data at any time for reasons arising from your
particular
situation.
Right to withdraw data protection consent (Art.
7 para. 3 GDPR)
If you have
given your consent to data processing, you can withdraw this at any time with
effect for the future. The revocation does not affect the legality of the
processing carried out on the basis of the consent until the revocation. Please
send your revocation using the contact details provided for the data protection
officer or responsible body.
Deadlines for the fulfillment of data subject
rights
We
generally endeavor to comply with all requests within 30 days. However, this period
may be extended for reasons relating to the specific data subject right or the
complexity of your request.
Responsible
supervisory authority
We take
your concerns and rights very seriously. However, if you believe that we have
not sufficiently addressed your complaints or concerns, you have the right to
lodge a complaint with a competent data protection authority.
The State
Commissioner for Data Protection and Freedom of Information
P.O. Box 10
29 32
70025
Stuttgart
Phone: 07
11/61 55 41-0
Fax: 07
11/61 55 41-15