The Paderborn University student survey aims to systematically analyse the experiences and needs of students during their studies. The contact details used will not be used by Department 6.1 for any other purpose than to invite and remind students to take part in the student survey. They will not be passed on to third parties. Once the survey has been completed, all contact details will be deleted.

Contact data and survey data are stored strictly separately, so that no connection can be established between survey data and contact data.

All results from the surveys are published in aggregated form and therefore do not allow any conclusions to be drawn about individual persons.

The web server for the online survey is institutionalised and operated by ISTAT. ISTAT is a company founded by the University of Kassel and has proven to be a reliable partner for universities in projects involving surveys. ISTAT supports Paderborn University with the technical realisation of the student survey.

The information provided by respondents is analysed and interpreted at Paderborn University by Department 6, Subject Area 6.1.

In addition, together with the data protection officer, the faculties of Paderborn University are given access to the respondents' data in compliance with data protection regulations for the purpose of academic research and to review their own study programmes.

Information on the processing of personal data as part of the student survey

(Version from 9 October 2018)

With this data protection information, Paderborn University fulfils its duty to provide information in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (EU GDPR) for the above-mentioned processing of personal data.

With regard to the other terms used, "personal data", "processing", "controller", "third party", etc., please refer to the definitions in Article 4 of the EU GDPR.

1. Contact details

Paderborn University, a public corporation with legal capacity supported by the state of North Rhine-Westphalia, is responsible for the processing. It is represented by the President.

1.1 Contact details of the controller

Paderborn University

Warburger Straße 100

33098 Paderborn

Phone: 05251 60-0

www.uni-paderborn.de

1.2 Contact address for questions

E-mail: student survey[.at.]zv.paderborn.university.de

Phone: 05251 60-3897

1.3 Contact details of the data protection officer

You can contact the data protection officer of Paderborn University by post at the above address of the person responsible or as follows:

E-mail: datenschutz@uni-paderborn.de

Phone: 05251 60-4444

http://www.uni-paderborn.de/datenschutz

2. Processed personal data and purposes

The student survey aims to systematically analyse and evaluate your studies at Paderborn University

The survey is conducted online with the support of the Institute for Applied Statistics (ISTAT); ISTAT also operates the web server for conducting the survey. Paderborn University is responsible for the content of the survey.

The invitation to the survey and the university-specific evaluation of the survey is carried out by Paderborn University.

Students are asked to take part in the survey by means of a cover letter sent by email. Paderborn University uses the students' email addresses stored in PAUL for this purpose.

The address data used for the invitation to participate in the survey will not be used for any other purpose than for the invitation and reminder to participate in the graduate survey.

As part of a second survey four to five years after graduation, only those graduates who leave their contact details with ISTAT for the repeat survey at any time during the initial survey will be contacted.

The following existing student data will be processed by Paderborn University to initiate the evaluation: Surname, first name, UPB e-mail address(es), matriculation number. The following data is processed for the purpose of the representativeness check: Study status, gender, (intended) degree, subject/subjects studied, duration of study, date of birth, type of higher education entrance qualification and nationality.

Paderborn University will provide you with a personal access code to participate in the survey. This access code is a randomly generated sequence of 6 letters and numbers.

The survey data (i.e. the answers of the respondents) are separate from the personal data (name, address, etc. of the respondent) and are stored separately from each other, so that no connection can be established between the survey data and personal data.

The information provided by the respondents is analysed and interpreted at Paderborn University by Department 6, Subject Area 6.1.

All results from the surveys are published in aggregated groups and therefore do not allow any conclusions to be drawn about individual persons. The faculties receive standardised evaluations at degree programme level for the degree programme evaluation.

3. Legal basis

The legal basis for the processing of personal data as part of the student survey at Paderborn University is Art. 6 para. 1 lit. e. EU-GDPR. The processing is carried out as part of the fulfilment of the University's tasks in accordance with Section 7 (2) and Section 8 (5) of the Higher Education Act of North Rhine-Westphalia (HG NRW) in conjunction with Section 6 of the Evaluation Regulations of Paderborn University.

The collection of personal data as part of the survey by ISTAT is based on the consent of the data subjects in accordance with Art. 6 para. 1 lit. a. EU-DSGVO.

4. Data sources

The data processed to initiate the evaluation is taken from the Paderborn University campus management system.

5. Data transfers

We do not transfer your email address data, which is processed by Paderborn University as part of the student survey, to third parties.

The faculties receive standardised, anonymised evaluations of the survey, i.e. at degree programme level for the degree programme evaluation. All results from the surveys are published in aggregated groups and therefore do not allow any conclusions to be drawn about individual persons.

Researchers at Paderborn University are granted access to the non-personal details of respondents for the purpose of academic research in accordance with data protection regulations. Access is generally only granted after an application procedure has been completed, in the course of which, among other things, the necessity of access and compliance with technical and organisational protective measures is checked.

6. Duration of processing/data deletion

The address data processed at Paderborn University will be deleted after completion of the survey or - if the data is in the form of paper documents - destroyed.

7. Your rights as a data subject

As a data subject, you can assert the rights granted to you by the EU GDPR at any time:

• the right to information as to whether and which of your data is being processed (Art. 15 EU GDPR);
• the right to request the rectification or completion of data concerning you (Art. 16 EU GDPR)
• the right to erasure of the data concerning you in accordance with Art. 17 EU GDPR
• the right to request the restriction of the processing of data in accordance with Art. 18 EU GDPR
• the right to object to the future processing of data concerning you in accordance with Art. 21 EU GDPR.

In addition to the aforementioned rights, you have the right to lodge a complaint with the data protection supervisory authority (Art. 77 EU GDPR), for example with the

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Kavalleriestraße 2-4

40213 Düsseldorf

Telephone: 0211 38424-0

E-mail:

8. Validity of this data protection notice

We reserve the right to amend this data protection notice in order to adapt it to changes in relevant laws or regulations or to better meet your needs. This data protection notice applies in the version last published by the university.