Data privacy information for prospective students, students and alumni
We herewith wish to inform you how Esslingen University of Applied Sciences processes your personal data and about your rights under the data protection provisions (Art. 13, 14 and 21 EU-GDPR).
Questions and answers How Esslingen University of Applied Sciences deals with your data, and your rights
Who is responsible for data processing and whom can you contact?
Controller (Art. 4 Nr. 7 DS-GVO):
Hochschule Esslingen
Kanalstraße 33
73728 Esslingen am Neckar
Representative:
Prof. Christof Wolfmaier, President
Data protection officer:
The data protection officer can be contacted by letter at the address stated above, F.A.O. der/die Datenschutzbeauftragte or by sending an email.
Which sources and which data does Esslingen University of Applied Sciences use?
Esslingen University of Applied Sciences processes personal data which you provide it with so it can fulfil its tasks, or which are recorded during your studies so it can fulfil its tasks. These include in particular: last name, first name, date of birth, place of birth, gender, home and semester address, email address, nationality, language skills, university entrance qualification, degree course/type of course, practical vocational activities, occupational activities, justifications for hardship applications/applications to have waiting time shortened, medical certificates, username and password, student ID number, faculty or departmental affiliation, university semesters, subject-related semesters, internship / practical semesters, leave of absence semesters, breaks in study, and results of coursework and examinations.
For what purpose and on which legal basis are your data processed?
Esslingen University of Applied Sciences processes personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR), the Baden-Württemberg State Higher Education Act (LHG), the Baden-Württemberg State Data Protection Act (LDSG) and the Hochschule Esslingen Data Processing Statute).
- Performance of a task carried out in the public interest (Art. 6 Para. 1 (e) in conjunction with Para. 3 GDPR in conjunction with LHG or LDSG)
Personal data are processed as far as this is necessary to fulfil the tasks of Esslingen University of Applied Sciences (§§ 2, 29 ff. LHG). This concerns in particular university entrance, your studies, curricula, the examinations, the use of services provided by the university, maintaining contact with alumni (§ 12 LHG) and evaluation (§ 5 LHG). Furthermore, data processing for scientific or historical research purposes and for statistical purposes (Art. 89 GDPR, § 13 LDSG) and archiving purposes which are in the public interest (Art. 89 GDPR, § 14 LDSG).
- Consent (Art. 6 Para. 1 (a) GDPR)
If you have given consent to the processing of personal data for specific purposes, the lawfulness of this processing exists on the basis of your consent. Consent given can be revoked at any time, the revocation taking effect only for the future.
- Performance of a contract (Art. 6 Para. 1 (b) GDPR)
If you have concluded a contract with Esslingen University of Applied Sciences, the processing of personal data necessary for the performance of this contract is lawful. This also applies to measures which are necessary for measures prior to entering into a contract.
- Performance of a legal obligation (Art. 6 Para. 1 (c) GDPR)
Insofar as Esslingen University of Applied Sciences is under a legal obligation to process personal data, the processing necessary to comply with this obligation is lawful.
Who will receive your data?
Within Esslingen University of Applied Sciences, those parties will have access to your data which require them to perform the tasks of Esslingen University of Applied Sciences. The processors used by us (Art. 28 GDPR) may also receive these data for these purposes. Further recipients can be those parties for whom you have granted Esslingen University of Applied Sciences your approval for data transfer or those to whom Esslingen University of Applied Sciences is obliged to transfer data because of a contract which has been concluded or for legal reasons.
How long are your data stored?
Esslingen University of Applied Sciences stores personal data as long as is necessary to perform its tasks (§§ 2, 29 ff. LHG). Different retention times have to be taken into account here, which result from the Verwaltungsgerichtsordnung (VwGO), the Landesverwaltungsverfahrensgesetz Baden-Württemberg (LVwVfG), the German Civil Code (BGB) and the Richtlinie der Hochschule Esslingen über die Aufbewahrungsfristen von Schriftgut (Guidelines of Esslingen University of Applied Sciences on document retention times), among other things.
What are your rights under the data protection regulation?
You have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right of erasure (Art. 17 GDPR), the right of restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). For the right of access and erasure, the restrictions pursuant to §§ 8, 9, 10 and 11 LDSG apply. Moreover, you may contact the Landesbeauftragte/r für Datenschutz und Informationsfreiheit (State officer for data protection and freedom of information) Baden-Württemberg. (Art. 77, 51 GDPR in conjunction with §§ 20 ff. LDSG).
Do you have a duty to provide data?
Prospective students, students, examination candidates, members and staff of the university and the university administration, external users of university facilities, and the state and church examination authorities have a duty to provide Esslingen University of Applied Sciences with the personal data necessary for it to perform its tasks (§ 12 LHG in conjunction with Hochschule Esslingen Data Processing Statute). Failure to provide the data would result in the admission, the enrolment, the completion of the degree course, the admission to university examinations or the use of university facilities not being possible.
Information on the right to object pursuant to Art. 21 GDPR
You have the right for reasons relating to your particular situation to object to the processing of personal data concerning you at any time pursuant to Art. 6 Para. 1 (e) GDPR.
We will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
You have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Art. 89 Para. 1 GDPR.
We will then no longer process your personal data, unless the processing is necessary to perform a task carried out for reasons of public interest.
Please send your informal objection to Esslingen University of Applied Sciences.
Interested? Apply now! for the summersemester 2025
Get started
find a course