Privacy policy for the processing of personal data in connection with semester ticket reimbursement („bundesweites Semesterticket“)

According to the applicable rules of the EU General Data Protection Regulation (GDPR) / Datenschutzgrundverordnung (DSGVO), we are required to inform you about our privacy principles and your rights.

Processor/person responsible for data processing

AStA University of Rostock
AStA Finance Department
Friedrich-Engels-Platz 6
18055 Rostock
finanzen.asta@uni-rostock.de

Data Protection Officer

Data Protection Officer
AStA University of Rostock
Friedrich-Engels-Platz 6
18055 Rostock
datenschutz.asta@uni-rostock.de

Purpose of data processing

Your data will be processed for the purpose of semester ticket reimbursement.

The collection of data is necessary for the above-mentioned purpose. Without the processing of the data, a reimbursement of the semester ticket is not possible.

Data will not be transferred to third countries in accordance with Articles 45-49 GDPR. The personal data is stored exclusively on servers in Germany.

Legal basis for data processing

Data collection is required in accordance with Art. 6 para. 1 lit. c GDPR in conjunction with Art. 6 para. 3 GDPR in conjunction with § 7 para. 1, 4 LHG M-V, § 4 para. 1 DSG MV and § 9 Data Protection Statutes of the University of Rostock in conjunction with §24 para. 2 no. 2 LHG M-V to fulfil a legal obligation. The further processing and transfer of the data is carried out in accordance with Art. 6 para. 1 lit. b GDPR. The personal information to be transmitted results from § 7 para. 5 of the student body's contribution regulations.

Personal data collected

The following personal data is collected as part of the application process and is processed by us:

• form of address, first name, surname
• date of birth
• address / residential address at place of study (street, postcode and city)
• e-mail (must be identical to the e-mail for the customer account in the VVW app)
• matriculation number
• IBAN, BIC and bank of the account to be used for the reimbursement payment

Duration of data storage

The personal data will be deleted when the processing and examination of the verification of the reimbursement application has been completed and the data is no longer subject to the statutory (in particular tax law) retention periods (Art. 17 para. 1 lit. e GDPR).

Forwarding to third parties

The responsible AStA department and AStA employees (especially those in the office) have access to the data.

The AStA forwards the personal data entered in the application to the Verkehrsverbund Warnow, if the reimbursement application has been approved, as this service provider is responsible for the final review of the reimbursement process. The AStA has concluded an order processing agreement with Verkehrsverbund Warnow in accordance with Art. 28 GDPR.

Your rights

You have the following rights under the EU General Data Protection Regulation (GDPR):

In accordance with Art. 16 GDPR, you have the right to rectification of the data and, in accordance with Art. 17 GDPR, to erasure of the data if you can demonstrate legitimate interests (Right to erasure ('right to be forgotten')). In any case, the data concerning you will be automatically deleted after the above-mentioned period has expired or if the purpose of processing no longer exists.

You have the right to restrict the processing of the data in accordance with Art. 18 GDPR if you can cite legitimate interests.

In accordance with Art. 20 GDPR, you also have the right to receive the data in a structured, commonly used and machine-readable format (right to data portability).

Furthermore, in the case of data processing based on Art. 6 para. 1 lit. f GDPR, you can object to this processing in accordance with Art. 21 GDPR (right to object).

In addition, you have the right to obtain information about the data processing in accordance with Art. 15 GDPR (Right of access by the data subject). This includes the right to information about the purposes of processing, the categories of personal data concerned, the recipients of the data, the planned duration of data storage, existing rights to data erasure or rectification, the right to restrict processing and the right to object, the right to lodge a complaint with the competent supervisory authority, the origin of the data and the possible existence of automated decision-making.

If you wish to exercise the above rights, please contact the controller named above. If you have any questions or complaints about data protection, you can contact our data protection officer (contact details see above) or, if necessary, the public complaints office, e.g. of the state of Mecklenburg-Vorpommern (right to lodge a complaint):

Lennéstraße 1
19053 Schwerin
+49 (0)385 59494 0
info@datenschutz-mv.de