Do we pass on your data? If yes, do we pass them on third countries?

The data processing at the University’s web pages does not require us to disclose your data to external parties. In some cases, your data might be processed by several persons or offices within the University. This, however, does not represent a data disclosure in legal terms as the data remains within the responsible unit—the University.

There are three exceptions:

• The most important exception to this is data processing in connection with the use of YouTube videos. As explained in the description of this process, we use the two-click solution. Only when you click on the button to start a video will your data be transmitted to Google servers or disclosed to Google when the video content is accessed. Google servers are usually located in the US, so the integration of a Google service involves the transfer of your data to a so-called “third country.” Since July 10, 2023, the European Commission's adequacy decision EU-U.S. Data Privacy Framework (DPFExternal link) has applied to data transfers to the USA. This attests to an adequate level of protection for certified organizations and companies. Google is certified under the DPF.
• Your data also will be passed to external lecturer if this is necessary for the implementation of an event that you have booked via our Qualification Portal. This exclusively concerns the data that you have already transmitted to the University for booking the special event (in particular title, surname, first name, e-mail address, academic degree).
• In exceptional circumstances, your data may be passed on German prosecuting authorities. This may be the case if your device attacks the University’s server. If so, the University will pass on your IP address and meta data of your requests (calling up our web pages) to the police.