Privacy Policy

Thank you for visiting our website. In this Policy, we would like to inform you about how we handle your data in accordance with Section 17 of the Church Act on Data Protection of the Evangelical Church in Germany (DSG-EKD).

Controller

The Controller for the data processing activities described below is:

Evangelische Hochschule Berlin (EHB)
Teltower Damm 118-122
14167 Berlin
E-mail: rektorat@eh-berlin.de

Usage Data

When you visit our websites, we temporarily process so-called usage data on the basis of Section 6 No. 3 DSG-EKD. We use the usage data for statistical purposes, to improve the quality of our websites and for security purposes. We also use this information to enable access to our website, to monitor and manage our systems and to improve the design of the web pages. The data set consists of:

• the name and address of the requested content
• the date and time of the query
• the transferred data volume
• the access status (content transferred, content not found)
• the description of the used web browser and operating system
• the referral link, which indicates from which page you reached ours
• the IP address of the requesting computer

Processing of the IP adress

We store the complete IP address transmitted by your web browser for a period of seven days in the interest of detecting, limiting and eliminating attacks on our web pages. After this period, we delete or anonymize the IP address. The legal basis for this processing is Section 6 No. 3 DSG-EKD.

Cookies

On our website, we use cookies, which are necessary in order for the site to function. Cookies are small text files that can be placed on your computer or mobile device by websites that you visit. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

The cookies we use contain information on certain settings, improve the user experience or are necessary for the security of the site. We use these cookies based on Section 6 No. 3 DSG-EKD.

You can set your browser to inform you about the placement of cookies. This is in order to make the use of cookies transparent for you. You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings. Please note that if you delete certain cookies, our web pages may not be displayed correctly and some functions may no longer be available.

Reach measurement

We use the web analysis tool "Matomo" to design our websites according to your needs. Matomo creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your device and accessed by us. In this way, we are able to recognize and measure returning visitors.

The data processing is based on your consent pursuant to Section 6 No. 2 DSG-EKD, provided you have given your consent via the cookie banner. You can withdraw your consent at any time. Please follow this link and make the appropriate settings via our banner.

Contact form

You may contact us via e-mail or by phone. You can decide by yourself which data you make available to us when contacting us. We process your data in order to answer your enquiry and, if necessary, to send you the information material you requested. Your data may be transferred to the office responsible for your request. The legal basis for the processing is Section 6 No. 3 DSG-EKD (task fulfilment).

EHB portal

With the EHB portal, we offer applicants the opportunity to apply online for the preferred degree program. For this purpose, it is necessary to register in the EHB portal with a personal user account. We inform you about the processing of personal data in connection with the EHB portal in a specific data protection notice.

Storage period

Unless otherwise specified, we will delete your personal data if they are no longer required for the relevant processing purposes and no legal retention obligations oppose deletion.

Recipients of the personal data

Within EHB, only persons who need your data to carry out the tasks assigned to them will be given access to your data.

Outside EHB, service providers who support us in the fulfilment of our tasks may be given access to your data. Service providers we use must comply with special confidentiality requirements. They will only be given access to your data to the extent and for the period of time that is necessary for the fulfilment of the assigned tasks. We use these service providers as part of commissioned processing in accordance with Section 30 DSG-EKD:

Data processing outside the European Union

We use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that third countries generally offer an adequate level of protection. We have therefore taken additional measures to ensure that your data is processed with the same level of protection in third countries as it is within the European Union.

The service providers we use are located in a country for which the European Commission has determined in a decision pursuant to Article 45 (3) of the GDPR that personal data is subject to an adequate level of protection comparable to European data protection law.

Data security

In order to protect your data from unauthorized access in the best possible way, we implement technical and organizational measures. These measures include encryption procedures on our web pages. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Your rights as a data subject

When processing your personal data, the Church Act on Data Protection of the Protestant Church in Germany grants you certain rights as a data subject.

Right of access by the data subject (Section 19 DSG-EKD)

You have the right to obtain confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed of this personal data and to receive the information specified in Section 19 DSG-EKD.

Right to rectification, right to erasure (Sections 20, 21 DSG-EKD)

You have the right to rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement without delay.

You have the right to obtain the erasure of personal data concerning you without undue delay if one of the reasons listed in Section 21 DSG-EKD applies.

Right to restriction of processing (Section 22 DSG-EKD)

You have the right to request the restriction of processing if one of the conditions listed in Section 22 DSG-EKD is met, e.g. if you have objected to the processing, for the duration of our examination.

Right to data portability (Section 24 DSG-EKD)

In certain cases, which are listed in detail in Section 24 DSG-EKD, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request that this data be transferred to a third party.

Right to object (Section 19 DSG-EKD)

If personal data is processed on the basis of Section 6 No. 1, 3, 4 or 8 DSG-EKD, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if data is still needed for the establishment, exercise or defence of legal claims.

Right to withdraw consent (Section 11 Abs. 3 DSG-EKD)

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

Right to lodge a complaint with a supervisory authority

According to Section 46 DSG-EKD, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The competent data protection authority for the Protestant University of Applied Sciences Berlin (Evangelische Hochschule Berlin) is the Commissioner for Data Protection of the Protestant Church in Germany (der Beauftragte für den Datenschutz der Evangelischen Kirche in Deutschland), Berlin Branch Office, Invalidenstr. 29, 10115 Berlin, E-mail: ost@datenschutz.ekd.de.

Contact details of our data protection officer

Our external data protection officer is available to provide further information on data protection:

When contacting our data protection officer, please specify the name of the Controller (Evangelische Hochschule Berlin) to whom you are referring.