Information on the processing of your personal data
use of online-based donation tool
Dear Sir or Madam,
The following contains information on the processing of your personal data in our university pursuant to Art. 13 of the EU General Data Protection Regulation (
GDPR).
The provisioning and processing of your data is required for making an online donation to support Heidelberg University.
| Description | Details |
|---|
| 1. | Controller
per Art. 4 (7) GDPR | Heidelberg University, represented by the Rector, Grabengasse 1, 69117 Heidelberg
rektorin@rektorat.uni-heidelberg.de |
| 2. | Data Protection Officer
Contact information | Data Protection Officer, Seminarstr. 2, 69117 Heidelberg,
datenschutz@uni-heidelberg.de |
| 3. | Reasons for processing | - Execution of an online donation
- Payment processing
- optional: Issuance of a tax-deductible donation receipt
- optional: email confirmation
- fulfilment of documentation and reporting obligations
|
| 4. | Legal base | Art. 6 (1 b) GDPR |
| 5. | Data
Categories of personal data processed | Without donation receipt:
- Amount and purpose of donation
- Bank details / Payment details
- IP address / time stamp, connection details
- Form of address / Title (if necessary)
- First and last name
- Address
- Company name (if necessary)
- Department (if necessary)
- If necessary: form of address, title
- First and last name (if necessary)
- Email address
Donation by credit card: - address
- zip code
- city
- country
|
| 6. | Recipients
Persons to whom the personal data required for the respective purpose have to be disclosed | - Internal recipients: Persons within the university responsible for the online donation mentioned above
- External recipients / Payment service provider: GiroSolution GmbH
|
| 7. | Transfer of data to third countries
(especially to countries outside of the EU) | Not applicable. |
| 8. | Storage periods | Criterion: legal obligations regarding storage periods:
As soon as your personal data is no longer needed for the reasons for processing, your data will be deleted at the latest after ten years. |
| 9. | Origin of data
If not from you | No data from third parties is processed. |
| 10. | Your rights | - Right of access to your personal data (Art. 15 GDPR, § 9 LDSG)
- Right to rectification of personal data (Art. 16 GDPR)
- Right to erasure of personal data (Art. 17 GDPR, § 10 LDSG),unless storage obligations contradict this
- Right to data portability (Art. 20 GDPR)
- Right to lodge a complaint with the responsible commissioner for data protection and freedom of information (Landesbeauftragter für den Datenschutz and freedom of information Baden-Württemberg)
|
Information on your right to object according to Art. 21 (1) GDPR
You have the right to object against the processing of your data which is based on Art. 6 (1 e) GDPR (data processing in the public interest) at any time, for reasons that arise from your particular situation. |
Privacy policy - Online donation tool of Heidelberg University, version 03 as of January 2021
We take the protection of your personal data very seriously, which is why we only transfer all the data you give for forms and donations in encrypted form. Our information regarding data protection indications aim to give you full insight into the processing of your data.
