Data protection information

Photography and video recording

Dear participant,

You shall be photographed/filmed during this photo shoot/event.

Once the photographer has transferred the images and recordings to us, we shall use these for our promotional purposes and for our press and public relations. For example, the images and recordings may appear in advertisements or newspapers, on our website or on social media and be made available for download from the University website and internal image database. You provide your consent for this in the accompanying Declaration of Consent. You have a choice with regard to processing and publication and may freely select the options in the Declaration of Consent.

Personal data is processed in accordance with the provisions of the GDPR. The legal basis for the processing of the data is your consent in accordance with article 6 (1)(a) GDPR as well as article 49 (1)(a) GDPR for the transfer of data to countries that do not ensure an adequate level of data protection.

An image database of the University that uses AI software in a supporting role for facial recognition, among other things, serves as the archival medium. This is utilised for archiving purposes and faster retrieval of assets. We shall save the images and recordings for as long as the purpose persists or until the consent is withdrawn. Mandatory statutory provisions – especially retention periods – remain unaffected.

Canva Pro image editor and graphic design platform

The Canva Pro cloud/online service is used to create graphics and videos compliant with corporate design guidelines for social media posts as well as visual content for screens, digital signage, posters, etc. Canva Pro is an image editor and graphic design platform that can be used to provide templates to decentralised marketing staff. Please note the information on data processing by Canva for its own purposes, the transfer of data to third countries involving risks and the sharing of data with third parties.

In its own privacy policy, Canva refers to extensive processing of data in many countries around the world (including without appropriate safeguards for the transfer to third countries) and to the use of the data for its own purposes and sharing with third parties. Data from third parties may also be collected for Canva and aggregated with your data. Further information: https://www.canva.com/policies/privacy-policy/

We have configured the software settings required to enable us to use the data in the most privacy-friendly way possible. In doing so, we have excluded data processing for other purposes and sharing with third parties as far as possible, but cannot prevent this entirely. Further information: https://www.canva.com/help/manage-privacy-settings/

By consenting to the use and processing of your data for the purposes described, you therefore also consent to the processing of your data in third countries that do not ensure an adequate level of data protection pursuant to EU/GDPR standards. For example, there is a danger that authorities may process your data in surveillance programmes without you being entitled to the same data subject rights as in the EU. In addition, other recipients may use your data for other purposes and Canva may utilise the data for ongoing development of its own systems. There is therefore a residual privacy risk.

Data is transferred to entities in third countries – countries outside the European Union (EU) and the European Economic Area (EEA) – e.g. if we publish your content on social media channels. As it cannot always be guaranteed that the data shall be transferred within the meaning of article 44 et seq. GDPR, the level of data protection in this third country may not be ensured and there may be increased risks for data subjects.

Beyond this, your data shall not be transferred to or shared with third parties.

Your data shall be stored for as long as is required for the purpose for which it was collected. If you withdraw your consent, your data shall be erased unless we are obliged by law to retain it. However, please bear in mind that we have no control over data that has already been published or its use by third parties through such publication.

Your consent is voluntary and may be withdrawn at any time with effect for the future, without giving any reasons for the withdrawal. The legality of the data processing carried out up to the point of the withdrawal shall remain unaffected by the withdrawal. If the consent is not withdrawn, it shall be deemed granted for an unlimited period of time. No disadvantages shall arise from the refusal to grant consent or from the withdrawal of consent.

We do not use any purely automated decision-making processes.

You have the right at any time to access your stored personal data free of charge and may have this rectified, erased or transferred. If legal obligations to retain the data prevent its erasure, we shall block access to it. You have the right to restrict the processing of your data, to object to processing of your data and to lodge a complaint with a supervisory authority.

If you have any questions, please contact us directly or get in touch.

For information or to withdraw your consent, please contact:

Data controller

Hochschule Heilbronn 
Max-Planck-Straße 39 
74081 Heilbronn 
komma@hs-heilbronn.de

Data Protection Officer

Deutsche Datenschutzkanzlei 
Maximilian Musch 
Telefon +49 7542 949 21 02 
musch@ddsk.de

For further privacy information, please visit:

https://www.hs-heilbronn.de/en/data-protection