Apprentio

Information on the processing of your data by a processor pursuant to Art. 28 GDPR in accordance with Art. 13 of the European General Data Protection Regulation (GDPR)

The processing of personal data by the University of Kassel is carried out in accordance with the data protection provisions of the General Data Protection Regulation (hereinafter GDPR), as well as the Federal Data Protection Act (hereinafter BDSG) and the Hessian Data Protection and Freedom of Information Act (hereinafter HDSIG) in the version applicable from 25.05.2018.

 

The controller within the meaning of Art. 13 para. 1 lit. a GDPR is the

University of Kassel
Mönchebergstr. 19
34109 Kassel

The University of Kassel is a public corporation. It is legally represented by the President Prof. Dr. Ute Clement.

 

Contact details of the data protection officer

You can reach our data protection officer at

Data Protection Officer of the University of Kassel
34109 Kassel
Phone: +49 561 804-7036/-2011
Email: datenschutz[at]uni-kassel[dot]de
Web: www.uni-kassel.de/go/datenschutz

Processor:

Wabsolute GmbH
Technologiepark 14
33100 Paderborn

Scope of the processed data:

According to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

The following personal data is processed by the processor as part of the introduction of digital document-based processing

  • Contact data (name, gender, e-mail, telephone, business address)
  • Employee data (personnel number, date of birth, job title)
  • Employee data (start of training, end of training)
  • Employee data (school information, end of employment)
  • Performance data (appraisals, feedback meetings, certificates, weekly reports)
  • Conversation data (notes, comments, chat messages)
  • Qualification data (training occupation, skills, aptitudes)
  • Calendar data (department, vacation, school, absence information)

The following groups of people are affected by this:

  • Employees who are activated for the system
  • Junior staff who are activated for the system

The personal data may have the following origin:

  • By an administrative person, e.g. when creating a new user or updating an existing user
  • By a person who has been authorized to use the service within an area, e.g. an instructor who creates appointments for a trainee
  • By the person themselves who, for example, updates their data or uploads a weekly report

The legal basis for processing is the processing of employee and applicant data for administrative purposes in accordance with Art. 88 para. 1 GDPR in conjunction with § SECTION 23 HDSIG. On the other hand, the processing is justified by the necessity for a task that is in the public interest (Art. 6 para. 1 subpara. 1 e GDPR in conjunction with Section 3 para. 1 HDSIG).

Rights of the data subjects

  • Right to lodge a complaint:
    If you are of the opinion that data protection regulations have not been observed when processing your data, you can lodge a complaint with the supervisory authority of the University of Kassel.

Contact address of the supervisory authority of the University of Kassel:

The Hessian Data Protection Officer
Postfach 3163
65021 Wiesbaden
E-mail: poststelle[at]datenschutz.hessen[dot]de
Telephone: +49-611-1408-0
Fax: +49-611-1408-611

You can exercise the following rights at any time using the contact details provided for our (University of Kassel) data protection officer:

  • Right to information:
    You can request information about your processed personal data in accordance with Art. 15 GDPR or § 52 HDSIG.
  • Right to rectification:
    If the information concerning you is not (or no longer) accurate, you can request rectification in accordance with Art. 16 GDPR or Section 53 HDSIG. If your data is incomplete, you can request that it be completed.
  • Right to erasure:
    You can request the erasure of your personal data under the conditions of Art. 17 GDPR and Sections 34 and 53 HDSIG.
  • Right to restriction of processing:
    You have the right to request the restriction of the processing of data concerning you within the framework of the provisions of Art. 18 GDPR or Section 53 HDSIG.
  • Right to object:
    In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.