GENERAL INFORMATION ON DATA PROTECTION
We are pleased that you are visiting our website and thank you for your interest. Data protection has a high priority in our company. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
We use cookies on our website - detailed information can be found here: Cookies
Responsible body within the meaning of the General Data Protection Regulation:
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
Phone: +49 (0) 5251 89207-101
e-mail: info@stwpb.de
Web: www.stwpb.de
Data Protection Officer
We have appointed a data protection officer for our company. You can contact him as follows:
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
e-mail: datenschutz@stwpb.de
1. collection of general information
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the website content requested by you and is mandatory when using the Internet. Anonymous information of this kind is statistically analysed by us in order to constantly optimise our website and its technical platform.
2. SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
3. cookies
Like many other websites, we also use so-called „cookies“. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system on your computer and your connection to the Internet.
Cookies cannot be used to start programmes or transfer viruses to a computer. We can use the information contained in cookies to make navigation easier for you and enable our web pages to be displayed correctly.
Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. You can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
We currently only use cookies on our website that are technically necessary for the operation of our website. In doing so, we rely on our legitimate interest in the secure and stable operation of our website in accordance with Art. 6 (1) lit. f) as the legal basis.
4. compliance consent tool
We use the WordPress Complianz plugin on our website to manage and store your consent to the use of cookies and external services. Complianz sets technically necessary cookies for this consent management. The Complianz cookies store the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked for your consent again.
The use of Complianz is based on Art. 6 (1) lit. c) GDPR, as we are legally obliged to obtain your consent to the use of non-essential cookies and services on our website. You can find more information on data protection around Complianz here: https://complianz.io/legal/privacy-statement/?cmplz_region_redirect=true&cmplz-region=eu.
5. enquiries by e-mail
We offer you the option of contacting us by e-mail on our website.
The information you provide for this purpose will be stored on the basis of your consent in accordance with Art. 6 (1) lit. a) GDPR exclusively for the purpose of contacting you in the course of processing your enquiry/email. Your data will not be passed on to third parties without your consent. By sending an enquiry by email or by entering your data (name, address, email address) in the contact form, you give us your consent to store the data and use it to contact you. The data collected in this way will not be compared with data that may be collected elsewhere on our website.
6. processing of data in e-mail communication
All emails that we receive are forwarded to the relevant contact person within our email system and used to process the email.
All incoming and outgoing emails are recorded in our central email archive and generally stored for a maximum of 10 years to fulfil the statutory retention obligations for proper accounting. Although this archiving obligation only applies to emails with an accounting document function, it is not technically possible to systematically separate these emails from other emails. Therefore, all emails are archived. Only selected employees have access to archived emails for the purpose of financial accounting and bookkeeping, as well as for the purpose of technical work to fulfil the statutory tasks of the Studierendenwerk Paderborn, if the contents of emails are required for this purpose.
7. legal basis of the processing
The legal basis for processing operations for which we obtain consent for a specific processing purpose is Art. 6 (1) lit. a) GDPR. If the processing of personal data is necessary for the fulfilment of a contractual relationship, Art. 6 (1) 1 lit. b) GDPR forms the required legal basis. If our company is subject to a legal obligation that requires the processing of personal data, such as in the area of tax law, the processing is based on Art. 6 (1) lit. c) GDPR.
Under certain circumstances, the processing of personal data may be necessary in order to protect the vital interests of the data subject or another natural person. In this case, Art. 6 (1) lit. d) GDPR would be the legal basis for processing.
Processing operations may also be based on Art. 6 (1) 1 lit. f) GDPR. This is the case if the processing of your personal data by us is based on a legitimate interest of our company or a third party.
8. deletion or blocking of the data
We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to fulfil the purposes stated here or for the various storage periods stipulated by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.
9. automated decision-making
We do not carry out any automated decision-making or so-called „profiling“ with your data processed by us.
10. online application for a place in a hall of residence
We use an online application process from our external service provider tl1 GmbH Software-Entwicklung to allocate our student residences, with whom we have concluded an order processing contract (AV contract) in accordance with Art. 28 GDPR. The collection of personal data is necessary in order to be able to decide on the allocation of a place in a hall of residence. In addition, we process - to the extent necessary for processing - personal data that we request as part of the administration of our student residence places, e.g. due to an address enquiry in the event of rent arrears. We use the data you enter in the online application exclusively for the allocation of our halls of residence. An application does not constitute a legal claim to the conclusion of a tenancy agreement. If a tenancy agreement is concluded, your application data will be used for the purpose of concluding the tenancy agreement.
The legal basis for the processing of your personal data is Art. 6 (1) lit. b) and c) GDPR for the initiation and execution of a dormitory rental contract with you and for the fulfilment of all legal obligations existing in this context. The additional legal basis is Art. 6 (1) lit. e) GDPR in conjunction with § 2 Studierendenwerksgesetz NRW for the fulfilment of our statutory social mandate for students. Insofar as the processing of data is based on consent, Art. 6 (1) (a) GDPR is the legal basis.
Your online application will be stored for 12 months from the date of application. After this period, the application will be automatically deleted if it has not been updated by you before the end of this period. If a tenancy agreement is concluded, we will store your data for the duration of the tenancy and delete it at the end of the statutory retention period of 10 years after the end of the tenancy period.
11. hiring of private rooms
We offer landlords and landladies of private rooms for students the opportunity to advertise these on our website. For this purpose, the landlord or landlady must register in advance, during which we record their first name, surname and e-mail address. We use the data collected here exclusively for the purpose of arranging private rooms.
The data is processed on the basis of Art. 6 (1) lit. a) GDPR based on your consent as the landlord or landlady. Your data will be stored by us for as long as is necessary to fulfil the above-mentioned purposes, unless we are obliged to store it for a longer period of time due to retention periods. Irrespective of this, you can correct the data you have entered or delete your entire account at any time.
12. applications
We collect and process personal data that you send or communicate to us in connection with an application - by post, by e-mail, online via our website, in a telephone call or in a personal conversation. To record your data in an online application, we use the functionalities of the company BITE GmbH acting on our behalf, with whom we have concluded an order processing contract (AV contract) in accordance with Art. 28 GDPR. If you have entered your data with a recruitment agency and we have retrieved the data there, we will receive your data from this recruitment agency.
We process your data in order to check your suitability for vacant positions and to carry out the application process. Your application data will be processed by us on the basis of Art. 6 (1) lit. b) GDPR for the initiation or execution of an employment contract in conjunction with § 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. You provide us with your personal data voluntarily; there is no obligation to provide data. If the application documents are not complete, this may have a negative impact on the success of your application.
If your application is successful, we will transfer your data to our personnel administration system. In the event of a rejection, applicants' data will be deleted no later than six months after the end of the application process, unless you give your express consent to longer-term storage for a possible subsequent vacancy in accordance with Art. 6 (1) lit. a) GDPR; in this case, the data will be deleted after two years at the latest.
Should it be necessary to process the data after completion of the application process for legal prosecution, this is done on the basis of Art. 6 (1) lit. f) GDPR to safeguard legitimate interests for the assertion or defence of legal claims.
13. use of the DeliCard
The DeliCard is the cashless means of payment in the catering facilities and launderettes of the Studierendenwerk Paderborn. Via our website, we offer DeliCard users the opportunity to access their DeliCard customer account in order to view their customer data (surname, first name, card number, consumer group, etc.) and correct it if necessary. You can also use the online access to view the transactions assigned to your customer account (items purchased, unit price, total price, top-ups) and the current remaining balance. You can also set up the cashless EasyLoad service or change your bank details via the online access. Only EasyLoad users' names and bank details are also saved. Only the details of EasyLoad users and their bank card are used as the data source
The legal basis for data processing is your consent to data processing in accordance with Art. 6 (1) lit. a) GDPR, which you signed when you received the DeliCard. Due to statutory retention periods, we store DeliCard data for 10 years.
14. use of Matomo
We use the web analysis service Matomo on our website (www.matomo.org) of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Data processing is carried out in accordance with Art. 6 (1) lit. f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour to ensure the security and ongoing optimisation of our website. Cookies may be used for this purpose and pseudonymised user profiles may be created and evaluated.
Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Among other things, cookies make it possible to recognise the Internet browser. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers. The information generated by the cookie in the pseudonymised user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.
Your pseudonymised data will be stored by us for as long as is necessary to fulfil the above-mentioned purposes - for a maximum of two years. You can find more information on the processing of your data by Matomo here: https://matomo.org/privacy-policy/.
15. video consultation
On our website, we offer a voluntary video consultation with the Office for Educational Support of the Studierendenwerk Paderborn. We use the „RED-connect“ software for this purpose. RED-connect is certified in accordance with the requirements of the German National Association of Statutory Health Insurance Physicians for use in medical video consultations. The provider of RED-connect is RED Medical Systems GmbH, Lutzstraße 2, 80687 Munich. The video, voice and text transmission of the video consultation is end-to-end encrypted.
Personal data is processed on the basis of Art. 6 (1) lit. a) GDPR based on your voluntary written consent to the use of the above-mentioned system. The conversations are not recorded or stored. You will receive the specific invitation to a video counselling session in unencrypted form to the email address you have provided.
16. social media
In addition to this website, we also operate various social media channels. We currently have presences on Facebook, Instagram and YouTube. You can access our pages there via the corresponding buttons on our website. We expressly point out that you use these pages and their functions at your own risk.
When you visit our presence on the aforementioned platforms, personal data may be transmitted to the operator of the respective platform and processed by them, such as IP address, processor type used and browser version including plug-ins. The data collected about you in this context is processed by the provider of the social media and may also be transferred to countries outside the European Economic Area (EEA).
If you are logged in with your personal user account while visiting such a website, the operator can assign the visit to your account. If you wish to avoid this, you should log out from the operator of the respective platform or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser before visiting our online presence.
The purpose and scope of the data collection and the further processing and use of the data by the operator of the respective platform as well as your rights in this regard and setting options to protect your privacy can be found in the respective data protection notices:
Facebook: https://de-de.facebook.com/about/privacy/
Instagram: https://help.instagram.com/519522125107875
YouTube: https://policies.google.com/privacy?hl=de&gl=de
We do not collect or process any other data from your use of our presence on the relevant social media platforms.
17. your rights to information, rectification, blocking, erasure and objection
You have the right to receive information about your personal data stored by us at any time. You also have the right to have your personal data corrected, blocked or, apart from the prescribed data storage for business transactions, deleted. To do this, please send an e-mail to datenschutz@stwpb.de to our data protection officer.
To ensure that data can be blocked at any time, this data must be kept in a lock file for control purposes. You can also request the deletion of the data, provided there is no legal archiving obligation. If such an obligation exists, we will block your data on request.
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can make changes or withdraw your consent by notifying us accordingly by e-mail to datenschutz@stwpb.de with effect for the future.
We have a statutory response period of four weeks to process your request, which can be extended by a further four weeks in exceptional cases. We endeavour to process your request in full within the first four weeks of receiving your request. Please note that due to statutory retention periods, we may still be obliged to store certain of your personal data even after a request for deletion.
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
The data protection supervisory authority responsible for us is the
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
e-mail: poststelle@ldi.nrw.de
18. amendment of our data protection provisions
We reserve the right to amend this privacy policy if necessary so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Paderborn, January 2026
Data protection information obligation pursuant to Articles 13 and 14 EU GDPR
Data protection information for the processing of personal data in connection with business partners (customers, suppliers, service providers, etc.)
With this data protection notice, we inform you about the processing of personal data by us and the rights to which you are entitled in accordance with the EU General Data Protection Regulation (EU GDPR) applicable from 25 May 2018.
1. who is responsible for data processing and who can I contact?
Responsible is:
Paderborn Student Union AöR
Mersinweg 2 | 33100 Paderborn
Telephone: 05251 89207-101
You can find a direct contact here on our website.
You can reach our data protection officer at
Paderborn Student Union AöR
Mersinweg 2 | 33100 Paderborn
Telephone: 05251 89207-160
You can find a direct contact here on our website.
2. what data do we process? Which sources do we use?
We process personal data that you provide to us as business partners (customers, suppliers, service providers, etc.) in the context of business relationships via the contact form on our website, by telephone, electronically, in writing or in person.
This includes personal data such as name, address, e-mail address, telephone/fax number, date of birth, bank details for customers and, where applicable, creditworthiness data, nationality and ID data.
3. for what purposes and on what legal basis do we process your data?
The processing is carried out for the purpose of uniquely identifying the business partner as well as the initiation, execution, administration and processing of contracts, the assessment of creditworthiness and collateral, the preparation of invoices, credit notes, the administration and enforcement of claims, compliance with legal regulations, data security and in the interest of comprehensive customer service.
For communication purposes, we also process the names and contact details of the contact persons at the business partner.
We process personal data in accordance with the provisions of the General Data Protection Regulation (EU GDPR) and other data protection laws within the scope of your consent pursuant to Art. 6 para. 1 a EU GDPR, to fulfil contractual obligations pursuant to Art. 6 para. 1 b EU GDPR, to fulfil legal obligations pursuant to Art. 6 para. 1 c EU GDPR and within the scope of the balancing of interests to protect our legitimate interests pursuant to Art. 6 para. 1 f EU GDPR. Our legitimate interest here is to make contact to initiate a contract and to assert or defend against claims.
The data provided voluntarily will be used exclusively for the purposes for which it was provided. There is no obligation to provide data. However, if your details are not complete, this may have a negative impact on the possible conclusion of a contract.
4 Who receives your data?
We use a specialised software provider for the organisation, administration and implementation of business relationships. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems; the data protection regulations are observed in the process.
In addition, your data will only be made available internally to those persons in our company who need it to process the business relationship.
After an unsuccessful dunning procedure, your data will be forwarded to a debt collection agency to pursue our justified claims.
5. will your data be transferred to a third country or an international organisation?
Our data processing takes place in Germany and in the EU; data is not transferred to a third country or an international organisation.
6 How long will the data be stored?
Personal data requested by us in connection with business relationships will only be stored for as long as is necessary for the execution of the contract and any subsequent contract-related correspondence or, in the case of documents relevant under commercial and/or tax law that contain personal data, for as long as the statutory periods of the German Commercial Code and the German Fiscal Code provide for the retention of these documents.
In the case of general enquiries sent to us by e-mail or contact form, the corresponding personal data will only be stored for the purpose of the respective correspondence. Any further processing will not take place. E-mails are deleted after 10 years in accordance with legal requirements.
7 What data protection rights do you have?
You have the right to information about your personal data processed by us in accordance with Article 15 EU GDPR. You have the right to rectification under Article 16 EU GDPR, the right to erasure under Article 17 EU GDPR, the right to restriction of processing under Article 18 EU GDPR, the right to withdraw consent and to object under Article 21 EU GDPR and the right to data portability under Article 20 EU GDPR. These rights may be subject to the restrictions set out in the NRW State Data Protection Act.
If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met and you will receive a corresponding notification from us. If necessary, we will ask you to identify yourself; we are obliged to do so if there are any doubts.
You can contact us at any time if you have further questions on the subject of personal data or complaints; the contact details can be found at the beginning of this privacy policy. In addition, you have the right to lodge a complaint with a competent data protection supervisory authority, for example with the State Commissioner for Data Protection and Freedom of Information LDI NRW, Kavalleriestr. 2 - 4, 40213 Düsseldorf.
8. revocation of consent
You can revoke any consent given to us for the processing of your personal data at any time with effect for the future by sending us a corresponding message. This also applies to the revocation of declarations of consent given to us before the EU GDPR came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
The cancellation can be sent to us in any form, but for reasons of proof we ask you to send it to us by post or e-mail with the subject „Cancellation“, stating your name and address.
As a precautionary measure, we would like to point out that we may continue to process data in whole or in part even after you have withdrawn your consent if there is another legal basis for this.
9. individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests).
In principle, the objection can be sent to us in any form, but for reasons of proof we ask you to send it to us by post or e-mail with the subject „Objection“, stating your name and address.
If you lodge a justified objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
10. how can you obtain further information?
If you have any further questions about data protection, please get in touch with your usual contact person, who will be happy to help you, or contact our data protection officer using the contact details given above.
Status of this data protection notice: May 2018
Data protection information sheet in accordance with Articles 13 and 14 EU GDPR (PDF)
Data protection information for the processing of personal data in connection with the DeliCard and EasyLoad.
With the following information we would like to give you an overview of the processing of your personal data by us and your rights under data protection law.
1. who is responsible for data processing and who can I contact?
Responsible is:
Paderborn Student Union AöR
Mersinweg 2 | 33100 Paderborn
Telephone: 05251 89207-101
You can find a direct contact here on our website.
You can reach our data protection officer at
Paderborn Student Union AöR
Mersinweg 2 | 33100 Paderborn
Telephone: 05251 89207-160
You can find a direct contact here on our website.
2. what data do we process? Which sources do we use?
1) The DeliCard is issued anonymously; the transaction data is stored. This transaction data may include
- Card number
- Consumer group
- Cash register/washing machine/coffee machine/recycler number (incl. location)
- Date/Time
- Charging process: Value
- Devaluation process: Purchased items, unit price, total price
- Payment method: DeliCard
- Residual credit
2) Only EasyLoad users' names and bank details are also stored. Only the details of EasyLoad users and their bank card are used as the data source.
3) For employees of the Studierendenwerk, the name of the employee is assigned to a DeliCard number regardless of whether EasyLoad is used or not.
3. for what purposes and on what legal basis do we process your data?
The purpose of data processing is to provide the DeliCard as a means of payment.
4 Who receives your data, how do we use your data?
1) We use the data from all transactions for various analyses, but these are never related to individual DeliCard numbers.
2) We use the data of EasyLoad users for the processing of payment transactions. If direct debits are not honoured, we request the account holder's address details from their financial institution and contact the cardholder. After an unsuccessful reminder procedure, the data may be forwarded to a debt collection agency to pursue our justified claims.
3) We use the transaction data of individual DeliCards in the event of loss reports and when these DeliCards are found on our premises. The DeliCard holder reporting the loss is asked about the last transactions in the card history. If the information matches the recorded transactions, the card found will be returned to the cardholder.
4) We use the transaction data (number of items in an item group) in the allocation of the individual DeliCard to bill sales promotions (e.g. buy 10 hot drinks at the BonaVista coffee bar, the 11th hot drink is free).
5) For employees of the Studierendenwerk, the transactions are saved and the first 20 transactions within a calendar month are discounted by the Studierendenwerk by €0.50 per transaction if these transactions have a value of at least €1.00.
6) In addition, the data will only be made available internally to those persons in our company who require it for the processing of payment transactions via the DeliCard, the booking of these transactions (accounting) or for a non-card-related evaluation.
5. will your data be transferred to a third country or an international organisation?
Our data processing takes place exclusively in Germany; the data is not transferred to third parties.
We use the software of a specialised service provider to process transactions. This service provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and care of the systems; the data protection regulations are observed.
6 How long will the data be stored?
The data is stored for 10 years.
7 What data protection rights do you have?
You have the right to information about your personal data processed by us in accordance with Article 15 EU GDPR. You have the right to rectification under Article 16 EU GDPR, the right to erasure under Article 17 EU GDPR, the right to restriction of processing under Article 18 EU GDPR, the right to withdraw consent and to object under Article 21 EU GDPR and the right to data portability under Article 20 EU GDPR. These rights may be subject to the restrictions set out in the NRW State Data Protection Act.
If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met and you will receive a corresponding notification from us. If necessary, we will ask you to identify yourself; we are obliged to do so if there are any doubts.
You can contact us at any time if you have further questions on the subject of personal data or complaints; the contact details can be found at the beginning of this privacy policy. In addition, you have the right to lodge a complaint with a competent data protection supervisory authority, for example with the State Commissioner for Data Protection and Freedom of Information LDI NRW, Kavalleriestr. 2 - 4, 40213 Düsseldorf.
8. revocation of consent
You can revoke any consent given to us for the processing of your personal data at any time with effect for the future by sending us a corresponding message. This also applies to the revocation of declarations of consent given to us before the EU GDPR came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
The cancellation can be sent to us in any form, but for reasons of proof we ask you to send it to us by post or e-mail with the subject „Cancellation“, stating your name and address.
As a precautionary measure, we would like to point out that we may continue to process data in whole or in part even after you have withdrawn your consent if there is another legal basis for this.
9. individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests).
In principle, the objection can be sent to us in any form, but for reasons of proof we ask you to send it to us by post or e-mail with the subject „Objection“, stating your name and address.
If you lodge a justified objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
10. how can you obtain further information?
If you have any further questions, please get in touch with your usual contact person, who will be happy to help you, or contact our data protection officer using the contact details given above.
Status of this data protection notice: May 2018
Information on data protection Housing:
We are delighted that you are interested in living in one of our student residences. We attach great importance to data protection. In the following, we will inform you about how we handle your personal data when you apply for a place in a hall of residence and when you conclude a tenancy agreement with us.
Responsible body within the meaning of the General Data Protection Regulation (GDPR):
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
Phone: +49 (0) 5251 89207-101
e-mail: info@stwpb.de
Web: www.stwpb.de
Data Protection Officer
We have appointed a data protection officer for our company.
You can reach it as follows:
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
e-mail: datenschutz@stwpb.de
1. nature, scope and purpose of the processing of your data
We use an online application process for the allocation of our halls of residence. We only use the data you enter in the online application to carry out the selection process for places in halls of residence. An application does not constitute a legal claim to the conclusion of a tenancy agreement. If a tenancy agreement is concluded, your application data will be used for the purpose of concluding the tenancy agreement.
We collect and process the data that you provide to us in connection with your application for a place in a hall of residence, when concluding the tenancy agreement or as part of the ongoing tenancy or when it ends. The data we process is generally collected directly from you. We process your data to establish, implement and terminate the tenancy.
Your name will also be used to label the respective doorbell, letterbox and doorplate of your flat. Depending on the structural conditions, multi-occupancy flats in particular may have a shared doorbell and letterbox.
If you receive a key card or an access code, information about the assignment of the key or authorisation code is stored for functional reasons and the time of use is stored. This data is only processed by us for operational security and maintenance purposes and, if necessary, to investigate suspected misuse.
When using machines, technical devices and meters for energy consumption in the halls of residence, operating data or log data of the machines, devices and energy consumption meters used may be collected, which may have a personal reference depending on the location or usage situation. This data is only processed by us for the purpose of operational safety, maintenance and the billing of operating costs and, if necessary, for clarification in the event of suspected misuse.
If one or more video cameras are installed on a residence hall property or in the residence hall building, the areas under video surveillance are labelled and information is provided on the processing of the video recordings.
2. legal basis for data processing
The legal basis for processing your personal data to apply for a place in a hall of residence is your consent in accordance with Art. 6 (1) lit. a) GDPR in conjunction with the initiation of a tenancy agreement in accordance with Art. 6 (1) lit. b). If the information in your application for a place in a hall of residence is incomplete, it is possible that no tenancy agreement will be concluded.
The legal basis for the processing of your personal data in the context of a possible subsequent tenancy is Art. 6 (1) lit. b) and c) GDPR. We need your data to execute the tenancy agreement and to fulfil all legal requirements in this context. The additional legal basis is Art. 6 (1) lit. e) GDPR in conjunction with § 2 Studierendenwerksgesetz NRW for the fulfilment of our statutory social mandate for students.
As part of a tenancy agreement, you must provide the personal data that is required for the establishment, execution and termination of the tenancy and for the fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we cannot execute the tenancy agreement with you. All other information is voluntary.
3. retention periods
Your application for a place in a hall of residence will be stored for 12 months from the date of application. After this time, the application will be automatically deleted if you have not updated it before the end of this period.
If a tenancy agreement is concluded, we store your data for the duration of the tenancy and delete it at the end of the statutory retention period of 10 years after the end of the tenancy period.
4. data access, data transfer to third parties
Your dormitory application will be processed by our dormitory administration upon receipt. In our student services organisation, only those persons have access to your data who need it for the proper course of the procedure.
We use a specialised software provider for applicant management, allocation and administration of places in halls of residence. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems; the data protection regulations are observed in the process. We have concluded a so-called „contract for order processing“ with the service provider in accordance with Art. 28 GDPR.
When a tenancy agreement is concluded, all necessary contractual data is processed internally. Only those persons in the Studierendenwerk who need access to your data for the proper execution of the tenancy agreement have access to it: Residence administration department, property management, rental accounting, if necessary accounting for dunning procedures.
Other recipients of your tenancy agreement data may also be selected external service providers, e.g. service providers for the implementation of operating cost accounting, internet providers, the post office or security services. The aforementioned service providers will only ever receive your data from us to the extent that this is necessary to fulfil our tasks, within the scope of the defined purposes and in compliance with data protection.
If the dunning procedure is unsuccessful, the necessary data will be forwarded to a debt collection service provider.
5. your rights as a data subject
You have the right to receive information about your personal data stored by us at any time. You also have the right to have your personal data corrected, blocked or, apart from the prescribed data storage for business transactions, deleted. To do this, please send an e-mail to datenschutz@stwpb.de to our data protection officer.
To ensure that data can be blocked at any time, this data must be kept in a lock file for control purposes. You can also request the deletion of the data, provided there is no legal archiving obligation. If such an obligation exists, we will block your data on request.
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can make changes or withdraw your consent by notifying us accordingly by e-mail to datenschutz@stwpb.de with effect for the future.
We have a statutory period of one month to process your request, which can be extended by a further two months in exceptional cases. We will endeavour to process your request in full within one month of receipt as far as possible. Please note that due to statutory retention periods, we may still be obliged to store certain of your personal data even after a request for deletion.
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
The data protection supervisory authority responsible for us is the
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
e-mail: poststelle@ldi.nrw.de
Information on data protection for education funding in accordance with BAföG
Here you will find information about the processing of personal data by the Office for Educational Support if an application for educational support has been submitted or an application for study start-up aid, for which the Studierendenwerk Paderborn is responsible, as well as about your rights. This data protection information does not cover data processing in connection with a Application for advance payment according to § 36 BAföG, Please find below the special information on data protection for an application for advance payment according to § 36 BAföG. Overview:
- Who can you contact, who is responsible for data processing?
- For what purposes is your data processed?
- What is the legal basis for processing your data?
- What data is processed and where does it come from?
- Who receives your data?
- How long will your data be stored?
- Is there an obligation to provide data?
- What data protection rights do you have as a data subject?
- How can you obtain further information?
1. who can you contact, who is responsible for data processing?
Name and contact details of the person responsible: Studierendenwerk Paderborn AöR
Office for Educational Support Mersinweg 2,
33100 Paderborn
Telephone: 05251/89207-101 E-Mail: gf@stwpb.de Internet: www.stwpb.de
Contact details of the data protection officer: Sabine Link, data protection officer of the offices for educational support at the Studierendenwerke NRW,
c/o Akademisches Förderungswerk AKAFÖ AöR, Universitätsstraße 150, 44801 Bochum E-Mail: datenschutz-bafoeg@studierendenwerke-nrw.de
2. for what purposes are your data processed?
If you have submitted an application for educational support in accordance with BAföG, or an application for study start-up assistance, or are obliged to cooperate in the processing of such an application, your personal data will be processed for the following purposes:
- Advice on financing your studies, in particular on your entitlement to educational support in accordance with the Federal Training Assistance Act (BAföG)
- Recording and processing the application for educational support, requesting complete information. If an application for advance payment is also submitted in accordance with § 36 BAföG, your data will also be processed for this purpose. Details on data processing, especially after an application for advance payment has been submitted, can be found in the special data protection information attached below
- Making all determinations necessary to decide on the application
- Decision on the application, issuance of an authorising or rejecting decision and, if necessary, amendment of the decision
- Decision on disbursements, administration and termination of the training grantReclaiming training grants wrongly received, including any deferral and enforcement measures
- Transmission of the necessary data to the Kreditanstalt für Wiederaufbau or the Federal Office of Administration in accordance with their responsibilities for loan administration and recovery
- Processing any appeals lodged, issuing an objection notice and fulfilling our associated tasks and duties, in particular the proper maintenance of files, electronic data management in the BAföG specialist programme, evaluation for statistical purposes, as well as fulfilling all activities assigned to us as the Office for Training Assistance in accordance with the Federal Training Assistance Act (BAföG).
3. on what legal basis is your data processed?
The processing of personal data in the context of processing an application for educational support and in all activities in connection with BAföG benefits is carried out on the legal basis of Art. 6 para. 1 letter e GDPR in conjunction with § 41 BAföG and §§ 67 a and 67 b SGB X for the fulfilment of our tasks as the Office for Educational Support.
4. what data is processed and where does it come from?
The data categories can be seen from the data fields requested in the BAföG forms, forms and supplementary processing forms, in particular
- Master data, e.g. name, contact details, dates of birth, marital status and parenthood, nationality, bank details
- Asset data of applicant students, proof of assets
- Income of applicant students, parents, spouses or life partners, in particular income tax certificates, data on tenancy or housing conditions, employment, health, pension and long-term care insurance, maintenance claims, data on any disabilities or extraordinary burdens, if applicable
- Data on the granting of benefits and, if applicable, on reclaims, e.g. benefit period, amount and type, ability to pay in the event of reclaims, if applicable
- Data on your studies, in particular performance overview, health data relevant to the progress of your studies, if applicable
Processing data is also processed, such as receipt and dispatch data, file notes and other administrative data.
The data comes from the applicants themselves as well as from the sources named in the application forms, for example from parents, spouses or life partners. In addition, personal data is collected - insofar as this is legally permissible and necessary for the processing of the case - as part of the official investigation, e.g. when determining an address or when checking and processing information.
5 Who receives your data?
Your data is processed by the employees of the Studierendenwerk, by the respective responsible persons. Responsible are not only individual employees, but also the teams with deputies and superiors. Post and emails are forwarded internally for processing in accordance with the internal responsibility regulations, especially in the event of absence (holiday, illness, etc.).
The required data will be transmitted to those bodies that are responsible for loan administration or repayment in accordance with the statutory provisions in your respective student financing programme, in particular to the Federal Office of Administration and the Kreditanstalt für Wiederaufbau.
To the extent permitted, service providers who process your data on a contractual basis and are obliged to observe data protection are also involved in the processing, in particular IT-NRW (Landesbetrieb Information und Technik Nordrhein-Westfalen) as an IT service provider and as a computer centre for the specialist programme for BAföG administration.
Your personal data may also be transmitted to the following recipients:
- The information provided in the application regarding your income and the income of your spouse or civil partner and, if applicable, the income of your parents can be checked with the responsible social benefit provider, social insurance provider, tax office and the respective employer as well as by means of an account enquiry in accordance with Section 93 (8) of the German Fiscal Code (AO) at the Federal Central Tax Office if the legal requirements for this are met.
- The information on your assets provided as part of the application can be checked by means of a data comparison (§ 41 Para. 4 BAföG in conjunction with § 45d EStG) and by means of an account enquiry in accordance with
§ Section 93 (8) of the German Fiscal Code (AO) at the Federal Central Tax Office if the legal requirements for this are met.
- The loans made, including the associated personal data, are transmitted by us to the Federal Office of Administration (BVA) for the purpose of loan collection (§ 39 para. 2 BAföG).
- If you are claiming educational support in the form of an interest-bearing bank loan from the Kreditanstalt für Wiederaufbau (KfW) in accordance with § 18c BAföG, the data required for loan reimbursement will be exchanged between KfW and the Federal Office of Administration (BVA). KfW transmits the disbursement data to us.
- Your data, in particular your address data or account information, will be forwarded to the responsible state treasury and from there to credit institutions (e.g. the trainee's account-holding bank) for the cash processing of the benefits (e.g. payment of the funds).
- In the event of an unpaid claim against you, your personal data will be passed on to the enforcement authorities responsible in the federal states, e.g. to the local courts and bailiffs responsible for enforcement, depending on the state enforcement law. This is possible, for example, if you have received an overpayment that we have reclaimed but you have not paid.
- Your data may be passed on to the competent authorities, in particular to the Cologne district government, for the purpose of exercising technical and legal supervision. This also applies in the event of audits by the State or Federal Audit Office (State Budget Code, Federal Budget Code).
- The data on the receipt of the health and long-term care insurance supplement is passed on to the Central Allowance Centre for Retirement Assets of the German Pension Insurance (ZfA) as part of the notification procedure in accordance with Section 10 (4b) EStG.
- As part of the application processing, pension offices may also be asked about your income and your data may be passed on to the relevant job centre/employment agency (ARGE) if the legal requirements are met.
- The information on the income of a parent, spouse or partner will be communicated to the student in the notification of grant (BAföG notification). Parents, the spouse or partner of the student can object to this data being passed on to the student, with the exception of the amount of income taken into account, stating their reasons (§ 50 Para. 2 S. 3 BAföG). The interests of the trainee will then be weighed up and the data will only be passed on if the interests of the trainee outweigh the objection.
In individual cases, further transmissions are possible within the legally permissible framework.
Your personal data will not be transferred to a third country or to an international organisation.
6 How long will your data be stored?
Your data will be stored after collection for as long as is necessary for the fulfilment of the respective task, taking into account the statutory retention regulations of the federal and state governments.
Personal data can be stored for up to 12 years after the last repayment of the BAföG loan before the data is finally deleted. BAföG funding files are generally destroyed or deleted 6 years after the end of the last maximum funding period. After the approval procedure has been completed, data relating to the application for study start-up aid will be stored for as long as is necessary for the fulfilment of the respective task, taking into account the statutory retention regulations of the federal and state governments - usually at least ten years.
7. is there an obligation to provide data?
If the information required to process an application for educational support is not available, this usually means that no final decision can be made on the application and, as a result, no support payment or continuation of the educational support can be made or, if necessary, benefits can only be paid subject to reservation.
Social law applies to the administration of BAföG benefits:
- Applicants are obliged to cooperate in accordance with §§ 60 to 62, 65 SGB I: Anyone who applies for or receives social benefits or has to reimburse benefits is obliged to provide the necessary data.
- The obligation of the training centre, the parents, the spouse or partner, the employer, the supplementary pension institution to provide the data required for processing is based on §§ 47, 48 BAföG. The obligation to provide information in accordance with § 47 BAföG can also be enforced.
8. what data protection rights do you have as a data subject?
You have the right
- to information about your personal data in accordance with Art. 15 GDPR,
- for rectification in accordance with Art. 16 GDPR,
- for erasure in accordance with Art. 17 GDPR,
- to restriction of processing pursuant to Art. 18 GDPR,
- to object to the processing in accordance with Art. 21 GDPR.
Where applicable, the special features and restrictions of social data protection law apply.
In the event that your consent was exceptionally required and granted for certain data processing, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent up to the time of revocation.
To prevent an unauthorised person from asserting your data protection rights, you will be asked to identify yourself in order to exercise these rights.
You have the right to lodge a complaint with our data protection officer and with a supervisory authority, for example with the State Commissioner for Data Protection and Freedom of Information NRW, P.O. Box 20 04 44, 40102 Düsseldorf, Tel.: 0211/38 424-0, e-mail: poststelle(at)ldi.nrw.de
9. how can you obtain further information?
In addition to this information sheet, reference is made to all information that you already have or know about the Studierendenwerk. If you would like further information, please get in touch with the contact persons you know and the data protection officer. They will be happy to help you.
Status: January 2026
Please refer to the following pages:
Information on data protection when applying for an advance payment in accordance with § 36 BAföG
Information on data protection when applying for advance payments in accordance with § 36 BAföG
Here you will find information on the processing of personal data after submitting an application for advance payment in accordance with § 36 BAföG.
This data protection information is supplementary to the data protection information „Information on data protection for training support in accordance with BAföG“; the processing of personal data described there for the administration of training support in accordance with BAföG continues to take place. Overview:
- Who can you contact, who is responsible for data processing?
- For what purposes is your data processed?
- What is the legal basis for processing your data?
- What data is processed and where does it come from?
- Who receives your data?
- How long will your data be stored?
- Is there an obligation to provide data?
- What data protection rights do you have as a data subject and how can you exercise further rights? Receive information?
1. who can you contact, who is responsible for data processing?
Name and contact details of the controller and contact details of the data protection officer:
See above, the data is identical to the information in the data protection information „Information on data protection for education funding in accordance with BAföG“.
2. for what purposes are your data processed?
If you have submitted an application for advance payment or are obliged to cooperate as a parent in the processing of such an application, your personal data will be processed for the following purposes:
- Advice on advance payment
- Processing applications, requesting complete information, making all determinations necessary for the decision on educational support
- Issuance of an authorising or rejecting decision and, if necessary, amendment of the decision
- Decision on disbursements, reclaims if necessary, administration and termination of advance payments
- Determining whether a transferred maintenance claim exists in accordance with § 37 BAföG, applying and observing the civil law regulations on maintenance law
- Insofar as a transferred maintenance claim exists on the basis of § 37 BAföG: Enforcement of this maintenance claim against the parents, also by way of legal action if necessary, by applying and observing the civil law regulations on maintenance law, in particular §§ 1601 - 1615n BGB, this also includes the provision of information to the parent(s) prescribed by § 1605 BGB,
and fulfilment of our associated tasks and duties, in particular proper record keeping, data management in the BAföG specialist programme, evaluation for statistical purposes, as well as for the fulfilment of all activities assigned to us as the Office for Training Assistance in accordance with the Federal Training Assistance Act (BAföG).
3. on what legal basis is your data processed?
Your personal data is processed on the legal basis of Art. 6 para. 1 letter e GDPR in conjunction with § 41 BAföG and §§ 67 a and 67 b SGB X to fulfil our tasks as the Office for Educational Support.
4. what data is processed and where does it come from?
The data that is already known from the funding file is processed, in this respect reference is made to the text of the data protection information provided above: „Information on data protection for training funding in accordance with BAföG“ under „4. What data is processed and where does it come from?“
In addition, the personal data provided to us during counselling, as part of our application processing and as part of the administration of the advance payment will be processed.
The data categories can be seen from the data fields requested in the application for advance payments in accordance with § 36 BAföG, in particular master data and data on the financial situation of the applicant student, such as income, child benefit, maintenance or maintenance claims, in order to determine whether the education is at risk.
In addition, the data is processed that is required in accordance with the provisions of maintenance law in order to determine whether a transferred maintenance claim exists in accordance with § 37 BAföG. If this is the case, the data required to assert this claim against the person obliged to pay maintenance, which is usually one or both parents, will be processed. This data relates to the circumstances of the student child entitled to maintenance and the circumstances of both parents (including their spouse and all dependants). All data categories for the determination and assertion of maintenance claims or recourse claims are processed, for example
- Relationships, all existing maintenance obligations or rights
- Period, amount and type of maintenance paid,
- Proof of loan encumbrances, loans, etc.
- Information on owner-occupied properties
- Duration and termination of employment relationships
- Proof of income and assets, if applicable also income information on the income of the new spouse of a parent. In the case of maintenance for adults, the parents are asked to provide data on income from assets such as dividends, interest income, etc., but no data on assets.
- Data from health, pension and long-term care insurance, if applicable, data on any disability or extraordinary burdens
- Proof of wage replacement benefits (e.g. sick pay, unemployment benefit) and all other social benefits and pension payments
- Data on the trainee's training and study history, including final certificates
- Health data of the student that are relevant to the progress of the study programme.
Processing data is also processed, such as receipt and dispatch data, file notes and other administrative data.
The data comes from the applicants themselves and from the sources named in the application forms. In addition, personal data is collected - insofar as this is legally permissible and necessary for processing - as part of the official investigation, e.g. when determining an address or when checking and processing information.
5 Who receives your data?
Please refer to the text of the data protection information provided above: „Information on data protection in the case of educational support in accordance with BAföG“ under „5. Who receives your data“. The description there also applies here.
The following also applies to advance payments:
The parents are usually heard on the application for advance payment. If the Office for Educational Support asserts a transferred maintenance claim against the parents, maintenance-related procedural legal provisions apply. The parent against whom the claim is made has a right to information under maintenance law in accordance with § 1605 BGB.
- If the legal requirements are met, the parent to whom the claim is made will receive data on the child that is available to the Office for Educational Support, insofar as the Office for Educational Support is obliged to provide information in accordance with Section 1605 BGB. The child's data may also include data of other persons, for example data of the other parent.
- If the legal requirements are met, the Office for Educational Support is obliged to provide the parent to whom the claim is made with the information required under Section 1605 of the German Civil Code (BGB) regarding the income and expenses of a parent who is not the claimant.
6 How long will your data be stored?
Data from the advance payment procedure is stored after collection for as long as is necessary for the fulfilment of the respective task, taking into account the statutory retention provisions of the federal and state governments. In particular, they are not deleted before the transferred maintenance claim has been paid in full; court titles obtained are generally valid for 30 years. If the transferred maintenance claim has been paid, all data will be deleted no later than 12 years after the last repayment of the BAföG loan portion.
If no more legal claims are pending or expected to be asserted and if the transferred maintenance claims have been paid in full, the files of the advance payment procedure are generally destroyed or deleted 10 years after the expiry of the last maximum funding period.
7. is there an obligation to provide data?
Reference is made to the text of the data protection information provided above: „Information on data protection in the case of training support in accordance with BAföG“ under „7. Is there an obligation to provide data?“ The description there also applies here.
In addition to the obligation to provide information in accordance with § 47 BAföG, parents have a further obligation to provide information in the advance payment procedure:
In order to determine and assert the transferred maintenance claim, the parents are obliged to provide information to the Office for Educational Support in accordance with § 1605 BGB.
8. what data protection rights do you have as a data subject and how can you obtain further information?
Reference is made to the text of the data protection information provided above: „Information on data protection in the case of training support in accordance with BAföG“ under „8. What data protection rights do you have as a data subject?“ and under „9. How can you obtain further information?“. The description there also applies here.
Status: January 2026
Privacy policy video consultation
We are pleased that you would like to use our video consultation. Data protection is a high priority in our company. In the following, we will inform you about how we handle your personal data when you use our video consultation service.
Responsible body within the meaning of the General Data Protection Regulation (GDPR):
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
Phone: +49 (0) 5251 89207-101
e-mail: info@stwpb.de
Web: www.stwpb.de
Data Protection Officer
We have appointed a data protection officer for our company.
You can reach it as follows:
Studierendenwerk Paderborn, institution under public law
Mersinweg 2
33100 Paderborn
e-mail: datenschutz@stwpb.de
1. technical platform used
We use the „REDconnect“ software from RED Medical Systems GmbH, Lutzstr. 2, 80687 Munich to conduct our video consultations. REDconnect fulfils the requirements of the German Association of Statutory Health Insurance Physicians for use in medical video consultations. We have concluded a contract with RED Medical Systems for order processing in accordance with Art. 28 GDPR. Data processing by RED Medical Systems takes place exclusively in Germany.
2nd appointment
You can register for the video consultation via the Studierendenwerk website. You must enter at least the following details there:
- E-mail address
- Telephone number (for possible queries)
- Personal message with possible details of the appointment
- Three date requests
You will receive the invitation to the video consultation, including the dial-in link, by unencrypted e-mail to the e-mail address you provided in the registration form.
3. realisation of the video consultations
At the beginning of the video counselling session, you and we will introduce all persons present in the room. The presence of or listening in by other persons is not permitted.
The video, voice and text transmission during the video consultation is end-to-end encrypted and therefore optimally secured.
We will not make any handwritten or automated recordings or transcripts of the video consultation. Your registration data will be deleted immediately after the end of the video consultation with you.
In order to protect your privacy, ensure a smooth process and guarantee data protection, please make sure that you are in a closed room that offers adequate privacy during the video counselling session
4. legal basis of the processing
The legal basis for the processing of your personal data in the context of the video consultation is, in accordance with Art. 6 (1) lit. a) GDPR, your consent, which you gave us when you registered for the video consultation. This consent is voluntary. You can revoke this consent at any time without giving reasons. All you need to do is send an email to our data protection officer (datenschutz@stwpb.de).
5. your rights as a data subject
You have the right to receive information about your personal data stored by us at any time. You also have the right to have your personal data corrected, blocked or, apart from the prescribed data storage for business transactions, deleted. To do this, please send an e-mail to datenschutz@stwpb.de to our data protection officer.
To ensure that data can be blocked at any time, this data must be kept in a lock file for control purposes. You can also request the deletion of the data, provided there is no legal archiving obligation. If such an obligation exists, we will block your data on request.
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can make changes or withdraw your consent by notifying us accordingly by e-mail to datenschutz@stwpb.de with effect for the future.
We have a statutory period of one month to process your request, which can be extended by a further two months in exceptional cases. We will endeavour to process your request in full within one month of receipt as far as possible. Please note that due to statutory retention periods, we may still be obliged to store certain of your personal data even after a request for deletion.
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
The data protection supervisory authority responsible for us is the
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
e-mail: poststelle@ldi.nrw.de
IT/digital and data protection

