Privacy Policy

On this page, we inform you about the processing of personal data in the context of using the Lecture2Go service of the University of Hamburg, the purposes of processing, the legal bases, as well as your rights as a data subject in accordance with the General Data Protection Regulation.

Who is responsible for processing the data?

The responsible party is the University of Hamburg (Mittelweg 177, 20148 Hamburg), represented by its President (email: praesident@uni-hamburg.de).

Who can I contact if I have questions about data protection?

You can address questions about data protection to the Data Protection Officer: Data Protection Officer of the University of Hamburg, Mittelweg 177, 20148 Hamburg, email: dsb@uni-hamburg.de

For what purpose and which personal data are processed?

The website uses Matomo, an open-source software for analyzing and statistically evaluating visitor access. Matomo uses your computer’s IP address to count page visits. This information is anonymized immediately after processing and before it is stored.

When using the service with your own user account, the following data is also processed: first name, last name, user ID, email, password, user group affiliation, institutional affiliation, titles of courses or lecture series, recording dates, and upload dates.

The purpose of this is to assign user accounts to individuals, as well as to organize and locate media files.

All further data processing is carried out for specific purposes:

a) Educational videos for asynchronous teaching

b) Follow-up of in-person teaching

c) Insight for prospective students

d) Documentation of one-time events

e) Online teaching

On what legal basis does the processing take place?

The processing of personal data when users visit the website without their own user account, using Matomo, is carried out on the basis of Art. 6(1)(e), (3) GDPR in conjunction with § 4 of the Hamburg Data Protection Act (HmbDSG) and § 6(2)(1) of the Hamburg Higher Education Act (HmbHG).

If employees or external speakers have given their consent in advance to the recording and publication of the event, the legal basis for the processing of personal data is Art. 6(1)(a) GDPR.

Who has access to the personal data?

The data is processed on the server systems of the University of Hamburg, and the confidentiality of the content is ensured. The University of Hamburg has access to all video and audio data as well as metadata of users with their own user accounts, and the University of Hamburg ensures the corresponding data sovereignty of the users.

For non‑public media, all persons who have received the link and password from the teaching staff have access in the sense of viewing and listening. For public media, all persons worldwide have access in the sense of viewing and listening. If a media file is optionally made available for download by the teaching staff, it can be downloaded and reused according to the license defined by the teaching staff.

How long is the data stored?

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Media data is managed by the individuals who uploaded it and is deleted upon request if necessary.

Your rights

• Right to information: I have a right to information from the controller pursuant to Article 15 GDPR;
• Right to rectification: I may demand that the controller rectify any inaccurate data pursuant to Article 16 GDPR;
• Erasure: I have the right to have my personal data and information deleted by the controller—namely, “the right to be forgotten”—pursuant to Article 17 GDPR;
• Restriction of processing: I have the right to restrict the processing of my personal data pursuant to Article 18 GDPR;
• Right to data portability: I have the right to demand from those responsible that my personal data be transferred pursuant to Article 20 GDPR.
• The right to object to the processing of your data (Art. 21 DSGVO);
• the right to withdraw your consent to the collection, processing, and use of your personal data at any time with future effect (Article 7 paragraph 3 GDPR);
• Right to lodge a complaint: I have the right to lodge a complaint with the supervisory authority about the processing of my personal data (Article 77 GDPR).