Privacy Statement

0.1 Data protection information for websites

This privacy policy informs you about the processing of your personal data in connection with the use of this website and the functionalities made available through it (hereinafter collectively referred to as the "website"), in particular in connection with the use of the DSpace repository, as well as other processing described below.

We use DSpace to provide the repository. DSpace is an open source platform that is used to manage, store and distribute digital content such as research papers, dissertations and datasets.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

1 GENERAL

1.1 Data Controller and Data Protection Officer

The website is operated by IU Group N.V., Square Ambiorix 10, BE-1000 Brussels ("IU Group"). IU Group is responsible for the processing of your personal data.

The IU Group processes your personal data on a topic-related basis under joint responsibility with other companies belonging to the Group (all based at Mülheimer Straße 38, 53604 Bad Honnef, Germany, unless otherwise stated). Activities in connection with the operation of IU International University are carried out under joint responsibility with IU Internationale Hochschule GmbH, Juri-Gagarin-Ring 152, 99084 Erfurt ("IU"), also with regard to its study programs, including contacting and sending information. For central services within the Group such as controlling, accounting and personnel administration, office, process and quality management, purchasing and sales as well as central services, the aforementioned companies use the support of IU Corporate Services GmbH, which is also responsible for data processing; IU IT Services GmbH, Ridlerstr. 57, c/o IU Group NV, 80339 Munich, with regard to the provision of the operational IT infrastructure including hardware and software, telecommunications and electronic communication; IU Examination Service GmbH for services in the area of examination supervision; IU Marketing Service GmbH and IU Sales Services GmbH, Ridlerstr. 57, c/o IU Group NV, 80339 Munich, for marketing and sales services (including marketing via this website and the operation of the applicant portal for students); IU Commercial 1 GmbH for the management of the online campus and IU Commercial 2 GmbH for the management of the campus locations and with regard to the campus programs; IU Student Services GmbH together with the respective GmbH that exists for the respective location and is named after its city name, e.g. IU Dortmund GmbH or IU Bonn GmbH, for the support of prospective students and students, in particular student advisory services. We will be happy to provide you with excerpts from the agreement on joint responsibility. Please contact datenschutz@iu.org.

The IU Group has appointed Dr. Annette Demmel, SPB DPO Services GmbH, An der Buche 4, 13465 Berlin, annette.demmel@spb-dpo-services.com as data protection officer for the aforementioned companies.

You can contact the IU Group either in writing or by e-mail at datenschutz@iu.org.

1.2 Recipients

Unless otherwise described for the respective processing, only those IU employees who are responsible for performing a specific task, e.g. knowledge management or evaluating feedback, have access to your personal data. In addition, employees who are responsible for the operation of our IT systems may have access to some of your personal data as part of their work, e.g. the administration of an application or the performance of IT security tasks. Our employees are obliged to handle personal data confidentially.

As part of our business activities, we use the help of various service providers, in particular for the purposes mentioned above. Insofar as the service providers used are given access to personal data, we have concluded the necessary agreements to protect your personal data, in particular order processing agreements in accordance with Art. 28 GDPR, in which we oblige our service providers to maintain confidentiality. Furthermore, banks for the purpose of processing payments or lawyers, tax consultants and auditors may be recipients of personal data as part of their work for us. In some cases, we transmit personal data due to legal obligations. Data may be transmitted to the police and the public prosecutor's office if a criminal offense is suspected or in investigation proceedings. Further information on who receives access to your personal data can be found in the description of the respective application.

1.3 Transfer to Third ountries

If we transfer data to service providers in so-called third countries, this is described in the respective application. Some of these third countries do not have an adequate level of data protection. An overview of third countries for which an adequate level of data protection has been determined by the EU Commission can be found here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. In particular, if data is transferred to the USA, there is a risk that your personal data will be processed by the authorities there for control and monitoring purposes without you being aware of this or having sufficient legal remedies available to you. We regularly secure transfers to third countries by using the so-called EU standard contractual clauses. You can access a copy at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. If some providers use binding corporate rules for data protection or the transfer is secured because a company is certified in accordance with the Data Privacy Framework (see https://www.dataprivacyframework.gov/s/program-overview), this is explained in the individual applications. If the use of individual applications is optional or alternatives are available, we will point this out and - if you do not wish to use the alternatives - we will only process your personal data in such cases on the basis of your separate consent in order to legitimize the data transfer in accordance with Art. 49 para. 1 lit. a) GDPR.

1.4 Consent

If you give your consent to processing, you can withdraw this at any time with effect for the future without giving reasons. To do so, please use the IU contact channels mentioned at the beginning or change the switch settings if you have given your consent via the switch settings you have selected.

1.5 Retention

In principle, we delete your data as soon as it is no longer needed for the required purpose and there are no retention obligations. We usually delete your personal data within a short period of time. If you object to processing in accordance with Art. 21 para. 2 GDPR, we will delete your data within one month of your objection, provided that there are no other statutory retention periods to the contrary or we are obliged to block your data. If the processing is based on your consent and you withdraw it or the processing ends for other reasons, we will process the information necessary to prove the consent previously given, i.e. the date, time, details of the consent given and the subject of the consent for a period of three years after the consent-based processing ends.

2 DATA COLLECTION WHEN VISITING THE WEBSITE

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used

The processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b) General Data Protection Regulation ("GDPR") on the basis of your use of our website and our interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

We process your data in order to provide you with a functional website, store the data for the duration specified by the IU for this purpose and then delete your data.

Only IU employees who are responsible for maintaining the website have access to your personal data.

We use third-party services on our website. Further information on these services and the associated data processing can be found in this privacy policy or in the cookie settings.

If you wish to use certain functions of our DSpace repository, such as uploading content, user registration is required. We collect personal data such as your name, e-mail address, IT usage data such as IP address and UserID. This data is used exclusively to manage your user account and to provide the services you have requested.

If you upload content to our DSpace repository, the metadata you provide, such as author names, titles, abstracts, other data related to the respective submission (such as name of author and, if applicable, editors and contributors, ORCID, affiliation, subject area or field of study and, if applicable, other descriptive information) may be made accessible. The files uploaded by you may also be publicly accessible, depending on the publication settings selected.

3 COOKIES

Depending on your browser settings and whether you have given us your consent, cookies may be set when you visit this website in order to extend the functionality of the website and make it more convenient for you to use. Cookies are small text files that are stored on your computer. Most of the cookies used by IU are deleted from your hard disk at the end of the browser session ("session cookies"). In addition, IU uses so-called permanent cookies ("persistent cookies"), which remain on your end device in order to recognize you the next time you visit the website. If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent and as described in the server log files. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

An overview of the cookies used and the duration of the respective cookie storage can be found in the cookie settings in our cookie consent tool.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website (so-called "necessary cookies") or in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of your consent for all other cookies (marketing and analysis cookies).

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. Cookie settings are described in the help menu of each browser, which explains how you can change your cookie settings.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4 CONTACT (E.G. BY E-MAIL)

If you contact us by e-mail, we will process the information necessary to carry out the contact, e.g. your e-mail address, the information you provide and the date and time of the contact. If you also provide us with your name and other personal data, we will also process these.

5 RIGHTS OF THE DATA SUBJECT

You may contact IU either in writing or by email at datenschutz@iu.org to exercise the following rights:

information about your data in order to check and verify it,
Receive a copy of your personal data,
rectification, erasure or restriction of processing, including the right to have incomplete or inaccurate data completed by means of supplementary communication,
Right to object to processing, ; please note that you have a right to object to the processing of personal data processed by us on the basis of legitimate interests pursuant to Art. 21 GDPR in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR; you have a right to object to the processing if this is done for reasons arising from your particular situation; if the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation,

You can receive the data you have provided in a structured, commonly used and machine-readable format and transmit this data to another controller, provided that you have given your consent to the processing or the processing is based on a contract.

If you have given us your consent to process your personal data, you can withdraw this consent at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority in connection with the processing of your personal data. To exercise this right, you can contact the authority responsible for your place of residence or the authority responsible for the registered office of IU in Thuringia:

The Thuringian State Commissioner for Data Protection, Häßlerstraße 8, 99096 Erfurt.

6 AUTOMATED DECISION-MAKING AND PROFILING

With the exception of the processes described below, your personal data will not be used by IU for profiling.

When you visit our website, we place cookies from various providers, provided that you have given your consent to this. The cookies you allow are used to generate data as described in the server log files. This data is merged and combined by IU with the help of a Google solution. For this purpose, IU has concluded a processing agreement with Google, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC is certified under the Data Privacy Framework. If we receive information about you via our website, for example because you ask us to send you information material or contact us, we store your data and combine it with the data generated by cookies. We also receive reports from Google Analytics with data that we also combine with your data. You can find more information in the section on Google Analytics.

With your consent, we store the data generated via our website in a CRM solution. We analyze the data to determine whether you are only interested in a course of study offered by us or whether you have also applied and enrich your data record with corresponding information. We store this profile created about you in a Salesforce solution from the provider Salesforce, based at Floor 26 Salesforce Tower, 110 Bishopsgate EC2N 4AY London, England.

The legal basis for the data processing carried out here is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, which you can withdraw at any time with effect for the future by contacting datenschutz@iu.org.

7 WHY IS YOUR PERSONAL DATA COLLECTED?

You may choose not to provide us with your personal data or to provide incomplete personal data. In such a case, for example, if you prevent the storage of a cookie, this may mean that you may not be able to use all the functionalities of the website.