Data protection policy for students at the University of Münster (WWU)

1. Name and address of the responsible controller

The responsible controller as defined in the EU General Data Protection Regulation (GDPR), other national data protection laws of the EU member states and other data protection-related provisions is:

Westfälische Wilhelms-Universität Münster (WWU) / University of Münster (WWU)
represented by its Rector, Prof Dr Johannes Wessels,
Schlossplatz 2, 48149 Münster, Germany
Tel.: + 49 251 83-0
Email: verwaltung@uni-muenster.de

If you have any questions concerning the processing of your personal data by the Student Admissions Office, please contact the staff of the Student Admissions Office:
University of Münster, Student Admissions Office, Schlossplatz 2, 48149 Münster,
Service hotline: + 49 251/83-20001, email: studierendensekretariat@uni-muenster.de.

For questions concerning the processing of your personal data by the Examinations Office, please contact the staff of the respective Examinations Office.

For questions concerning the processing of your personal data by the faculty of your chosen subject of study, please contact the staff of your faculty.

For questions concerning the processing of your personal data by offices of the central University administration or other central departments, please contact the staff of the corresponding office or department.

2. Name and address of the Data Protection Officer

The Data Protection Officer of the University of Münster is:
Nina Meyer-Pachur
Schlossplatz 2, 48149 Münster
Tel.: + 49 251 83-22446
Email: Datenschutz@uni-muenster.de

3. Data processing in connection to your application for admission to the University of Münster

During your studies at the University of Münster, we process the following personal data:

  1. personal data required for enrolment at the University of Münster (name, contact data, place and date of birth, general university entrance qualification, proof of health insurance, digital photo for the student ID, chosen subjects of study, and if applicable, information on prerequisites for admission to selected subjects etc.)
  2. personal data concerning study-related matters (student ID number, number of semesters studied, leaves of absence, payment transactions of semester fees, general correspondence)
  3. required coursework and degree-relevant examinations which you have completed, along with personal data related to these (e.g. exam registrations, failed attempts, if applicable, medical certificates and reports, certificates of participation for courses with mandatory attendance, certificates of completed coursework or degree-relevant examinations at other universities etc.)
  4. personal data related to university elections or other occasions which may arise due to your status as a member of the University of Münster


Purpose of data processing
The processing of your personal data is necessary for managing your student status at the University of Münster, conducting academic operations efficiently and in compliance with the relevant examination regulations, certifying completion of your required coursework and degree-relevant examinations, issuing your degree certificate together with accompanying documents upon successful completion of your programme, and carrying out other activities related to your status as a member of the University of Münster.

Legal basis for processing personal data
Whenever processing of your personal data is necessary for compliance with legal regulations to which the University of Münster is subject, Art. 6 (1 c, 3 b) GDPR serves as the legal basis in conjunction with §§ 44 – 51, 63 - 66 of the Higher Education Act (HG NRW), the Enrolment Regulations of the University of Münster, the electoral regulations of the University of Münster, the examination regulations of the University of Münster, the Higher Education Statistics Act (Hochschulstatistikgesetz, HStatG), Book V of the German Social Code (SGB V), the contribution regulations of AStA and Student Support Services (Studierendenwerk).
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the University of Münster, Art. 6 (1 e, 3 b) GDPR serves as the legal basis for processing this data in conjunction with §§ 44 – 51, 63 - 66 of the Higher Education Act (HG NRW), the Enrolment Regulations of the University of Münster, the electoral regulations of the University of Münster, the examination regulations of the University of Münster, the Higher Education Statistics Act (Hochschulstatistikgesetz, HStatG), Book V of the German Social Code (SGB V), the contribution regulations of AStA and Student Support Services (Studierendenwerk).

Further recipients of your personal data
The personal information collected in connection to your application for admission is forwarded to the following recipients at and outside the University of Münster. The personal information collected in connection to your enrolment and degree programme is forwarded in part or whole to the following recipients at and outside the University of Münster:

Recipients at the University of Münster:
-    Centre for Information Processing (ZIV) and the IT support units of the respective faculties
-    Examinations Offices
-    faculties of your chosen subjects of study
-    AStA
-    Dept. for Strategic Planning and Academic Controlling
-    University Library (ULB)
-    if applicable, Dept. for Academic Legal Issues and Student Affairs
-    system interfaces (TLD-Immatrix, Karten-Management-System, Einschreibung, Topdesk)
-    Careers Service
-    University Centre for Teacher Education (ZfL)

Recipients outside the University of Münster:
-    Student Support Services (Studierendenwerk)
-    Deutsche Bahn
-    statutory health insurance providers
-    Unfallkasse NRW (accident insurer)
-    state institutions (IT.nrw, BAföG, Stiftung für Hochschulzulassung (DOSV))
-    Paypal
-    Google (reCAPTCHA interface (“I’m not a robot”))

Duration of storage of personal data
The personal data collected and processed in connection to your studies at the University of Münster is stored for as long as is necessary for fulfilling the intended purpose for which they were collected, or for as long as German law requires. Prior to being destroyed, all accompanying documents are offered to the University archive for possible storage.


4. Your rights as a data subject

You have the right to information about your personal data processed by the University of Münster (Art. 15 GDPR), the right to rectification of personal data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to withdrawal of consent (Art. 21 GDPR).
You also have the right to raise an objection with the supervisory authority. The responsible supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, tel.: +49 211 38424-0, email: poststelle@ldi.nrw.de