Privacy policy ZUCA - Club of Alumni
(including the mandatory information according to Art. 12 ff. GDPR)
The protection of your data is important to us. For this reason, and in order to comply with all legal information and clarification obligations incumbent on us, we will inform you below about how we, Zeppelin University, process your data and what rights you have with regard to data processing.
Subject matter of data protection
The subject of data protection is personal data. According to Art. 4 GDPR, this is all information that relates to an identified or identifiable person. This includes contact data (e.g. name, email address, telephone numbers). However, this also includes content data as typically found in the context of studies, employment and applications (e.g. education data or information on professional careers).
Who is responsible for data processing and how can I contact the person responsible?
The person responsible is:
Zeppelin Universität gemeinnützige GmbH (hereinafter referred to as "ZU")
Am Seemooser Horn 20
88045 Friedrichshafen
prsdmzd or specifically lmn-ffczd
Register court: Ulm Local Court
Register no.: HRB 63 2002
Phone +49 7541 6009-0
Fax +49 7541 6009-1199
Internal contact person for data protection issues
Dr. Michael Manger
Director of HR & Services
Phone +49 7541 6009-2151
Contact details of the data protection officer
Christoph Rank
machCon Germany GmbH
Where do we obtain your personal data from?
Your data is collected by yourself.
Purpose and legal basis of the data processing
With the alumni network, we keep you, as your former university, up to date with news, offers, support requests and networking opportunities via the ZUCA. Data is collected and processed in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). In the following, we will inform you about the respective scope, the individual purposes and the legal basis. We observe the principle of earmarked data use. We only process the aforementioned data for the stated purposes. Personal data will not be passed on to third parties without express consent or without a legal or judicial obligation to provide information.
1. necessary data processing for recording and use in ZUCA
Registration in the ZUCA is voluntary and free of charge. However, in order to be able to offer the services in the ZUCA, we require the so-called mandatory information, which is marked separately with an "*". The data collection and data processing is based on Art. 6 para. 1 sentence 1 lit. b) GDPR (fulfillment of a contract). This data is used to check the personal requirements for admission to the ZUCA (ZU membership) and to provide you with information about the ZUCA offers and general developments at ZU.
2. data processing based on a declaration of consent
Finally, data that you provide voluntarily will be stored and processed. The legal basis for the storage and processing of the data follows from Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
First of all, this is data that we collect in order to evaluate and continuously improve our offers for the ZU (alumni) community (e.g. graduation year, degree program and place of residence).
If you decide to receive the ZU Newsletter, the TalentCenter Newsletter and/or invitations to the
to the Citizens' University, we will use your e-mail address to send you the respective newsletters.
If you give your consent for the ZU Alumni Office to contact you outside of the regular alumni communication on certain agreed topics, we will also use your contact details to send you support requests. Specifically, this means that only the ZU employees responsible for alumni work will forward corresponding support requests. Data will not be disclosed to third parties (including students and alumni), or only with your consent.
Duration of data storage
The personal data will be stored for the duration of the "membership" in the ZUCA and deleted after termination, provided that there are no statutory retention obligations.
If the data you provide is transferred to third countries or international organizations?
Data is not transferred to third countries or international organizations.
Does automated decision-making including profiling profiling takes place?
No fully automated decision-making (including profiling) pursuant to Art. 22 GDPR is used to process the data provided by you.
Your rights as a data subject
Right to information pursuant to Art. 15 GDPR:
You have the right to request information free of charge as to whether and what data is stored about you and for what purpose it is stored.
Right to rectification pursuant to Art. 16 GDPR:
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR:
You have the right to demand that the person responsible delete your data immediately. The controller is obliged to erase personal data without undue delay where one of the following grounds applies:
- The purposes for which the personal data was collected no longer apply.
- you withdraw your consent to the processing. There is no other legal basis for the processing.
- You object to the processing. There is no other legal basis for the processing.
- The personal data was processed unlawfully.
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
Right to restriction of processing pursuant to Art. 18 GDPR and Section 35 BDSG:
You have the right to request the restriction of processing if one of the following conditions is met:
- The accuracy of the personal data is contested by you.
- The processing is unlawful, but you oppose the erasure.
- Personal data are no longer necessary for the purposes of the processing, but you require the data for the establishment, exercise or defense of legal claims,
- exercise or defense of legal claims.
- You have objected to the processing pursuant to Art. 21 (1) GDPR. As long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons, processing will be restricted.
Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the data provided by you in a structured, commonly used and machine-readable format from the person responsible. We must not prevent the data from being forwarded to another person.
Right to object pursuant to Art. 21 GDPR:
If the data processing is based on legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, you may have the right to object to the processing if you have special circumstances. To do so, please contact the person responsible.
Right of appeal to the supervisory authority pursuant to Art. 13 para. 2 lit. d, 77 GDPR in conjunction with § 19 BDSG:
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority.
To do so, please contact the competent supervisory authority.
Withdrawal of consent:
If the processing is based on your consent, you are entitled to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.