The University of Cologne and its independent Cologne University Foundation take the protection of your data very seriously. We want you to know what data we collect and how we use it. In light of the EU General Data Protection Regulation (GDPR), which takes effect on May 25, 2018, in all countries of the European Union, we would also like to inform you of your rights. 

The University of Cologne and its independent Cologne University Foundation provide information about the activities of the University and its independent foundation to members and affiliates of the University, as well as to people who live in the region or are connected to the University through their studies or other ties.
In doing so, we also process personal data, as described below.
 

The controller responsible for this data processing is
the University of Cologne
, Albertus-Magnus-Platz
5, 0923 Cologne
, legally represented by the Rector, Professor Dr. Joybrato Mukherjee
, or 
the Cologne University Foundation
, Albertus-Magnus-Platz
50, 923 Cologne
, legally represented by the Board of Directors and
, acting on its behalf, Rector Professor Dr. Joybrato Mukherjee

Data processing for the University or the Foundation is carried out in a completely uniform manner, for purposes in accordance with the bylaws, and by the same group of individuals using the same systems. However, since the Foundation—which is 100 percent controlled by the University—is an independent legal entity and the accounting for grant funds is handled by it depending on the project, the Foundation is to be designated here as the data controller under data protection law. 

The processing entity in both cases is:
Cologne University Foundation
Beate Lippelt
Albertus-Magnus-Platz, D-50923 Cologne
Tel.: +49 15115570892
Email: beate.lippelt@stiftung-uni-koeln.de 

The contact information for the University of Cologne’s Data Protection Officer is as follows:
University of Cologne
Data Protection Officer
Albertus-Magnus-Platz
50923 Cologne
Email: dsbverw@uni-koeln.de

Purpose of processing, data sources, legitimate interest, legal basis
We are interested in building a good relationship with you and providing you with information about the activities of the University and its Foundation. In particular, we wish to foster ties with those individuals who support or have supported specific university projects through financial or in-kind donations. We would like to further deepen your connection to the University and its Foundation and express our appreciation for you more fully, so that people interested in the University of Cologne and its Cologne University Foundation have the opportunity to selflessly support important projects in research, teaching, and for society, or for the University of Cologne in general. 

To this end, we process contact information. We have obtained this information either because

• you voluntarily provided them to us for this purpose (legal basis: consent pursuant to Art. 6(1), sentence 1, letter a of the GDPR),
• you are a member of the university and we inform you as part of internal university communications (generally only certain groups, such as university faculty members or emeritus professors; Data sources: e.g., faculties, human resources, student affairs) (Legal basis: legitimate interest pursuant to Art. 6(1), sentence 1, letter f of the GDPR),
• You have supported the university with a donation and we would like to stay in touch with you (Legal basis: legitimate interest pursuant to Art. 6(1), sentence 1, letter f of the GDPR),
• You represent a regional institution and have published your contact information (Legal basis: legitimate interest pursuant to Art. 6(1), first sentence, letter f of the GDPR).
   

If you have supported the university or the foundation with a donation, we process your donation and banking information for proper internal accounting and to issue a donation receipt (Legal basis: legal obligation pursuant to Art. 6(1), sentence 1(c) of the GDPR).

We collect photos—for example, from the annual celebration for donors and scholarship recipients of the scholarship program or for reporting in the university magazine—that we receive from you or that are taken with your permission by service providers (photographers) (Legal basis: consent pursuant to Art. 6(1), sentence 1, letter a of the GDPR). 

Categories of Recipients We process personal data primarily electronically on systems that support or enable fundraising management, the creation of newsletters, and the processing of payments. These systems are provided by selected data processors and operated within the EU; these processors ensure data protection and are contractually obligated to process personal data only upon instruction and exclusively for the purposes of the university. Photos in the university magazine are published publicly.

Retention Period We will store your personal data for the duration of the donor relationship and for the purpose of communicating about projects of the university and its foundation until you expressly object.

Your Rights
If you no longer wish to receive information from us, you may object to the use of your personal data at any time by sending us a letter or email. We would also like to inform you of your right to erasure, rectification, or restriction of the processing of your data, as well as your right to data portability and access to your data. You also have the right to file a complaint with a data protection supervisory authority. If the data processing is based on your consent, you may revoke it at any time; however, this does not affect the processing that took place on the basis of your consent prior to revocation.

You may contact us or the Data Protection Officer at the University of Cologne at any time with data protection concerns:
 

University of Cologne or Cologne University Foundation
Beate Lippelt
Albertus-Magnus-Platz, D-50923 Cologne
Tel.: +49 15115570892
Email: beate.lippelt@stiftung-uni-koeln.de
University of Cologne
Data Protection Officer
Albertus-Magnus-Platz
50923 Cologne
Email: dsb@verw@uni-koeln.de