Data privacy information for applicants
Your personal data are processed as part of the process of applying for a university place at Universität Hamburg. Processing of this data is governed by law, particularly the General Data Protection Regulation (GDPR) and the Hamburg higher education act (Hamburgisches Hochschulgesetz, HmbHG).
In accordance with our obligations under Article 13 GDPR we would like to inform you of the details relevant to the data processing.
Personal and contact information
The Controller as per the GDPR
The Controller as per the General Data Protection Regulation is Universität Hamburg, a corporation under German public law. Contact details:
represented by the President,
Contact person for questions about data processing
Questions about the data processing described below can be directed to
Department 3: Studies and Teaching, Section 30: Advising and Administration
Tel: +49 40 42838‑8924
Data protection officer
Additionally, you can contact the data protection officer:
Datenschutzbeauftragte der Universität Hamburg
Personal data will be processed for the following purposes:
Universität Hamburg collects and stores the data provided by you in your application for the purpose of conducting the application process and notification of acceptance.
2. Legal basis
The processing of personal data as part of your application for enrollment is lawful pursuant to Article 6 paragraph 1 letter e and paragraph 3 GDPR in conjunction with Section 111 subsections 1 and 8 HmbHG in conjunction with the Universität Hamburg data privacy bylaws (Satzung der Universität Hamburg über die Erhebung und Verarbeitung von personenbezogenen Daten). This processing is required to perform a duty in the public interest, delegated to Universität Hamburg by government authority.
3. Categories of personal data
The following categories of personal data will be processed:
address, contact details, your student history, qualifications, identification data, authentication data.
4. Recipients / categories of recipients
The personal data will be transmitted to the following recipients / categories of recipients:
Internal: Universität Hamburg faculties
External: Stiftung für Hochschulzulassung (Foundation for Higher Education Admissions) for the purpose of coordinating state-wide application procedures as part of the Dialogue-Oriented Service Procedure (DoSV).
5. Communication of personal data to a third country
We do not plan to communicate your personal data to a third country / international organization.
6. Period of storage
Personal data will be stored for the following period:
Data pertaining to non-enrolled applicants will be deleted after one year without exception.
7. Your rights
You have the following rights:
a. Right to withdraw consent
If the processing of your data is based on your consent, you may withdraw your consent at any time with future effect and without observing any formal requirements. Upon receipt of withdrawal of your consent, your data may no longer continue to be processed and must be deleted immediately if there is no other legal basis for their processing. This does not affect any previous processing of data and information.
b. Right to information
You have a right to information from the Controller pursuant to Article 15 GDPR.
d. Right to rectification
You may demand the Controller rectify any inaccurate data pursuant to Article 16 GDPR.
d. Right to erasure (“right to be forgotten”)
You have the right to have your personal data and information deleted by the Controller—that is, “the right to be forgotten” pursuant to Article 17 GDPR.
e. Right to restriction of processing
You have the right to restrict the processing of your personal data pursuant to Article 18 GDPR.
f. Right to data portability
If you have granted your consent to the processing of your data, or an application for the processing of your data has been made, and the processing of such data is conducted using automated means, you have a right to data portability (Article 20 GDPR).
g. Right to object
If the processing of your data is based on Article 6 paragraph 1 letters e or f GDPR, you have a right to object to this processing to the Controller pursuant to Article 21 GDPR.
h. Right to lodge a complaint
You have the right to lodge a complaint with the Hamburg Commissioner for Data Protection and Information (HmbBfDI) against the processing of your personal data.
General information on these rights:
In some cases, your request cannot or may not be complied with. If there are statutory grounds why your request cannot be complied with, you will be informed of the reason for denial.
8. Provision of personal data
You are not obliged to provide Universität Hamburg with your personal data and information; however, failure to do so may render Universität Hamburg unable to process and handle your matter.
As part of your application, you need to provide only the personal data required for determining your enrollment and for statistical purposes.
Without these data, we are generally forced to reject your application.