Privacy Policy
Information on the processing of personal data
in the context of the whistleblower portal (uni-bielefeld-hinweisgeben.de) and the internal reporting office according to HinSchG of Bielefeld University
(Version 1.0 from 06.11.2024)
With this data protection notice, Bielefeld University fulfils its duty to provide information in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (EU GDPR) for the processing of personal data mentioned above.
With regard to the other terms used, "personal data", "processing", "controller", "third party", etc., please refer to the definitions in Article 4 of the EU GDPR.
1. contact details
Bielefeld University, a public corporation with legal capacity supported by the state of North Rhine-Westphalia, is responsible for the processing. It is represented by the Rector, Prof Dr Angelika Epple.
1.1 Contact details of the controller
Bielefeld University
Universitätsstraße 25
D-33615 Bielefeld
Tel: 0521 / 106 - 00
Email: post@uni-bielefeld.de
Web: https://www.uni-bielefeld.de
1.2 Specialist contact
Email: anna.balkenhol@uni-bielefeld.de
Phone: 0521 106 3331
Web: http://www.uni-bielefeld.de/compliance
1.3 Contact details of the data protection officer
You can contact the data protection officer by post at the address of the controller
Phone: 0521 106-5225
Email: datenschutzbeauftragte@uni-bielefeld.de
2. personal data processed and purposes
As part of the whistleblower portal and the internal reporting centre in accordance with HinSchG at Bielefeld University, your personal data is collected and processed for the following purposes:
For whistleblowing
- If not reported anonymously: Name and contact details
- Personal data that is the content of your report.
For the processing of reports/initiation of follow-up measures
- Personal data required for taking follow-up measures.
3. legal basis for data processing
The legal basis for the processing of personal data for the above-mentioned purposes is Art. 6 para. 1 lit. c. EU-GDPR in conjunction with. § 10 HinSchG.
4. data transfers
As a matter of principle, we do not transfer your personal data processed by Bielefeld University for the purposes mentioned under point 2 to third parties.
In individual cases, data may be transferred to third parties on the basis of a legal authorisation, for example transfer to law enforcement authorities for the investigation of criminal offences within the framework of the provisions of the Code of Criminal Procedure (StPO).
We use external service providers (processors) who process personal data on our behalf. We have completed contracts with these service providers in accordance with Art. 28 GDPR to ensure the protection of your data.
Vispato GmbH, Hansaallee 299, 40549 Düsseldorf is used to provide an internet-based platform for a whistleblowing system.
The content of the reports and user data of the predefined employees of the internal reporting centre are processed.
Your personal data will not be transferred to countries outside the European Union (so-called third countries).
5 Deletion periods
Data processed for the purposes mentioned under 2 will be deleted or - if the data is in the form of paper documents - destroyed in accordance with the provisions of Section 11 (5) HinSchG (as a rule three years after the degree of the procedure).
6 Your rights as a data subject
As a data subject, you can assert the rights granted to you by the EU GDPR at any time:
- the right to help desk whether and which of your data is being processed (Art. 15 EU GDPR),
- the right to request the rectification or completion of data concerning you (Art. 16 EU GDPR)
- the right to erasure of the data concerning you in accordance with Art. 17 EU GDPR
- the right to request the restriction of the processing of data in accordance with Art. 18 EU GDPR,
In addition to the aforementioned rights, you have the right to lodge a complaint with the data protection supervisory authority (Art. 77 EU GDPR), for example with the data protection authority responsible for the university.
State Commissioner for Data Protection and
Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
in the context of the whistleblower portal (uni-bielefeld-hinweisgeben.de) and the internal reporting office according to HinSchG of Bielefeld University
(Version 1.0 from 06.11.2024)
With this data protection notice, Bielefeld University fulfils its duty to provide information in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (EU GDPR) for the processing of personal data mentioned above.
With regard to the other terms used, "personal data", "processing", "controller", "third party", etc., please refer to the definitions in Article 4 of the EU GDPR.
1. contact details
Bielefeld University, a public corporation with legal capacity supported by the state of North Rhine-Westphalia, is responsible for the processing. It is represented by the Rector, Prof Dr Angelika Epple.
1.1 Contact details of the controller
Bielefeld University
Universitätsstraße 25
D-33615 Bielefeld
Tel: 0521 / 106 - 00
Email: post@uni-bielefeld.de
Web: https://www.uni-bielefeld.de
1.2 Specialist contact
Email: anna.balkenhol@uni-bielefeld.de
Phone: 0521 106 3331
Web: http://www.uni-bielefeld.de/compliance
1.3 Contact details of the data protection officer
You can contact the data protection officer by post at the address of the controller
Phone: 0521 106-5225
Email: datenschutzbeauftragte@uni-bielefeld.de
2. personal data processed and purposes
As part of the whistleblower portal and the internal reporting centre in accordance with HinSchG at Bielefeld University, your personal data is collected and processed for the following purposes:
For whistleblowing
- If not reported anonymously: Name and contact details
- Personal data that is the content of your report.
For the processing of reports/initiation of follow-up measures
- Personal data required for taking follow-up measures.
3. legal basis for data processing
The legal basis for the processing of personal data for the above-mentioned purposes is Art. 6 para. 1 lit. c. EU-GDPR in conjunction with. § 10 HinSchG.
4. data transfers
As a matter of principle, we do not transfer your personal data processed by Bielefeld University for the purposes mentioned under point 2 to third parties.
In individual cases, data may be transferred to third parties on the basis of a legal authorisation, for example transfer to law enforcement authorities for the investigation of criminal offences within the framework of the provisions of the Code of Criminal Procedure (StPO).
We use external service providers (processors) who process personal data on our behalf. We have completed contracts with these service providers in accordance with Art. 28 GDPR to ensure the protection of your data.
Vispato GmbH, Hansaallee 299, 40549 Düsseldorf is used to provide an internet-based platform for a whistleblowing system.
The content of the reports and user data of the predefined employees of the internal reporting centre are processed.
Your personal data will not be transferred to countries outside the European Union (so-called third countries).
5 Deletion periods
Data processed for the purposes mentioned under 2 will be deleted or - if the data is in the form of paper documents - destroyed in accordance with the provisions of Section 11 (5) HinSchG (as a rule three years after the degree of the procedure).
6 Your rights as a data subject
As a data subject, you can assert the rights granted to you by the EU GDPR at any time:
- the right to help desk whether and which of your data is being processed (Art. 15 EU GDPR),
- the right to request the rectification or completion of data concerning you (Art. 16 EU GDPR)
- the right to erasure of the data concerning you in accordance with Art. 17 EU GDPR
- the right to request the restriction of the processing of data in accordance with Art. 18 EU GDPR,
In addition to the aforementioned rights, you have the right to lodge a complaint with the data protection supervisory authority (Art. 77 EU GDPR), for example with the data protection authority responsible for the university.
State Commissioner for Data Protection and
Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf