This Privacy Statement explains which personal data is collected before the first use as well as during the use of the Stud.IP learning platform and how it is processed. In addition, it is intended to comply with the obligation to provide information required under Art. 13 of the General Data Protection Regulation (GDPR).
I. Responsible entity
Carl von Ossietzky Universität Oldenburg
Ammerländer Heerstr. 114-118
D-26129 Oldenburg, Germany
II. II. Process owner
IT Services of the Carl von Ossietzky University Oldenburg
Z. Hd. Herbert Greis
Tel.: 49 (0)4 41 / 7 98 - 48 00 +49 (0)4 41 / 7 98 - 25 55
Raum: A2 3-301
Responsible for administration:
Phone: +49 (0)4 41 / 798 - 4832 (Mr. Müller)
III. Data protection officer
If you have any questions about data protection in connection with this website, please contact us:
The Data Protection Officer
Room: V03 3 - S330
Phone: +49 (0)4 41 / 0441 798 - 4196
IV. Scope of processing
1 Collection and use of personal data
Required personal data:
The Stud.IP platform offers users personalised access to learning materials, which is why users must be registered with name, first name and e-mail.
A user name is required when logging on to the system. For users at the University of Oldenburg, this is the anonymous user ID and for external users it is usually their university e-mail address. This data is stored by Stud.IP in encrypted form so that it is not possible to determine the original value, i.e. the matriculation number or personnel number cannot be determined for a person.
If you use the online exam registration and online grade inspection, you will also record the matriculation number, which is only stored and used for the purpose of the online exam functions. The matriculation number can only be viewed by yourself, the lecturer of the respective examination for which you have registered, and the administrators of the learning platform.
Voluntary disclosure of personal data:
In addition, you may optionally provide other personal information, for example to facilitate communication with other users.
Personal data in the context of the "doctoral student" status:
If you use Stud.IP with the status "Promovend” (doctoral candidate), then the additional personal data required for the administration of the doctoral process will be processed in Stud.IP. These are displayed under the "Doctoral student" tab and can be checked by you and supplemented as required, e.g. as part of a structured doctoral programme.
2 Purposes of data processing/deletion periods
All information entered in Stud.IP is processed on secure systems of the University of Oldenburg and not passed on to third parties.
b) Required personal data:
For the purpose of user administration, establishing contact with you and providing personalised services (registration for events and internships and their administration, examination registration, review of grades, creation of mailing lists, registration for graduation celebrations), the above-mentioned mandatory personal data must be stored and processed by us. They are deleted 1 year after exmatriculation at the latest.
c) Personal data provided voluntarily:
This data serves exclusively to facilitate or improve communication with other users and can be deleted or changed at any time by yourself.
d) Personal data within the framework of the "doctoral candidate" status:
This data is used exclusively for managing your graduation process and for your information. You can also enter any additional services required here. This information is deleted when you no longer have a status of "doctoral student" or when your Stud.IP account is deleted.
e) Server log files
When you access this website, your IP address and the date and time of access are registered. The collection and use of this log file data serves only to identify errors or malicious access attempts, so they are not evaluated in connection with names or e-mail addresses. This data is stored for a period of 5 days and then deleted.
f) Stud.IP log files
When a user accesses this website, the browser type, operating system, monitor size and user status as well as the date and time of access are registered. The only purpose of collecting and using this log file data is the evaluation of the data for purely statistical research and evaluation purposes. Names, university IDs or e-mail addresses which could be used to identify the user are not stored.
3 Legal bases
The above-mentioned personal data (with the exception of the data mentioned in 2 c)) is processed for members and employees of the university (in particular students of the University of Oldenburg) in accordance with Art. 6 Para. 1 (e) of the GDPR in connection with Sections 3 and 17 of the Lower Saxony University Act (NHG) for the fulfilment of the tasks of the university.
The above-mentioned personal data is processed for members and employees of the university who are in a service or employment relationship with the University of Oldenburg and for whom the use of Stud.IP is not necessary in the context of their employment relationship and for external users on the basis of Art. 6 Para. 1 (a) of the GDPR (consent), which they submit in electronic form when registering for the first time. The same applies to all users with regard to the data mentioned under item 2 c).
The processing of the above-mentioned personal data (with the exception of those specified in 2 c) is carried out for members and employees who are in a service or employment relationship with the University of Oldenburg in accordance with Section 12, Paragraph 1 of the Lower Saxony Data Protection Act (NDSG) in conjunction with Sections 88-95 of the Lower Saxony Civil Servants Act (NBG) insofar as the use of Stud.IP is necessary for the employment relationship.
V. Rights of data subjects
You can request information about the personal data stored about you at any time, free of charge. Simply use the action "Request privacy information" provided in your Stud.IP profile for this purpose.
If your personal data stored in Stud-IP is incorrect, you can request it to be corrected at any time or correct it yourself in your profile.
You can request the deletion of your personal data at any time. However, with regard to the personal data required for use, this also means that you can no longer use Stud.IP.
At any time, you can request that processing of your personal data be restricted.
You can object to the processing of your personal data at any time. However, with regard to the personal data required for use, this also means that you can no longer use Stud.IP.
You have the right to receive the personal data you have provided in a structured, common and machine-readable format, and you have the right to communicate such data to another data controller without interference from the data controller, provided that the processing is based on consent or a contract and the processing is carried out using automated procedures (right to data transferability). You can also simply use the action "Request data protection information" provided in your profile in Stud.IP for this purpose.
You may revoke any consent you may have given at any time with effect for the future, without affecting the legality of the processing carried out on the basis of the consent until revocation. Please send your revocation to: the above address or by email to email@example.com. Your user data will then be deleted immediately. If the revocation also includes indispensable personal data, you will no longer be able to use the Stud.IP learning platform.
If you feel that the processing of your personal data violates data protection regulations, please contact the data protection officer (see Section III). You also have the right to complain to the competent supervisory authority. The address of the competent supervisory authority is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
VI. VI. Links
Information provided by the data protection officer and the data protection management team of the University of Oldenburg
Text of the European General Data Protection Regulation (GDPR)
Data Protection Act of Lower Saxony (NDSG)
Lower Saxony Higher Education Act (NHG)
Further information on data protection can also be found on the website of the State Commissioner for Data Protection: