FISU WORLD UNIVERSITY GAMES
As of: April 2023
The protection of your privacy is very important to us and a matter of course. The legal requirements demand comprehensive transparency about the processing of personal data. Below, we therefore inform you in detail about the processing of your personal data and your rights with regard to your personal data that is processed by us when you use our website at https://rhineruhr2025.com/de/ (“Website”). Personal data in this context are all data with which you can be personally identified.
If you have any further questions regarding data protection, please feel free to contact us by e-mail via email@example.com.
Contact details of the data controller and the data protection officer
2.1 Responsible for the processing of your personal data within the meaning of Article 4 No. 7 of the General Data Protection Regulation (hereinafter “GDPR”) is:
Rhine-Ruhr 2025 FISU Games gGmbH,
The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.2 You can contact our data protection officer:
General information on data processing
We process personal data only to the extent permitted by law. Any disclosure of personal data will only take place in the cases described below. The decision as to which personal data we process depends on which functions of the Website you use in each individual case.
Please note that links on our Website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and secure processing of your personal data on these websites operated by third parties.
Processing during the use of the Website
In the case of merely informational use of our Website, i.e. if you do not use any of the services of our Website mentioned below or otherwise transfer information to us, we only collect data that your browser transfers to our server (so-called “server log files”). When you access our Website, we collect the following data, which is technically necessary for us to be able to display the Website to you:
our Website visited (name and URL of the accessed file)
date and time of access
amount of data sent in bytes
source/reference from which you accessed the Website
operating system used
IP address used (shortened by the last octet)
The data processing is based on Art. 6 sec. 1 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our Website (smooth connection establishment, comfortable use, ensuring system security). The data is not transferred or used in any other way. We do not combine this personal data with other data sources. Disclosure only takes place insofar as this is necessary for the operation of our Website with regard to processors in accordance with Art. 28 GDPR, e.g. with storage at our host provider. A transfer to a third country or to an international organization is not intended. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal or system-adverse use of our Website.
Cookies on the Website
In order to make the visit to our Website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device and have various functions. Cookies do not cause any damage to your device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific device used. However, this does not mean that we gain direct knowledge of your identity. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address data to an individual extent. Persistent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie.
Cookies have various functions. We currently only use functional cookies to protect our legitimate interests in the best possible functionality of the Website as well as a customer-friendly and effective design of the Website visit. The legal basis is our legitimate interest in the factors mentioned above in accordance with Art. 6 sec. 1 (1) lit. f GDPR.
Other cookies are used to evaluate user behavior or display advertising (analysis or marketing cookies). We currently do not use these on our Website.
Please note that you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. How you can change your cookie settings is described in the help menu of the respective browser. You can find these for the respective browsers under the following links:
Microsoft Internet-Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/Cookies-blockieren
Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
Please note that the functionality of our Website may be limited if you do not accept cookies.
When contacting us (e.g. by email), personal data that you specify in your request is collected. In addition, your email address and the date and time of the contact request are stored. This data is stored and used exclusively for the purpose of answering your inquiry or contacting you and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 sec. 1 (1) lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 sec. 1 (1) lit. b GDPR. Your data will be deleted after completion of the request you have made. This is the case when it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary. We do not combine your personal data with other data sources. We do not disclose your personal data to third parties. A transfer to a third country or to an international organization is not intended. The provision of your personal data in connection with the sending of an email to us is voluntary, but the sending of an email is not possible without the provision.
Local Google Fonts
This Website uses so-called Google Fonts for the consistent display of fonts, which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), but are used by us locally via our own server.
The local integration of Google Fonts does not establish a connection of your browser to Google servers to display the texts and fonts on our Website. The associated data processing by us is based on the standards as described in 4.
Data processing of applicants
In the context of job advertisements, we process personal data of persons who apply to us. This includes in particular the applicants’ master data (details such as title, first name, surname, date of birth if applicable, place of residence if applicable, gender if applicable), applicants’ contact data and other application data that you as an applicant provide as part of your application (e.g. profile picture as well as other documents such as CV, cover letter, overall application, certificates).
We process data of our applicants for the purpose of carrying out the application process, in particular for reviewing applications, contacting the applicant and conducting interviews to evaluate and select suitable applicants. The legal basis for processing for these purposes is Sec. 26 (1) of the German Federal Data Protection Act (“BDSG”).
In the event of employment, the data will be transferred to the personnel file. Information on the storage period can be found in the information on the processing of personal data of our employees. Otherwise, the data will be stored for evidence purposes for any assertion, exercise or defense of legal claims for a period of six months after completion of the application process but will then be routinely deleted.
If you give us your consent pursuant to Art. 6 sec. 1 (1) lit. a GDPR to include your personal data in our applicant pool even after the application process has been completed, we will store your data that you provided to us in connection with your application beyond the period of six months for up to a maximum of two years. In this case, we will use your data when assessing your suitability for another position. You may withdraw your consent at any time with effect for the future as described in 10.2.
There will be no disclosure of your personal data to third parties. A transfer to a third country or to an international organization is not intended. The provision of this data is voluntary. However, if the data is not provided, it will not be possible to carry out an application procedure and, if applicable, to hire you.
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
you have given your explicit consent pursuant to Art. 6 sec. 1 (1) lit. a GDPR,
the transfer pursuant to Art. 6 sec. 1 (1) lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection not disclosing your data,
in the event that a legal obligation exits for the transfer pursuant to Art. 6 sec. 1 (1) lit. c GDPR,
this is legally permissible and required by Art. 6 sec. 1 (1) lit. b GDPR for the processing of contractual relationships with you, or
this is done to a service provider acting on our behalf and on our exclusive instructions, whom we have carefully selected (Art. 28 sec. 1 GDPR) and with whom we have concluded a corresponding contract for order processing (Art. 28 sec. 3 GDPR), which obliges our service provider, among other things, to implement appropriate safety measures and grants us extensive control powers.
Transfer to the service providers referred to in point (e) for the purpose of order processing shall take place in the following areas: technical provision and programming of the Website, user communication, provision of software as a service.
Rights of the data subject
10.1 General rights
The applicable data protection law grants you the following data subject rights (rights of information and intervention) towards the data controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
right to information pursuant to Art. 15 GDPR;
right to correction pursuant to Art. 16 GDPR;
right to deletion pursuant to Art. 17 GDPR;
right to restriction of processing pursuant to Article 18 GDPR;
right to information pursuant to Article 19 GDPR;
right to data portability pursuant to Art. 20 GDPR;
right to withdraw the given consent pursuant to Article 7 sec. 3 GDPR (see in detail under 10.2);
right to object to data processing (see in detail under 10.3);
right to lodge a complaint to a data protection supervisory authority pursuant to Article 77 GDPR:
The data protection supervisory authority locally in charge for us is:
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Germany, phone: +49 (0)211 / 38424–0
To exercise your data protection rights, with exception of the right to lodge a complaint with the supervisory authority, simply send an email to firstname.lastname@example.org.
10.2 Right of withdrawal
If your personal data is processed on the basis of consent pursuant to Art. 6 sec. 1 (1) lit. a GDPR, you have the right to withdraw your consent at any time without giving reasons. This has the consequence that we may no longer continue the data processing based on this consent for the future. However, the withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
You can exercise your withdrawal via our contact options mentioned under 2.1.
10.3 Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 sec. 1 (1) lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation.
If your objection is directed against direct marketing, you have a general right of objection; a statement of reasons is not required for these cases.
You can exercise your objection via our contact options mentioned under 2.1.
Duration of personal data storage
The duration of the storage of personal data depends on the respective legal basis, the purpose of the processing and - if relevant - additionally on the respective legal retention period (e.g. retention periods under commercial and tax law).
If personal data is processed on the basis of explicit consent pursuant to Art. 6 sec. 1 (1) lit. a GDPR, this data is stored until the data subject withdraw his or her consent.
If there are legal retention periods for data processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 sec. 1 (1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of the contract and/or there is no legitimate interest on our part in its further storage.
When personal data is processed on the basis of Art. 6 sec. 1 (1) lit. f GDPR, this data is stored until our legitimate interest in its further use ceases to exist or until the data subject exercises his or her right to object pursuant to Art. 21 sec. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When personal data is processed for the purposes of direct marketing based on Art. 6 sec. 1 lit. f GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Article 21 sec. 2 GDPR.
Unless otherwise stated in the other information in this policy on specific processing situations, personal data stored by us will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
This Website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. requests to the data controller). You can recognize an encrypted connection by the sequence "https://" and the lock symbol in your browser line.