Direkt zu den Speiseplänen


www.studentenwerk-hannover.de Logo StwH

Sie befinden sich in der Pfadnavigation
Zum Inhalt springen
Start > Data privacy 

Data privacy

With the following information, we would like to give you an overview of the processing of your personal data by us, and your rights under the Data Protection Act. Which data are processed in detail and how they are used depends largely on the services used.

Responsible body in the sense of the data protection laws, in particular the EU General Data Protection Regulation (in the following: GDPR), is:

Studentenwerk Hannover
Public Agency
The Director
Visiting address: Jägerstraße 5, 30167 Hannover
Postal address: Postfach 58 20, 30058 Hannover
Phone +49 511 76-88 022
Fax +49 511 76-88 949
Tax number 25 / 207 / 40331
USt-IdNr. DE115650860

Which data do we process?

The Studentenwerk Hannover processes personal data that are required to fulfil its statutory duties. Relevant personal data are personal details (amongst others, name, address and other contact details, date and place of birth and nationality).

In addition, this can also be data, which are necessary:

  • for your student status,
  • to fulfil our contractual obligations (e.g. required data in payment transactions),
  • documentation (e.g. consultation protocol / contact form),
  • et al.

Legal bases

We process personal data under the provisions of

The legality arises

  • from your consent or
  • from the fulfilment of contractual obligations or
  • from legal requirements or
  • in the context of the balancing of interests / public interest.

Who has access to the data?

Within the Studentenwerk Hannover, those departments get access to your data, which are in need of them in order to fulfil our contractual and legal obligations. Our service providers may also receive data for these purposes. These are e.g. companies in the field of IT services and telecommunications.

In principle, we may only pass on data if required by law. Under these conditions, recipients of personal data may be for example:

  • Public bodies and institutions in accordance with a statutory or official obligation,
  • financial services institutions or similar entities which we provide with personal information in order to conduct the business relationship with you and
  • service providers we consult in the context of commissioned processing relationships.

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations.

Your rights as a person affected by data processing

Regarding the data stored with us you have the following rights:

  • Information about your stored data and their processing (Art. 15 GDPR),
  • correction of incorrect personal data (Art. 16 GDPR),
  • deletion of your stored data (Art. 17 GDPR),
  • Restriction of data processing, provided we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • objection to the processing of your data through us (Art. 21 GDPR),
  • data portability, provided you have consented to the processing of the data or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future.

In addition, you can make a complaint to a data protection supervisory authority at any time. A list of supervisory authorities and the respective addresses can be found at:

Collection of general information upon visiting our website

When you access our website, information of a general nature is automatically being recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is exclusively information that admits no conclusions about your person.

This information is technically necessary to correctly deliver the contents of web pages requested by you and is mandatory when using the Internet. They are processed in particular for the following purposes:

  • ensuring a trouble-free connection establishment of the website,
  • ensuring a smooth use of our website,
  • evaluation of system security and stability as well as
  • for further administrative purposes.

The processing of your personal data is based on our legitimate interest for the aforementioned purposes of data collection. We do not use your information to draw conclusions about you. The recipient of the data is only the responsible body and possibly the processor.

Anonymous information of this kind may be statistically evaluated by us to optimize our website and the underlying technology.


Like many other websites, we use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically gives us certain data, such as IP address, browser used, operating system and your connection to the Internet.

Cookies cannot be used to launch programmes or to transfer viruses to a computer. Based on the information contained in cookies, we can facilitate navigation and enable the correct display of our websites.

The data collected by us will by no means be passed on to third parties and no link with personal data will be established without your consent.

Of course, you can also view our website without cookies. Most Internet browsers are set to accept cookies by default. In general, you can disable the use of cookies at any time through the settings of your browser. Please use the help functions of your Internet browser to find out how to change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) via HTTPS.

Comments function

For the comments function on this page in the Mensa-Forum, not only your comment but also details of the time of writing the comment, your e-mail address and the user name you have chosen will be saved. Our comment function stores the IP addresses of the users who write comments. Since we do not check comments on our site before activation, we need this data in order to be able to act against the author in case of infringements, such as insults or propaganda. This is for our security, as we may be prosecuted for any illegal content on our website, even if created by users.

Contact forms

If you contact us with questions of any kind via e-mail or contact form, you give us your voluntary declaration of consent for the purpose of establishing contact with you. This requires the specification of a valid e-mail address, serving for the assignment of the request and the subsequent answering of the same. The specification of further data is optional.

We expressly point out that the delivery of this data to us is partly unencrypted. Therefore we ask you not to send us any special categories of personal data (e.g. health data) via e-mail or the contact form. Please use secure methods such as the postal service for these purposes.

All incoming and all sent e-mails are recorded in our central e-mail archive and usually stored for 10 years. This storage serves to fulfil the legal obligations for proper bookkeeping. Although this archiving requirement only affects e-mails with accounting document function, a systematic separation between these and other e-mails is not possible. Archived e-mails are accessed for the purpose of financial accounting and accounting, as well as to fulfil the statutory tasks of the Studentenwerk if the content of e-mails is required professionally.

Use of Google Maps

This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. For more information about Google's data processing, see the Google Privacy Notice (http://www.google.com/privacypolicy.html). There you can also change your personal privacy settings in the privacy centre.

For detailed instructions on managing your own data related to Google products, visit http://www.dataliberation.org/

Embedded YouTube videos

On some of our websites, we embed YouTube videos. The corresponding plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plug-in, it will connect to YouTube's servers and tell YouTube which pages you visit. If you are logged in to your YouTube account, YouTube may assign your browsing behaviour personally to you. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour. Anyone who has disabled the storage of cookies for the Google Ad programme won’t have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must disable the storage of cookies in the browser.

For more information about privacy at YouTube, please see the provider's privacy policy at https://www.google.de/intl/de/policies/privacy/

Change of our privacy policy

We reserve the right to amend this privacy policy to always comply with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. If you view our website anew, your visit will be subject to the new privacy policy.

Questions to the data protection officer

If you have any questions about privacy, please send us an e-mail or directly contact the person responsible for privacy at our organisation:
Phone (05 11) 76-88 075

The privacy policy has been created in part with the Datenschutzerklärungs-Generator der activeMind AG (privacy policy generator).