Body responsible for the collection, processing and use of your personal data within the meaning of the German General Data Protection Regulation (DSGVO) is
Studierendenwerk Kassel
Anstalt öffentlichen Rechts
Universitätsplatz 1
34127 Kassel

Represented by
Christa Ambrosius, Geschäftsführerin
Postfach 10 36 60
34036 Kassel
If you wish to object to the collection, processing or use of your data by us in accordance with this Privacy Policy as a whole or in respect of individual actions, you may direct your objection to the data controller named above.

Type and purpose of data processing (Art. 6 para. 1 sentence 1 b DSGVO)
The Studierendenwerk Kassel processes the data required for the contractual processing of a SEPA direct debit. Required are: Contact data of the account holder, IBAN, name of the bank and data of the service provider and location. Users are required to provide this information and to update it as necessary.

Collection and transfer of data
The data is primarily collected from the contractual partner and, if applicable, from the University of Kassel as well as from a register of residents. The recipients of the data are mainly internal areas of the Studierendenwerk, including the Commercial Administration/Central Services and University Catering, and their processors, where applicable. In the case of returned direct debits within the scope of the Autoload procedure, the outstanding debts are forwarded to the internal legal department or to third parties, usually bailiffs and courts, but possibly also to the University of Kassel, the residents' registration office, banks or lawyers.
By concluding an Autoload agreement, it is possible to link chip card payments with contact data. There is no evaluation of customer profiles or scoring.

Transfer of information to a third country or international organization
Personal information will not be transferred to a third country or international organization.

Duration of data storage
Data relevant for accounting and tax purposes will be stored for six or ten years after the end of the contractual relationship in accordance with the statutory retention periods.

Rights of data subjects

• Right of access, rectification or erasure and restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority:
  Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
  Postfach 3163
  65021 Wiesbaden
  Telephone (0611) 1408 - 0
  Fax (0611) 1408 - 900 / 901
  Please note that revocation will terminate the autoload process.

Further processing for other purposes
Task-related processing of pseudonymized personal data, such as the card number, for internal administrative purposes, including reporting and auditing, for quality assurance and statistical purposes, and for data backup.

Data Protection Officer
If you have any further questions, please contact the Data Protection Officer by telephone or in writing
Datenschutzbeauftragte
Gabrijela Barzinmehr-Franic
Telefon (0561) 804-2782
E-Mail datenschutz@studierendenwerk.uni-kassel.de

If you use the postal service, please send your request with the note „zu Händen der Datenschutzbeauftragten“.