Data security

Dear visitors to our website,

We are pleased that you are interested in the services offered by the Studierendenwerk Münster and would like you to feel secure while visiting our Internet pages. The protection of your privacy is an important concern for the Studierendenwerk Münster.

If you have any questions, please contact our data protection officer:

Kerstin Bürgel
Phone +49 (251) 83-79705


Data Protection Declaration

  1. General

With this data protection declaration we would like to inform you about the type, scope and purpose of the personal data collected and processed and about the rights to which you are entitled.

The protection of your personal data is of great importance to the Studierendenwerk Münster. The use of our Internet pages is therefore generally possible without providing personal data; only the general access data mentioned under point 4 below will be collected.

However, if you wish to make use of certain offers via these pages, it may be necessary to process personal data. These offers can be found in detail under point 9. The processing of personal data is always in accordance with the General Data Protection Regulation and the other data protection provisions applicable to the Studierendenwerk Münster. For the processing of your personal data, we have implemented numerous technical and organizational measures to ensure the greatest possible protection of your data. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. Therefore, you are free to transmit personal data to us by alternative means, for example by telephone or mail.


  1. Name and address of the person responsible

Responsible for the processing of your personal data in accordance with the General Data Protection Regulation (DSGVO) is:

Dr. Christoph Holtwisch (komm. Geschäftsführer)
Studierendenwerk Münster AöR
Bismarckallee 5
48151 Münster

Postfach 76 29
48041 Münster



  1. Collection of general data and information

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  1. information about the type of browser and the version used
  2. the operating system of the user
  3. the Internet service provider of the user
  4. the IP address of the user
  5. date and time of access
  6. websites from which the user's system accesses our website
  7. websites that are accessed by the user's system via our website

The data is also temporarily stored in the log files of our system. This data is not stored together with other personal data of the user. The collection takes place for  statistical purposes only.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.

The data in log files are automatically deleted after fourteen days at the latest.


  1. Purpose of processing

The processing of personal data by the Studierendenwerk Münster always takes place for the fulfillment of a contract with the data subject or possible pre-contractual measures or on a legal basis.

If the processing of personal data is necessary and there is no legal or contractual basis, the processing will only take place with the consent of the person concerned.

Consent given can be revoked at any time, whereupon the blocking or deletion of the stored data will be effected.


  1. Collection, processing, use and deletion of personal data

As a rule, Studierendenwerk Münster collects personal data directly from the person concerned. Personal data is processed exclusively for the purpose of processing the contract or for the purpose described in the consent and is stored for the period of time required to achieve this purpose.

Storage beyond this period only takes place if this is stipulated in laws or regulations (e.g. legal obligation to retain data). If the processing purpose ceases to apply or if the retention obligation prescribed by law expires, the personal data will be anonymized or deleted. The data is processed exclusively in the Federal Republic of Germany.

Your personal data will only be passed on to third parties if this is necessary for the performance of a contract with you or if we are legally obliged to do so. Otherwise, we only pass on data if you have authorized us to do so.

Automated decision-making (Art. 13 para. 2f DSGVO) does not take place.


  1. Rights of the data subject

The General Data Protection Regulation grants every data subject, among other things, the right to request information, correction, blocking/deletion of their personal data. If you wish to use this right or if you have any questions about this data protection declaration, you can contact our data protection officer (for contact details, see above) or another employee of the Studierendenwerk Münster at any time.

In addition, data subjects also have the option of directly contacting the competent data protection supervisory authority. This is for the Studierendenwerk Münster:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Postfach 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-999


  1. Internet pages of other providers (external links)

Our website also contains links to other sites. However, this data protection declaration refers exclusively to the contents of the page and not to linked pages and their contents.


  1. Information on individual services offered by the Studierendenwerk Münster

a) General e-mail traffic

The e-mail traffic of the Studierendenwerk Münster is not encrypted. If you communicate with us by e-mail, please bear in mind that unauthorized third parties may be able to view it. If you would like to avoid this risk, please use the contact forms on our websites, which are transmitted in encrypted form, or contact us in person, by phone or by postal mail.

If you send us an e-mail, we will use it solely for processing your request. E-mails are only forwarded if this is necessary for processing your request.

We store and archive e-mails because we are obliged to do so by law.

b) Contact forms

The personal data transmitted when using our contact forms (name and e-mail address) will only be used for the purpose stated in the contact form ( compliments, criticism, inquiries, request for information material, etc.) and subsequently deleted. The data will not be used for any other purpose.

c) Newsletter

With our newsletter we inform you about us and our offers.

If you would like to receive the newsletter, we require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties.

When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as evidence in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be done via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.

d) Accomodation Management

For the rental contract management of the residential halls, an online application procedure is used for the individual spaces within the student residential halls. Only data required for the rental contract management is collected and is provided by you directly.

Your personal data is used for the realisation of the tenancy and is deleted after expiration of the legal retention obligation. If no rental contract occurs, your personal data submitted will be stored for a maximum of 12 months from the date of application and automatically deleted.

More detailed data protection information on this topic is available at:

e) Classifieds

In our portal for classified ads you decide yourself which data you would like to provide to be contacted. We store this data exclusively for publication within the framework of the classified ads. The data will be published for a maximum of 2 weeks and then automatically deleted.

f) Insurances

The Studierendenwerk Münster has taken out group accident- and liability insurance for its students. Initially, student data is not processed.

Personal data will only be collected and forwarded to the insurance company in case of a claim. Their contact details will be sent to you in the event of a claim. Data and documents relating to the processing/settlement of claims will be deleted by the Studierendenwerk after the end of the statutory retention period.

g) Job Applications

We process your personal data that we receive from you with a job application exclusively for the purpose of this application. In the event of rejection, the data will be permanently deleted 6 months after completion of the application process.

If you enter into an employee relationship with us as part of the application process, your data will be transferred to our personnel administration system.

h) Student loans

The Studierendenwerk Münster has commissioned the Darlehenskasse der Studierendenwerke e. V., Weißhausstr. 30, 50939 Cologne ( in the following referred to as Daka) with the application processing, administration and reclaiming of its student loans. The data collected from you at the time of application will be forwarded to Daka by the Studierendenwerk and processed exclusively for the purpose of executing the loan agreement. No other data will be passed on.

After the loan has been paid back, your data will be stored at Daka for the period of the legal obligation to keep records (10 years). After that, the data will be anonymized.

You can find Daka's data protection information on the website

Responsible for this data processing is Studierendenwerk Münster.

i) Special loans

The Studierendenwerk Münster grants loans from its emergency fund to students in need. The data collected from you at the time of application is used exclusively for the execution of the loan agreement. Data is only passed on internally to authorized persons for the purpose of handling the procedure. Data will only be passed on to third parties after unsuccessful dunning proceedings.

After the loan has been paid back, your data will be stored for the period required by law (10 years). After that, the data will be anonymized.

j) BAföG

The Studierendenwerk Münster is also responsible for the implementation of the Bundesausbildungsförderungsgesetz (BAföG)).

More detailed data protection information on this subject area can be found at:


  1. Third-Party Providers

It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within this online offer. This always requires that the providers of the content perceive the IP address of the user. Without the IP address, they could not send the content to the browser of the respective user. The IP address is thus necessary for the presentation of the content. We endeavor to use only such content whose respective providers use the IP address only to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. As far as we have the knowledge we let you know.

a) Facebook

Within the framework of our Facebook fan page, you also have the possibility to inform yourself about our services or to contact and interact with us. Our Facebook fan page is provided on the basis of the agreement reached with Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the joint processing of personal data pursuant to Art. 26 DSGVO ("Page Insights Supplement regarding the controller"). According to this, we cannot make and implement any decisions ourselves regarding the processing of Insights data. The primary responsibility under the GDPR for the processing of Insights Data as well as the fulfillment of all obligations under the GDPR with regard to the processing of Insights Data is assumed by Facebook.

We would like to point out that when you visit the Facebook fan page, data of you as a user may be processed outside the EU. Face-book, Inc., which is involved in this, has committed itself as a Privacy Shield certified US provider to comply with the data protection standards of the EU:

(Stand: 02.11.2018).

Your data may be processed for market research and advertising purposes, for example by creating usage profiles from the interests resulting from your usage behavior and using them to place advertisements. Cookies are usually stored on your computer for this purpose.

Through the "Page Insights" function, we can retrieve statistical data from Facebook in various categories in connection with the use of the Facebook fan page, such as the total number of page views, "Like" votes, page activations, post interactions, video views, post reach, comments, shared content, responses, proportion of men and women, origin based on country and city, language, calls and clicks in the store, clicks on route planners and clicks on telephone numbers. We use this information to make our pages more attractive and more tailored to our customers' needs (e.g., by determining the right time to publish content).

Within the framework of the Facebook fan page, the processing of users' personal data takes place in order to protect our legitimate interests in a demand- and target group-oriented design of our information offers as well as communications with users (legal basis: Art. 6 para. 1 lit. f DSGVO). If you are asked by Facebook as the provider of the platform for consent to certain data processing, the processing is carried out on the legal basis of Art. 6 para. 1 lit. a DSGVO.In Hinblick auf die Ausübung von Betroffenenrechten sowie Auskunftsanfragen weisen wir darauf hin, dass Sie diese am effektivsten direkt bei Facebook geltend machen können (siehe

For more information on the processing and use of the data, as well as the related rights and settings options for protecting your privacy, including the possibility to object (opt-out), please refer to Facebook's privacy policy at and to the "Information on Page Insights Data" at

Opt-Out: bzw.

b) YouTube

To integrate videos into our websites, we use YouTube, represented by Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland.

In principle, cookies are installed on your computer as soon as you call up a page with embedded videos and your IP address is stored. On our websites, however, we use YouTube videos with the "extended data protection mode" function. According to Google's privacy policy, no personal data is evaluated as long as you do not watch the video. However, as soon as you start playback of an embedded video by clicking on it, YouTube saves cookies on your device in extended data protection mode, which do not contain any personally identifiable data unless you are currently logged in to a Google service.

We have no knowledge of the subsequent collection and use of your data by YouTube and cannot influence this. You can find more information about this at:

c) Instagram

If you visit our Instagram page and your browser allows cookies to be stored, Facebook Ireland stores "cookies" and can access this information when you visit the Facebook platform or a website that embeds Facebook technologies. You can find more information about the purpose of the cookies used, the integration of these cookies by other websites and your control options here:

d) Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, you will be shown our location and it will be easier for you to find us.

Information about your use of our website (such as your IP address) will be transmitted to and stored by Google on servers in the United States when you access those sub-pages in which the Google Maps map is integrated. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, you have the option to completely disable the web service of Google Maps by turning off the application JavaScript in your browser. Google Maps and thus also the map display on this website can then not be used. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"):

e) Google Analytics

This offer uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the U.S. and stored there.

In case that IP anonymization is activated on this website, the IP address of the user will, however, be shortened in advance by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the US and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do so you may not be able to use the full functionality of this website. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent the collection by Google Analytics within this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you must click this link again.

  1. Withdrawal, Changes, Corrections and Updates

The user has the right - upon request and free of charge - to receive information about his/her personal data stored. In addition, the user has the right to correct incorrect data, blocking and deletion of his personal data, provided that this does not conflict with any legal obligation to retain data.



If you have any questions about this privacy policy, please contact our data protection officer - contact details see above.

Stand März 2021