Europa-Universität Flensburg, in collaboration with Flensburg University of Applied Sciences, operates a sports center that offers various sports classes to students and staff at both institutions. The Sports Center is administratively affiliated with Europa-Universität Flensburg. Classes can generally be attended without prior registration; a valid ticket is however required.
App
Purpose
The Sport Center’s EUF app provides information about the Unisport program and the university's own fitness center, Campus Fitness®:
- the current class schedule with details (time, class description, room, etc.)
- upcoming events
- reviews of past events
- photos and additional offers
- news via push notifications
Sports Center app (Android):
Sports Center app (iOS):
The app is intended solely for providing information. It is not possible to make reservations or use services via the app.
Legal basis
The processing of personal data within Europa-Universität Flensburg’s Sports Center app is generally based on your consent (Article 6(1)(a) of the General Data Protection Regulation (GDPR)). In using the app, you consent to the processing of your personal data in order to provide you with the functions listed above, as well as to record app interactions and user IDs.
Recipients
Appliner GmbH is the technical service provider for the supply and technical support of the app. Appliner GmbH provides the technical infrastructure for operating the app and provides services, particularly in the areas of hosting, maintenance, error analysis, and troubleshooting. For more information on data protection at Appliner, please visit https://appliner.de/datenschutz.
Storage time
Personal data processed in connection with the use of the Sports Center app are stored for the duration of active use of the app. After uninstalling the app, your personal data are routinely deleted, provided that no legal retention requirements preclude longer-term storage.
Necessity to provide data
The use of the app is generally possible without providing personal data. However, you must grant the appropriate permissions to use certain features, particularly push notifications.
Job platform
Purpose
The Sports Center uses the job platform to find individuals who would like to work as exercise instructors, for example. These are typically freelance, self-employed individuals working in university sports. The current job openings are available at https://www.uni-flensburg.de/sportzentrum/jobs [12874]. If you are interested, you must contact the Sports Center management directly using the contact information provided.
If an employment relationship is established following the application process, the appointment will be made directly by the Sports Center.
Legal basis
The processing of personal data submitted as part of an application is carried out in accordance with Article 6(1)(b) GDPR and § 26(1) of the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) for the purpose of carrying out pre-contractual or contractual procedures in response to your inquiry. This includes, in particular, reviewing your application and deciding on the possible establishment of an employment relationship or a contractual activity (e.g., as a fitness instructor) at the Sports Center.
If no employment relationship is established as part of an application or selection process, the personal data provided will be stored on the basis of Article 6(1)(c) GDPR in conjunction with § 15(4) of the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG) (legitimate interest).
Storage time
We store your personal data only for as long as is necessary for the application process. In the event of a rejection, the data will be deleted no later than 6 months after the position has been filled, provided that no other legitimate interests of the data controller prohibit the deletion. Other legitimate interests in this context include, for example, the burden of proof in proceedings under the AGG. If your application is successful, the current contract will be retained by the Department of Finance for the duration of the respective semester as the basis for contract management and billing.
Necessity to provide data
Providing your data as part of your application is necessary for the potential establishment of a contract. Without your data, we cannot continue processing your application.
Publication of photos
Purpose
Photographs may be taken during sports courses. The purpose here is not to identify individual people, but to promote and publicize the diverse range of sports activities. For these purposes, we securely store the photographs taken and, where appropriate, publish them on our website, in the app, and on our social media channels.
Legal basis
The publication of photos from EUF's sports offerings is based on the consent of the individuals depicted in the photos (Article 6(1)(a) GDPR). Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of any publication that took place on the basis of consent. You can withdraw consent by contacting the Sports Center directly or by email to datenschutzbeauftragter-PleaseRemoveIncludingDashes-@uni-flensburg.de.
Storage time
Photos will be stored for as long as they are necessary for the intended purpose. Photos will generally be deleted immediately if they are not suitable for the purposes mentioned above or in the event of withdrawal of consent by the data subject.
Necessity to provide data
You are under no obligation to allow yourself to be photographed or recorded. Failure to provide your data will not result in any negative consequences for you.
Membership administration
Purpose
Personal data is processed in the administration of memberships at the Sports Center. This includes, in particular:
Registration of participants and the issuing or safekeeping of membership cards. The following personal data is processed:
Master data (first and last name)
Price or cost data
Signature
Data on bookings
Validity
Booking timestamp
Membership number
Processing staff ("accepted by")
Personal data on membership cards is processed to identify members of the university's Sports Center. The membership cards enable the assignment of individuals to their membership and serve internal administrative purposes, e.g., the evaluation of course participation.
Administration of access permissions (access control)
Google Contacts stores the membership number, first name, and expiry date of the membership card. After participants provide their membership number and first name, Sports Center staff verify the validity of the relevant ticket using the information stored in Google Contacts.
Compliance with tax regulations
Your personal data is processed to fulfill legal obligations under tax regulations, as well as to properly manage membership administration and the billing of course fees. This includes, in particular, the collection of membership data, the management of course registrations, the issuing of invoices, and bookkeeping for tax purposes.
Analysis of the use of sports offerings
To evaluate and further develop the sports offerings in line with demand, the number of participants per course is recorded by the trainers and reported to the Sports Center. The analysis is conducted exclusively at an aggregated level to assess usage and course success. No analyses based on individual or member-specific data are performed.
- Your personal data is processed for the purpose of asserting, exercising, or defending legal claims.
Legal basis
Re: (a) / (b): The legal basis is the implementation of pre-contractual or contractual arrangements in accordance with Article 6(1)(b) GDPR.
Re: (c): Compliance with legal obligations in accordance with Article 6(1)(c) GDPR, in conjunction with § 147 of the German Fiscal Code (Abgabenordnung, AO), § 14b of the German Value-Added Tax Act (Umsatzsteuergesetz, UStG), or the Budget and Cash Management Act (Haushalts- und Kassenrecht , LHO Schleswig-Holstein).
Re: (d) / (e): The legal basis for processing is the legitimate interest in accordance with Article 6(1)(f) GDPR. The legitimate interest lies in evaluation, needs-based planning, and the further development of the sports offerings. In addition, there is a legitimate interest in the processing of personal data for the assertion, exercise, or defense of legal claims.
Recipients
The online service Google Contacts is used for the administration of access permissions. The personal data processed includes: membership number, member's first name, and membership card expiry date.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service provider that enables the technical provision and storage of contact information.
When the platform or the offering refers to trips or external travel offers, bookings are made directly with the travel operator(s) in question. The personal data required for booking and carrying out the trip is provided directly by the data subjects to the relevant tour operator and processed there.
To fulfill the purpose, the data may be disclosed to authorities or courts as required by legal obligations.
Transfers to third countries
In the case of Google, data may under certain circumstances be processed outside the European Union, specifically to the United States. The lawfulness of the data processing is based on the adequacy decision with the United States (Data Privacy Framework) in accordance with Article 45 GDPR.
Storage time
Your data will be stored for as long as necessary to fulfill the stated purposes. For paid services, data is retained for ten years in accordance with accounting regulations (in particular § 257 of the German Commercial Code (Handelsgesetzbuch, HGB), § 147 AO, and § 14b UStG).
Necessity to provide data
You must provide your data when using sports offerings to fulfil the contract. Without providing your data, it is not possible to use the Sports Center.
Social media channels
The Sports Center maintains its own accounts on various social media platforms:
- Facebook: https://www.facebook.com/profile.php?id=100090898142069
- Instagram: https://www.instagram.com/sportzentrum_euf/
In general, usage data on social media platform is processed for advertising and market research purposes. For example, social media providers may create their own user profiles based on users' various interests and subsequently use these profiles to display targeted advertisements both within and outside the social media platforms. For these purposes, social media platforms also use cookies to store users' usage behavior and interests. Furthermore, these usage profiles may also contain data about users as members of the respective social media platforms, provided they are logged in to them (hereafter referred to as "usage data").
For a detailed description of data processing activities and the options for objection or withdrawal, please refer to the privacy policy of the respective social media platform (see the section "Details of social media platforms" below).
Purpose
We use our social media accounts to provide information about the EUF, job openings, and our academic and administrative offerings. At the same time, they serve to establish contact and communicate with users, as well as to share news. In addition, individual social media platforms provide anonymized statistical analyses of usage data.
Furthermore, as part of our social media presence, we also process your username, name, contact information, and communication data if you contact us via a social media platform and share this data with us.
Legal basis
The legal basis for communication is either pre-contractual arrangements or the fulfilment of a contract (Article 6(1)(b) GDPR), provided that you contact us for this purpose, or to respond to other inquiries, to inform the public about the fulfillment of our duties in accordance with § 2(8) HRG and § 3(9) HSG, in conjunction with Article 6(1)(e) GDPR in the public sphere, or in the non-public sphere based on our legitimate interest (Article 6(1)(f) GDPR).
The legal basis for processing in joint controllership with a particular social media platform is based on Article 6(1)(e) GDPR in conjunction with the legal tasks of Europa-Universität Flensburg or on the basis of our legitimate interest (Article 6(1)(f) GDPR). The purpose of this processing is to inform the public about the Sports Center's offerings and activities, as well as to analyze and further develop our social media presence in line with user needs.
Joint controllership
Since we operate various social media accounts, we take current developments in the area of data protection on social media platforms into account, and take them very seriously. We would therefore like to inform you that, based on current European Court of Justice case law, there is joint controllership within the meaning of Article 26 GDPR between the operator of a social media presence and the respective provider of that social media platform for the processing of your usage data. We have taken the necessary precautions for this joint controllership to the extent permitted by individual providers.
We would like to point out here that the primary processing of your usage data on social media is carried out by the relevant social media platform provider, and we receive this data—if at all—exclusively in anonymized form; therefore, the primary responsibility for this under the GDPR lies with the social media platform provider. We therefore recommend that you exercise your data subject rights in this context directly with the relevant social media platform provider. You can find the corresponding links to the providers' privacy policies in the "Details of social media platforms" section below. You may also exercise your data subject rights in this context with us within the framework of our joint controllership. In this case, we will immediately contact the relevant social media provider.
Recipients
Your personal data may be transferred to external processors, but in no case to third parties.
Transfers to third countries
In the case of the social media platforms Facebook and Instagram, usage data may, under certain circumstances, be processed outside the European Union, specifically in the United States. However, the Data Privacy Framework (effective since 2023) has reinstated an adequacy decision for the U.S., provided that recipients are certified or that an EU level of protection is ensured through appropriate additional measures.
Storage time
We generally process your data—which we collect when you contact us via our social media presence—until your account on the relevant social media platform is deleted, unless longer retention is necessary for the purpose of processing, due to legal requirements, or to assert or defend rights. As soon as none of these reasons apply, your data will be deleted.
We receive usage data exclusively in anonymized form. For more detailed information on the storage time, please visit the privacy policy of the relevant social media platform.
Necessity to provide data
If your use of our services is for the purpose of initiating contract negotiations, you must provide your data for the finalization of the contract. If your use is for other reasons, you are under no obligation to provide your data. Failure to provide your data when contacting us to initiate a contract would mean that we cannot continue to process your inquiry. Failure to provide your data when using the service for other reasons would have no negative consequences for you.