In accordance with Article 13 of the General Data Protection Regulation (DSGVO), we would like to inform you in the following about the processing of personal data in the context of the application and admission process at the University of Music Wuerzburg. For further information on the storage of data when visiting our websites, in particular with regard to technical usage data, please refer to our general data protection declaration (https://www.hfm-wuerzburg.de/en/data-protection).

Depending on where you are in the application and admission procedure, the following tools are used:

• Upload portal muvac
• Student administration system CAS

The controller, i.e. the organisation responsible for data processing as defined in data protection legislation, especially the General Data Protection Regulation (GDPR), is the:

University of Music Wuerzburg
Hofstallstr. 6–8
97070 Würzburg
Telephone: +49 (0)931–32187-0
Telefax: +49 (0)931–32187-2800

E-Mail: hochschule@hfm-wuerzburg.de

The University of Music Würzburg is an organisation under public law and a state institution (article 4 (1) of the Bavarian Higher Education Innovation Act (BayHIG)). It is represented by the president, Professor Dr. Christoph Wünsch.

You can contact our official Data Protection Officer at:

Data Protection Officer of the University of Music Wuerzburg
Daniel Bachmeier
Hofstallstr. 6–8
97070 Würzburg
Email: datenschutz@hfm-wuerzburg.de

The University of Music Wuerzburg uses the personal details that it collects for the purpose of processing the application for admission to a degree programme within the framework of the legal provisions in place as well as for the registration procedure if your application is successful. If you enrol as a student at the University of Music Wuerzburg, your personal data will then be used for administrative tasks related to student administration and examinations. We will also use your data to process tasks associated with international affairs (such as study abroad), as well as scholarships and awards.

If students wish to stay in contact with the University of Music Wuerzburg as alumni, a separate declaration/registration is necessary. After you submit the consent form, we will then, and only then, use your data to provide you with special information for alumni.

The University of Music Wuerzburg also uses the data to regulate system access (eCampus, e-mail addresses).

During the application process, personal details are used only for correspondence and for processing your application.

Registration and examination affairs also require use of your data for the purpose of contacting you, and managing applications and requests (semester leave, deadline extensions, accreditation transfers, etc.). We also use your data to manage student fees and examinations. For all of these uses, we adhere to the legal guidelines in place. The data is transferred to the library management system at the time of registration.

For scholarship purposes, the University of Music Wuerzburg collects and uses your data to process certain scholarship applications submitted internally (such as the Deutschlandstipendium). We also use your data to provide you with appropriate information regarding scholarship programmes, as well as awards and other prizes available to students and graduates. With some of the external scholarship programmes, the universities may nominate students who seem suitable, based on the respective criteria. The University of Music Wuerzburg researches the students who best meet the criteria in the systems; a suggestion will only be made and personal details transmitted to external scholarship organisations with the consent of the student in question.

The legal basis for the processing of personal data in connection with the application and admission procedures is article 6 (1) point e), and article 6 (3) of the GDPR in combination with article 87, 89 of the Bavarian Higher Education Innovation Act (BayHIG), §§ 18, 19 of the Bavarian Ordinance on the Qualification for Studies at the Universities (Qualifikationsverordnung – QualV) in conjunction with the Qualification regulations (QualS) and the Statutes on Matriculation, Re-registration, Leave of Absence and Exmatriculation (ImmaS) (Satzung über die Immatrikulation, Rückmeldung, Beurlaubung und Exmatrikulation - ImmaS) of the university in their current versions as well as the Higher Education Statistics Act (Hochschulstatistikgesetz – HStatG).

Storing personal e-mail addresses and personal telephone numbers is based on article 6 (1) point e) and article 6 (3) of the GDPR in combination with article 4 (1) of the BayDSG: storing the personal contact details enables efficient processing of urgent cases both for the data subjects and the university; such cases may include setting dates for examinations, consulting on applications and requests or decisions and similar activities. The processing is therefore necessary for the purpose of fulfilling a task that the data controller has been entrusted with. As these personal contact details are only used internally, only forwarded internally to authorised service units and not forwarded to external parties, the interests of privacy and protection of personal data are not an obstacle.

For the application procedure, the following personal data is collected:

• Personal details: Surname, birth name, given name, gender, date and place of birth, nationalities, address, telephone
• number(s), e-mail address
• Details of desired degree programme: Degree, subject(s), nature of studies
• Details on university entrance qualification: type, date when, as well as place, administrative district and country where it was obtained, average grade
• Details of previously completed degree programs: type of degree, details of the university and state of the university, subjects studied, form of study
• Details of first matriculation and semesters already completed: name, city and state of the university as well as year and semester of first enrolment, degree, number of semesters/semesters on leave
• Information on final examinations already taken: University or state of examination, degree, type of study, subjects, date and average grade of final examination, Translations of foreign certificates, if applicable
• Passport photo
• Curriculum vitae (only for master class)
• Video only for video preselection
• Program-specific documents such as compositions and statements
• Copy of passport
• For international applicants: Foreign educational certificates, language certificate, if applicable
• For applicants from the People's Republic of China: Certificate from the Academic Evaluation Center of the German Embassy in Beijing confirming the authenticity of their certificates, language certificate, if applicable
• For underage applicants additionally: Declaration of consent from parents or legal guardians
• Account details

Pursuant to article 87 (4) of the Bavarian Higher Education Innovation Act (BayHIG), students are required to submit relevant personal data in order to enable the processing of their application and other tasks associated with their studies If you fail to provide the requested data necessary for processing your application, you may lose entitlements that require the processing of this data (e.g. admission, enrolment, examination registration, leave of absence, deadline extensions, access requests, etc.).

For university registration and in the course of the studies, the following additional data is collected and processed:

• Semester address, home address
• Academic background of the applicant
• Degrees obtained
• For applicants from non-German-speaking countries: Language certificates
• Information on further enrolments at another university in the current enrolment semester
• Information that is necessary to check on enrolment impediments pursuant to article 91 of the Bavarian Higher Education Innovation Act (BayHISchG)
• Payment of fees (details of bank transfer)
• Exemptions from payment of contributions
• Examinations/modules taken and completed or for which accreditation has been granted with date and result of the examination
• Information in accordance with the Studenten-Krankenversicherungs-Meldeverordnung (ordinance on student health insurance reporting)

Your personal data that is processed by the University of Music Wuerzburg in connection with your online application is generally not forwarded to third parties.

Data may be forwarded to third parties in individual cases, based on legal provisions, for example forwarding data to law enforcement agencies for the purpose of investigating criminal offences as stipulated in the German Code of Criminal Procedure (StPO). If technical service providers are given access to your personal data, this happens on the basis of a contract in accordance with article 28 of the GDPR.

Within the university, authorized employees of the Registrar's Office and the International Office have access to your data.

For the application process, we use the platform of MUV.AG GmbH (“muvac”), based in Alt-Moabit 19, 10559 Berlin. The service provider and any subcontractors necessarily receive knowledge of the processed data insofar as this is required or provided for within the framework of the order processing contract or any contractual relationships with subcontractors. Further information about muvac can be found on the website: https://www.muvac.com/.

The application fee is paid via the payment service provider Stripe Inc, 510 Townsend Street, San Francisco, California 94103. The name, address, account number, bank code, credit card number (if applicable), invoice amount, currency and transaction number are passed on to the company exclusively for the purpose of payment processing. You can find more information about Stripe's data protection at the URL https://stripe.com/de/terms.

For admissions purposes and other administrative steps during your studies, personal data will be shared and checked with your health insurance provider (legal basis: Studentenkrankenversicherungs-Meldeverordnung (student health insurance reporting regulations – SKV-MV) of 27 March 1996 in its current version) and with the Studentenwerk München (student services Munich) as necessary when you submit your BAföG forms (legal basis: Federal Training Assistance Act (BAföG) articles 47 and 48).

The university can nominate students for certain scholarships: contact details and information on performance are only forwarded with the consent of the data subject. Nevertheless, article 27 of the Bavarian Data Protection Act (BayDSG) permits sharing data without a person’s knowledge in order to prepare and carry out the convocation of awards and/or honours.

The University of Music Wuerzburg operates CAS of the company CAS Software AG as a software tool for the administration of examinations, student registration and other student procedures. The systems, including the online platforms, are hosted centrally at the Academy, and the CAS consortium is responsible for the administration of the systems. For more information on CAS, please visit the website: https://www.cas.de/customer-centricity/customer-centricity/datensicherheit/datensicherheit.html

We use the electronic platform muvac to carry out the application process. The provider works together with American subcontractors. In this respect, data processing takes place in a third country. An appropriate level of data protection is guaranteed, as all subcontractors are certified as data recipients via the Data Privacy Framework.

We store your personal data obtained during the application or admission process for at least 12 months.

The data from your application will only be used for the purpose of processing your application. If your application is denied, this data will be stored until it is no longer necessary for the processing of the application process (article 17 (1) point a) of the GDPR). If the data is preservation-worthy, it will be offered to the archives before deletion (pursuant to article 89 of the GDPR in combination with article 26 (6) of the BayDSG).

For registered students, the University of Music Wuerzburg stores personal data for the duration of studies in accordance with legal provisions:

• A minimal record will be kept for 50 years, which includes information on your enrolment dates, examination results, de-registration, and degrees completed. The retention period begins after the end of the calendar year in which de-registration occurred.
• Personal data regarding financial transactions (student services fees, semester fees for Bachelor's and Master's degree programmes for working professionals) will be stored for ten years in accordance with budgetary and tax legislation.

Pursuant to articles 15 et seq. of the GDPR, you, the data subject, are entitled to the following rights concerning the processing of your data: 

• You can ask for information about whether data concerning you is being processed. If this is the case, you are entitled to information about which data is processed and other information relating to the processing (article 15 of the GDPR). Please note that this right to information can be restricted or excluded in certain cases (see in particular article 10 of the BayDSG).
• If the personal data concerning you is/has become inaccurate or incomplete, you can request that this data is rectified and/or completed (article 16 of the GDPR).
• If the legal requirements are met, you can request that your personal data be deleted (article 17 of the GDPR) or processing of your data be restricted (article 18 of the GDPR). The right to deletion pursuant to article 17 (1) and (2) of the GDPR does not apply in certain cases, however, such as if the processing of personal data is vital for the performance of a task that is in the public interest or is performed in the exercise of official authority (article 17 (3) point b) of the GDPR).
• If you have consented to data processing or there is a contract concerning data processing and data is processed automatically, you may be entitled to data portability (article 20 of the GDPR).
• You are entitled to file a complaint concerning the processing of your personal data with a supervisory authority as defined in article 51 of the GDPR. The pertinent supervisory authority for the Bavarian public service is the Bavarian Data Protection Commissioner, Wagmüllerstraße 18, 80538 München. 

You may object to the processing of your personal data at any time due to reasons based on your personal circumstances (pursuant to article 21 of the GDPR).

If the legal requirements are met, we will then not further process your personal data.

If you choose to exercise the rights stated above, the public office will check whether the legal requirements for doing so have been met.

If the deletion of the application data is requested during the application process, this will be considered as a withdrawal of the application.

The University of Music Wuerzburg reserves the right to change this data protection declaration to accommodate changes to legislation or changes in the services we provide (e.g., if we introduce new services).

If you have any further questions, please feel free to contact the Data Protection Officer.