{"id":1398,"date":"2024-10-16T10:52:25","date_gmt":"2024-10-16T09:52:25","guid":{"rendered":"https:\/\/schiffer-bk.de\/data-protection\/"},"modified":"2025-11-28T13:54:34","modified_gmt":"2025-11-28T12:54:34","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/schiffer-bk.de\/en\/data-protection\/","title":{"rendered":"Data protection"},"content":{"rendered":"

Data protection declaration for Schiffer-Berufskolleg<\/h1><\/div><\/div><\/div><\/div><\/div>

1. Responsibility for data processing<\/h2>\n

The individual school, represented by the headteacher, is responsible for data processing in LOGINEO NRW for schools.
The responsible supervisory authority is<\/p>\n

The State Commissioner for Data Protection and Freedom of Information NRW
P.O. Box 20 04 44
40102 D\u00fcsseldorf
Tel.: 0211\/38424-0<\/a>
E-mail: poststelle@ldi.nrw.de<\/a><\/p>\n

 <\/p>\n

2. Purposes of data processing<\/h2>\n

LOGINEO NRW is a modular system that enables various processing activities. Depending on the processing activity or module, different processing purposes are pursued. <\/p>\n\n\n\n\n\n\n\n
Processing activity<\/td>\nModule(s)<\/td>\nPurpose of processing<\/td>\n<\/tr>\n
Provision of the web-based frontend of the system<\/td>\nHomepage \/ web-based frontend<\/td>\nEnsuring trouble-free operation of the web-based frontend<\/td>\n<\/tr>\n
Importing master data into user management<\/td>\nUser management<\/td>\nFulfilling the school’s educational mandate<\/td>\n<\/tr>\n
Processing of data as part of task fulfillment<\/td>\nFile storage
Groupware (e-mail, calendar, address book)<\/td>\n		Fulfilling the school’s educational mandate<\/td>\n<\/tr>\n
Activation and use of the user account<\/td>\nFile storage
Groupware (e-mail, calendar, address book)<\/td>\n		Storing documents from a pedagogical and school administrative context
electronic communication<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

When using and providing LOGINEO NRW, operating data (log files) are collected and processed in the data center to ensure proper operation and availability of the systems and to log security-relevant events, and cookies are set in the browser used to improve the user experience.
3. Scope and lawfulness of data processing
Depending on the processing purpose and category of data subjects, there are different legal bases for data processing in LOGINEO NRW.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Processing activity<\/td>\nCategories of data subjects<\/td>\nProcessed data<\/td>\nLegal basis<\/td>\n<\/tr>\n
Provision of the web-based frontend<\/td>\nVisitors to the web-based frontend (publicly accessible)<\/td>\n\n

Server log files with:<\/u><\/p>\n

\u00b7 Browser type and browser version<\/p>\n

\u00b7 operating system used<\/p>\n

\u00b7 Referrer URL (address of the page from which the reference was made)<\/p>\n

\u00b7 IP address<\/p>\n

\u00b7 Hostname of the accessing computer<\/p>\n

\u00b7 Internet service provider<\/p>\n

\u00b7 Time of the server request<\/p>\n

\u00b7 amount of data transferred<\/p>\n

Cookies (name, purpose, storage period):<\/u><\/p>\n

Homepage:<\/p>\n

\u00b7 JSESSIONID, session ID of the web application, until the browser is closed<\/p>\n

Navigation bar:<\/p>\n

\u00b7 kmPos, y-position navigation (for saving\/restoring navigation position per application, is deleted after 24h<\/p>\n

\u00b7 shib_idp_session, IDP session information (global SSO login), until the browser is closed<\/p>\n

\u00b7 _shib_session, SP session (session information for navigation), until the browser is closed<\/p>\n

\u00b7 captcha, is required by the captcha in the contact form, until the browser is closed<\/p>\n

Edusharing:<\/p>\n

\u00b7 JSESSIONID, session ID of the web application, until the browser is closed<\/p>\n

Network\/Support<\/p>\n

\u00b7 MoodleSession, session ID of the web application, until the browser is closed<\/p>\n<\/td>\n

Art. 6 para. 1 sentence 1 lit. e), para. 3 lit. b) GDPR in conjunction with \u00a7 3 para. 1 DSG NRW <\/td>\n<\/tr>\n
Importing master data into user management<\/td>\nSchool staff
Students<\/td>\n		\n

Master data:<\/u><\/p>\n

\u00b7 Last name<\/p>\n

\u00b7 First name(s)<\/p>\n

\u00b7 Name abbreviation (teachers)<\/p>\n

\u00b7 unique identification number (teachers)<\/p>\n

\u00b7 school-internal unique identification number (students)<\/p>\n

\u00b7 official\/school e-mail address (inactive)<\/p>\n

\u00b7 primary role of a user (e.g. student, teacher, …)<\/p>\n

\u00b7 Membership of a group (e.g. class, course, subject group, working group, …)<\/p>\n<\/td>\n

Art. 6 para. 1 lit e.) GDPR in conjunction with Art. 6 para. 3 lit b) GDPR (SchulG NRW, VO-DV I, VO-DV II)<\/td>\n<\/tr>\n
Functionaries,
External<\/td>\n		\n

Master data:<\/u><\/p>\n

\u00b7 Last name<\/p>\n

\u00b7 First name(s)<\/p>\n

\u00b7 school-internal unique identification number<\/p>\n

\u00b7 official\/school email address (inactive)<\/p>\n

\u00b7 primary role of a user (e.g. secretariat, external, …)<\/p>\n

\u00b7 Membership of a group (e.g. class, course, subject group, working group, …)<\/p>\n<\/td>\n

Art. 6 para. 1 sentence 1 lit. e), para. 3 b) EU-GDPR in conjunction with \u00a7 3 para. 1 DSG NRW <\/td>\n<\/tr>\n
Processing of data as part of task fulfillment<\/td>\nStudents, parents<\/td>\n\n

\u00b7 Individual and organizational data, performance data, school form and grade-specific additional data in accordance with Annex 1 VO-DV I<\/p>\n

\u00b7 Mandatory documentation in accordance with Annex 2 I. VO-DV I<\/p>\n

\u00b7 further information collections in accordance with Annex 2 II. VO-DV I<\/p>\n<\/td>\n

Art. 6 para. 1 lit. e) GDPR in conjunction with Art. 6 para. 3 lit. b) GDPR (SchulG NRW, VO-DV I) <\/td>\n<\/tr>\n
Teachers<\/td>\n\n

\u00b7 School data in accordance with Annex 1 VO-DV II<\/p>\n

\u00b7 Files of the school management in accordance with Annex 2 VO-DV II<\/p>\n<\/td>\n

Art. 6 para. 1 lit. e) GDPR in conjunction with Art. 6 para. 3 lit. b) GDPR (SchulG, VO-DV II) <\/td>\n<\/tr>\n
Functionaries,
External<\/td>\n		\u00b7 Information on how to reach them<\/td>\nArt. 6 para. 1 sentence 1 lit. e), para. 3 b) EU-GDPR in conjunction with \u00a7 3 para. 1 DSG NRW <\/td>\n<\/tr>\n
authenticated users<\/td>\n\n

Usage data:<\/u><\/p>\n

\u00b7 voluntarily provided documents, files and data<\/p>\n<\/td>\n

Art. 6 para. 1 sentence 1 lit. a) GDPR (consent) <\/td>\n<\/tr>\n
Activation and use of the user account<\/td>\nauthenticated users<\/td>\n\u00b7 Master data of the users<\/td>\nArt. 6 para. 1 lit. e) GDPR in conjunction with Art. 6 para. 3 lit. b) GDPR (SchulG NRW, VO-DV I, VO-DV II) <\/td>\n<\/tr>\n
\n

Usage data:<\/u><\/p>\n

\u00b7 documents and files voluntarily stored in the file storage areas, e.g. from a pedagogical context<\/p>\n

\u00b7 Communication content<\/p>\n<\/td>\n

Art. 6 para. 1 sentence 1 lit. a) GDPR (consent) <\/td>\n<\/tr>\n
\n

Cookies (name, purpose, storage period):<\/u><\/p>\n

\u00b7 _shib_session, SP session (session information for the respective application), until the browser is closed<\/p>\n

Log files:<\/u><\/p>\n

\u00b7 System logs (e.g. access.log, error.log) to ensure the proper operation and availability of the systems<\/p>\n

\u00b7 Application logs (e.g. server.log) for logging security-relevant events<\/p>\n

\u00b7 Metadata on documents and files (e.g. “Owner”)<\/p>\n

\u00b7 external circumstances of electronic communication (time, sender, recipient, amount of data transmitted, …)<\/p>\n<\/td>\n

Art. 6 para. 1 sentence 1 lit. e), para. 3 lit. b) GDPR in conjunction with \u00a7 3 para. 1 DSG NRW <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

The processing on the servers of the technical service provider takes place on the instructions of the controller in accordance with Art. 28 GDPR (data processing on behalf). The technical service provider and processor is: <\/p>\n

Kommunales Rechenzentrum Niederrhein (KRZN)
Friedrich-Heinrich-Allee 130
47475 Kamp-Lintfort
Telephone: +49 2842 90 70-0<\/a>
Fax: +49 2842 92732-0
E-mail: info@krzn.de<\/a>
Internet: www.krzn.de<\/a><\/p>\n

4. Categories of recipients and data transfer<\/h2>\n

Data relating to individuals are processed exclusively by<\/p>\n