Data security

Dear visitors to our website,

Thank you for your interest in the services offered by the Studierendenwerk Münster. We are concerned with the protection of your privacy, and we want you to feel safe while browsing our web pages.

If you have any questions, please contact our data protection officer:

Kerstin Bürgel
Phone +49 (251) 83-79705
E-mail: [email protected]


Data Protection Declaration

  1. General

With this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected and processed and about the rights to which you are entitled.

The protection of your personal data is of great importance to the Studierendenwerk Münster. It is therefore possible to browse our web pages without providing personal data; only the general access data mentioned under point 4 below will be collected.

However, if you would like to take advantage of certain offers via these pages, it may be necessary to process personal data. These offers can be found in detail under point 9. Personal data is always processed in accordance with the General Data Protection Regulation and the other data protection regulations applicable to the Studierendenwerk Münster. For the processing of your personal data, we have implemented numerous technical and organisational measures to ensure the greatest possible protection of your data. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. Therefore, you are free to transmit personal data by calling us or sending an e-mail.


  1.  Contact details of the person responsible

The person responsible for the processing of your personal data in accordance with the General Data Protection Regulation (DSGVO) is:

Dr. Christoph Holtwisch (Geschäftsführer)
Studierendenwerk Münster AöR
Bismarckallee 5
48151 Münster

Mailing address:
Postfach 76 29
48041 Münster

E-mail: [email protected]


  1. Collection of general data and information

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  1. information about the type of browser and the version used
  2. the operating system of the user
  3. the Internet service provider of the user
  4. the IP address of the user
  5. date and time of access
  6. websites from which the user's system accesses our website
  7. websites that are accessed by the user's system via our website

The data is also temporarily stored in the log files of our system. This data is not stored together with other personal data of the user. The data is collected for statistical purposes only.

The system's temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.

The data in log files are automatically deleted after fourteen days at the latest.


  1. Purpose of processing

The processing of personal data by the Studierendenwerk Münster always is always carried out for the fulfilment of a contract with the data subject or possible pre-contractual measures or with a legal basis. If the processing of personal data is necessary and there is no legal or contractual basis for it, the processing is only carried out with the consent of the person concerned.

Consent given can be revoked at any time, whereupon the blocking or deletion of the stored data will follow.


  1. Collection, processing, use and deletion of personal data

The Studierendenwerk Münster collects personal data directly from the person concerned. Personal data is processed exclusively for the purpose of processing a contract or for the purpose described in the consent and is stored for the period of time required to achieve this purpose.

Storage beyond this period only takes place if this is stipulated in laws or regulations (e.g., legal obligation to retain data). If the processing purpose ceases to apply or if the retention obligation prescribed by law expires, the personal data will be anonymised or deleted. The data is processed exclusively in the Federal Republic of Germany.

Your personal data will only be passed on to third parties if this is necessary for the accomplishment of a contract or if we are legally obliged to do so. Otherwise, we only pass on data with your authorisation.

Automated decision-making (Art. 13 para. 2f DSGVO) does not take place.


  1. Rights of the data subject

The General Data Protection Regulation grants every data subject the right to request information, correction, blocking/deletion of their personal data, among other things. If you wish to use this right or if you have any questions about this data protection declaration, you can contact our data protection officer (for contact details, see 3. above) or another employee of the Studierendenwerk Münster at any time.

In addition, data subjects also have the option of directly contacting the responsible data protection supervisory authority. For the Studierendenwerk Münster, that is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
(State data protection and freedom of information North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf

Phone: 0211/38424-0
Fax: 0211/38424-999
[email protected]


  1.  Web pages of other providers (external links)

Our website also contains links to other websites. However, this data protection declaration refers exclusively to the contents of the page and not to linked pages and their contents.


  1. Information on individual services offered by the Studierendenwerk Münster

a) General e-mail traffic

The e-mail traffic of the Studierendenwerk Münster is not encrypted. If you communicate with us by e-mail, please bear in mind that unauthorised third parties may be able to view it. If you would like to avoid this risk, please use the contact forms on our websites, which are transmitted in encrypted form, or contact us in person, by phone or by mail.

If you send us an e-mail, we will use it solely for processing your request. E-mails are only forwarded if this is necessary to process your request.

We store and archive e-mails because we are obliged to do so by law.

b) Contact forms

The personal data transmitted when using our contact forms (name and e-mail address) are only used for the purpose stated in the contact form (compliments, criticism, enquiries, request for information material, etc.) and are deleted afterwards. The data will not be used for any other purpose.

c) Newsletter

The newsletter contains information about us and our offers.

If you would like to receive the newsletter, we require a valid e-mail address as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter. No further data is collected. This data is only used for sending the newsletter and will not be passed on to third parties.

When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as evidence in the event of a third party misusing an e-mail address and registers to receive the newsletter without the knowledge of the authorised person.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. You can unsubscribe via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.

d) Accommodation administration

For the administration of tenancy agreements for the student residences, an online application procedure is used. Only data required for the administration of the rental contract is collected which is provided by you directly.

Your personal data is used for the realisation of the tenancy agreement and will be deleted after the legal obligation to keep records has expired. If no tenancy agreement is concluded, the submitted data will be stored for a maximum of 12 months from the date of application and automatically deleted.

More detailed data protection information on this topic is available at:

e) Classified ads

In our portal for small ads, you decide yourself which data you would like to provide for contact purposes. We store this data exclusively for publication within the framework of the classified ads. The data will be published for a maximum of 2 weeks and then automatically deleted.

f) Insurances

The Studierendenwerk Münster has taken out group accident and liability insurance for its students. Initially, student data is not processed.

Personal data will only be collected and forwarded to the insurance company in case of a claim. Their contact details will be sent to you in the event of a claim. Data and documents relating to the processing/settlement of claims will be deleted by the Studierendenwerk after the end of the statutory retention period.

g) Job applications

We process your personal data that we receive with a job application exclusively for the purpose of this application. In the event of rejection, the data will be permanently deleted 6 months after completion of the application process.

If you enter an employment relationship with us as part of the application process, your data will be transferred to our personnel administration system.

h) Student loans

The Studierendenwerk Münster has commissioned the Darlehenskasse der Studierendenwerke e. V., Weißhausstr. 30, 50939 Cologne (in the following referred to as Daka) with the application processing, administration and reclaiming of its student loans. Your collected data at the time of application will be forwarded to Daka by the Studierendenwerk and processed exclusively for the purpose of implementing the loan agreement. No further data will be passed on.

After the loan has been paid back, your data will be stored at Daka for the period required by law (10 years). After that, the data will be anonymised.

You can find Daka's data protection information on the website
Responsible for this data processing is the Studierendenwerk Münster.

i) Special loans

The Studierendenwerk Münster grants loans from its emergency fund to students in need. Your collected data at the time of application is used exclusively for the execution of the loan agreement. Data is only passed on internally to authorised persons for the purpose of the procedure. Data will only be passed on to third parties after unsuccessful dunning proceedings.

After the loan has been paid back, your data will be stored for the period required by law (10 years). After that, the data will be anonymised.

j) BAföG

The Studierendenwerk Münster is also responsible for the implementation of the Bundesausbildungsförderungsgesetz (BAföG)).

More detailed data protection information on this subject can be found under:


  1. Third-party providers

It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within our online offer. This always implies that the providers of the content recognise the IP address of the user. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for the presentation of the content. We endeavour to only use content of providers who use the IP address only to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g., for statistical purposes. Insofar as we are aware of this, we inform the users about it.

a) Facebook

On the web pages of the Studierendenwerk Münster you will find links through which you can easily access the social media platforms we use. However, there are no components (e.g., "Like" button) integrated into our pages that transmit data to the operators of the social networks.

However, when you visit our Facebook page, Facebook collects your IP address as well as other information through cookies on your computer. Facebook processes the collected data and may transfer it to countries outside the European Union. Cookies are also stored on your device.

In what way Facebook uses the data of their visitors for their own purposes, to what extent activities on the Facebook page are assigned to individual users, how long data is stored and whether data from a visit to the Facebook page is passed on to third parties is not clearly stated by Facebook and is not known to us.

You can find Facebook's complete data policy here:

b) YouTube

To integrate videos into our websites, we use YouTube, represented by Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland.

In principle, cookies are installed on your computer as soon as you have accessed a page with embedded videos and your IP address is stored. On our websites, however, we use YouTube videos with the "extended data protection mode" function. According to Google's privacy policy, no personal data is evaluated as long as you do not watch the video. However, as soon as you start playback of an embedded video by clicking on it, YouTube saves cookies on your device in extended data protection mode, which do not contain any personally identifiable data unless you are currently logged in to a Google service.

We have no knowledge of the subsequent collection and use of your data by YouTube and cannot influence this. For more information, please visit:

c) Instagram

If you visit our Instagram page and your browser allows cookies to be stored, Facebook Ireland stores cookies and can access this information when you visit the Facebook platform or a website that embeds Facebook technologies. You can find more information about the purpose of the cookies used, the integration of these cookies by other websites and your control options here:

d) Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, you will be shown our location and you can easily find us.

Information about your use of our website (such as your IP address) will be transmitted to and stored by Google on servers in the United States when you access those sub-pages in which the Google Maps map is integrated. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your Google profile, you must log out before activating the button. Google stores your data (even of users who are not logged in) as usage profiles and evaluates them. If you do not agree with further transmission of your data to Google in the context of using Google Maps, you have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"):

e) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there.

If IP anonymisation is activated on this website, the IP address of the user will, however, be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. IP anonymisation is activated on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings in their browser, however, please note that if you do so you may not be able to use the full functionality of this website. Users can also prevent the collection of data generated by the cookie and relating to their use of the website (including their IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at:

As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent the collection by Google Analytics within this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you must click on this link again.

  1. Withdrawal, changes, corrections and updates

The user has the right - upon request and free of charge - to receive information about their personal data stored. In addition, the user has the right to correct incorrect data, block and delete their personal data, provided there is no legal obligation to retain such data.



If you have any questions about this privacy policy, please contact our data protection officer - see contact details above.

Last updated in March 2021