The data protection regulations of LMU Munich apply. The following also applies:
Data protection information in accordance with Art. 13 GDPR for the use of the "matorixmatch" portal application of the LMU Munich Career Service
The following data protection information applies to all users of the matorixmatch application of the Career Service of the University of Munich (LMU), hereinafter abbreviated to "portal application". It applies to all registered users of the portal application and users of visitor access.
When you use the portal application, personal data is collected and processed from and about you. This data is linked to your person. It is therefore our duty to inform you about what data is collected and processed and what rights you have with regard to data collection and processing.
1. responsible body
Ludwig Maximilian University Munich
Geschwister-Scholl-Platz 1
80539 Munich
Data processing department:
2. data protection officer
Data Protection Officer of the LMU Munich
3. purpose - What is "Matorixmatch" and what can it be used for?
Matorixmatch is a SaaS application that the LMU Career Service uses to manage its events and services. The Career Service uses the portal application to establish contacts with mentors and companies from the Career Service's career network. The data is shared exclusively with the companies and between the mentors and mentees, who are selected by the students.
When used by students / companies / mentors, the data protection regulations of matorixmatch also apply. If you have any questions, please contact the LMU Career Service / the above-mentioned LMU data protection officer directly.
4. categories of personal data processed
Personal data about you is processed as part of the portal application.
Below we describe which personal data is processed:
4.1 Logging in to the portal application
Uploaded photo
Title
Gender
First names
Name
Telephone
Preferred display language
Uploaded resume
Events and consulting services booked and attended by you
Your concerns in the consultation
Attendance lists
The data is uploaded by you and can be entered, edited and deleted at any time. After deletion, only the data that is required from a commercial point of view and with regard to the management of events is stored.
4.2 Cookies
We only use consent-free cookies that are used solely for the operation of the platform and do not require separate approval.
5. legal basis
The legal basis for the collection and processing of personal data is your consent in accordance with Article 6(1)(a) GDPR. Data processing is carried out in accordance with the relevant data protection regulations, in particular on the basis of the General Data Protection Regulation and the Bavarian Data Protection Act.
With regard to the use of cookies, the legal basis is Art. 25 TTDSG. Data processing is also carried out to the extent necessary for the purpose of continuous improvement of system operation, i.e. for quality assurance, by the operator of the portal application (Art. 6 para. 1 lit. e GDPR).
6th recipient
We use a suitable IT security infrastructure to ensure that internally only those persons who require access to this information for the fulfillment of their tasks have access to it. We treat personal data confidentially and do not make it available to third parties, especially not to the public, without authorization.
6.1 Internal receivers
The data collected will be processed for the purpose described in section 1 by the respective LMU employees and cooperating companies as part of the events and services offered. The employees of the LMU Career Service and companies that you select yourself as part of the events and services have access to the respective data.
6.2 External receivers
We only pass on your data to the associated companies, mentors and/or trainers as part of the events and services you have selected. We oblige the companies to comply with the legal requirements on data protection and the usual storage, processing and deletion periods in recruiting. Companies that use student data from the portal are obliged to use the data and documents of students and graduates transmitted to them only for recruiting purposes in the temporal and organizational context of the events booked and used by them and to delete these data and documents no later than four weeks after the event or when the partnership expires. Any longer data processing requires the separate consent of the student or graduate, e.g. as part of the continuation of the application and recruitment process in the respective company.
7. deletion
Personal data is deleted from the system as soon as it is no longer required for the purpose for which it was collected. A deletion check is carried out regularly and at least once a year. We block access to participant data immediately after the end of an event. Of course, we will also pass on your deletion request to any companies you have chosen. You can change your data at any time.
8. a) Your rights
You have various claims against the responsible body with regard to the data stored about you. Please note that master data provided by external institutions (e.g. universities of the DFN, vhb) can only be accessed, corrected or deleted by the respective institution. Your rights include
Right to information (Art. 15 GDPR):
You have the right to receive information about the personal data that is processed about you, please note that you can also find the data in your user profile.
Right to rectification (Art. 16 GDPR):
If incorrect personal data is stored, you can adjust some of it yourself (profile data you have entered yourself) or request the controller(s) to do so. The controller will comply with the request if the correction is justified and permissible.
Right to erasure (Art. 17 GDPR):
You have the right to have personal data deleted that is demonstrably incorrect or for which the controller cannot prove a processing purpose. There is no right to erasure of personal data if the controller is obliged to retain the data for legal reasons or due to official obligations (proof of instruction, proof of quality assurance, copyright usage rights, examination rights). The obligation to delete personal data may also exist after the end of the course / participation in the course / employment relationship or if consent is withdrawn. There is also no entitlement to deletion if information has been collected by you and this is in an indissoluble context with information from other users (e.g. forum posts). The request for deletion can be interpreted as a withdrawal of consent. This may mean that you will no longer have access to the portal application and participation in a course will no longer be possible. It may no longer be possible to provide evidence, e.g. proof of performance.
Right to restriction of processing (Art. 18 GDPR):
Those responsible will ensure that, in the event of a justified restriction of processing, personal data is only accessible to those persons who need to process the data. They may use pseudonymization and anonymization for this purpose. Restricting processing may mean that you will no longer have access to the portal application and participation in a course will no longer be possible. It may no longer be possible to provide evidence, e.g. proof of performance.
Right to object (Art. 21 GDPR):
You can object to the further use of the data under the legal requirements. This can only take effect in the future. The right to object is not an automatic obligation for the controller to erase the data. If the controller has storage obligations for other legal reasons, these take precedence. The objection may mean that you no longer have access to the portal application and participation in a course is no longer possible. Evidence, e.g. proof of performance, may no longer be able to be provided.
Right to data portability Art. 20 GDPR):
Under the legal requirements, you have the right to receive data that you have collected yourself in an electronic format that can be used elsewhere. The right is limited to data that is not subject to a business secret and therefore may not be transferred to other parties or that affects the rights of others, e.g. their personal rights or copyright.
Right of revocation (Art. 7 para. 3 GDPR):
You have the right to withdraw your consent to the processing of your data for the future. The revocation does not affect the legality of the processing up to the time of revocation. Withdrawal may mean that you no longer have access to the portal application and participation in a course is no longer possible. It may no longer be possible to provide evidence, e.g. proof of performance.
In the event of a breach of statutory provisions for the protection of the data stored about you, you can contact the competent supervisory authority. The competent supervisory authority is the Bavarian State Commissioner for Data Protection (see § 4). Please contact the controller(s) or the data protection officer(s) first (see § 4) so that your request can be examined as quickly as possible and, if necessary, complied with.
In the event of deletion, restriction or revocation, further use of the portal application and access to the learning content stored there as well as participation in the activities and functions available there is no longer guaranteed with immediate effect.
8. b) Recordings, reporting and advertising:
Please note that the event will be photographed / filmed and the image material may be published on the Internet or in one of our publications in the context of LMU Career Services. Your personal data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. We would like to point out that you can object to this processing in accordance with Art. 21 para. 1 GDPR for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims. The objection should be addressed to: careerservice@lmu.de, Career Service der LMU, Ludwigstr. 27, 80539 Munich. Of course, you can also object to being photographed on site at any time. Please speak to the photographer/documentarian on site.
Examples of publications by LMU / corporate partners:
- Reports on the Internet / Intranet about an event
- Reports in social media about an event
- Advertising future events in a flyer, on the Internet or on social media
9. newsletter and reminder
By registering in the Career Community on the matorixmatch portal, you agree that we will inform you regularly by e-mail about events. We will also send you reminders about the dates you have booked.
10. validity
The current version of the data protection information applies. If necessary, the data protection information will be adapted. Further data protection information can be found at www.lmu.de/datenschutzerklaerung.
11 Consent under data protection law
I have taken note of the data protection information. I am aware that mandatory personal data is processed when using the portal application and that consent is voluntary. I am aware that I will not be given access to the portal application if I do not consent or revoke my consent. I consent to the processing of the data stored in my "personal profile" and the contributions published by me in my name. I consent to the processing of the data generated by my use of a "course" or the platform. I can view and change this consent at any time on the start page of the portal application.