Data protection in the canteens and catering

Studierendenwerk Dortmund AöR
Vogelpothsweg 85, 44227 Dortmund
Phone: 0231-20649-0
Fax: 0231-754060
E-mail: info(at)stwdo.de

For further information about us, please see the imprint and the contents of this website.

What personal data does StwDo process and for what purpose?

For the purposes of providing and invoicing catering services, consumption vouchers or promotion campaigns as well as for the purposes of concluding and implementing rental and usage contracts for rooms and spaces, we process the data required for this purpose. This includes, in particular, contact data, offer data, contract data, performance data and billing data. In the area of catering, health data in the form of food intolerances and allergies may be processed.

When visiting our catering facilities during opening hours (e.g. eating in the refectory), no personal data is processed, except in the context of cashless payment, information on which can be found in our "Data Protection Information Cashless Payment".

As long as data has to be collected for contact tracing because of legal requirements due to the Corona pandemic, the data collected in the process will be processed in accordance with the legal requirements, the data protection information on this is provided in the context of contact tracing.

Relevo reusable system

Studierendenwerk Dortmund does not collect any personal data when you use the Relevo reusable system. The StwDo also has no access to the data Relevo processes based on your registration or use of the app. To participate in the Relevo reusable system, you need to download and register for the Relevo app, which is available on Google Play or in the App Store. When registering in the app, you must provide personal data that is mandatory for the use of the reusable system: First and last name, email address and postal address. The processing of your data when registering and using the app is the responsibility of Relevo GmbH, Boschetsrieder Straße 67, 81379 Munich. Their privacy policy is available on the Internet at any time at www.gorelevo.de/datenschutz

What is the legal basis for this? Is there an obligation to provide data?

The legal basis is Art. 6 (1) (b) DSGVO in connection with the respective contract concluded (e.g. catering contract), as well as Art. 9 (2) (a) DSGVO for the collection and processing of health data, related to the consent to process information on the existence of an allergy or food intolerance. There is only an obligation to provide data if a contract has been concluded, the data required for the performance of the contract and the data required for payment must be provided.

How long is the data stored?

If a valid contract was or is concluded, the data will be stored for 10 years after complete settlement and then deleted.
If no valid contract is concluded, the data will be completely deleted from the system after 12 months. This time is necessary if you should come back to us again. This allows us to react more quickly and make you a suitable offer.

Who gets your data?

The data you provide will be processed by the employees responsible for university catering or accounting. To the extent permitted, we may involve service providers who are contractually obliged to comply with data protection. We process data exclusively within the European Union.

What data protection rights do you have?

You have the right to information about the personal data we process about you in accordance with Article 15 DSGVO. You have the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to withdraw consent and to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. In the case of these rights, the restrictions in accordance with the NRW State Data Protection Act may apply.

If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met and you will receive a corresponding notification from us. If necessary, we will ask you to identify yourself; you are obliged to do so if you have any doubts.

You can contact us at any time with this and other questions on the subject of personal data or in the event of complaints, either to the contact persons known to you or to our data protection officer, contact details can be found here at the beginning of the data protection information. In addition, you have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information LDI NRW, Kavalleriestr. 2-4, 40213 Düsseldorf.

Revocation of consent

You can revoke any consent given to us to process your personal data at any time with future effect by sending us a message to this effect. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

In principle, the revocation can be sent to us without any formalities, but for reasons of proof, we request that you send it to us by post or e-mail with the subject "Revocation" and stating your name and address.

As a precautionary measure, we would like to point out that we may continue to process data in whole or in part even after you have withdrawn your consent if there is another legal basis for doing so.

Right of objection

You have the right to object to the processing of personal data relating to you at any time if grounds for doing so arise from your particular situation, provided that the processing is based on Article 6(1)(e) or (f) DSGVO.

In principle, the objection can be sent to us without any formalities, but for reasons of proof, we request that you send us a letter or e-mail with the subject "Objection", stating your name and address, or hand over a letter.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

How can you obtain further information?

In addition to this information letter, we refer you to all the information you already have or know about us. If you would like further information, please contact our data protection officer. He/she will be happy to help you. Please take into account that in the case of part-time positions and in the case of holiday/illness, processing may be slightly delayed, thank you very much.