Data protection information for applicants and students via the PRIMUSS Applicant and PRIMUSS Student Portal
on the PRIMUSS Portal for Applicants and Students
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (European Data Protection Regulation - GDPR, Bavarian Data Protection Act - Bay DSG).
In accordance with these regulations, we inform you in this data protection information about the relevant aspects of the processing of your data in our application procedure for study places, in our enrolment procedure as well as in the student and examination administration for enrolled students and the scholarship administration.
We adapt our data protection information in line with current developments and inform you regularly about any adaptations made in line with data protection requirements. You will be informed of any changes the next time you log in to the applicant or student portal
Name and contact details of the Data Protection Officer (Art. 13 para. 1 lit a GDPR)
Technische Hochschule Ingolstadt (THI)
Esplanade 10, 85049 Ingolstadt
represented by the President Prof. Dr. Walter Schober
Contact details of the Data Protection Officer (Art. 13 para. 1 lit a GDPR)
Purpose and legal basis of data processing (Art. 13 para. 1 lit c GDPR)
We use the personal data collected to process your application for a place at university within the framework of the legal requirements and to prepare your enrolment in the event of a successful application for a place at university. When you enrol at THI, your personal data is subsequently used for student and examination administration, to support the processing of your international affairs such as study abroad semesters, for the organisation of studies and for scholarship matters and as a basis for talent promotion.
This includes the organisation of your system accesses required for your studies (network, online portals, learning platforms, library use, room use, display of your personal timetable, etc.).
The legal basis for data processing is Art. 6 para. 1 lit e in conjunction with. para. 3 lit b GDPR, Art. 42 Bavarian Higher Education Act (BayHSchG).
Recipients or categories of recipients of personal data (Art. 13 para. 1 lit e GDPR)
THI will only disclose your data on the basis of legal authorisations or with your consent: Beyond that, no data is passed on.
For degree programmes that participate in the nationwide admission matching, the so-called dialogue-oriented service procedure (DoSV), your application data will be transmitted to the Foundation for University Admission (Stiftung für Hochschulzulassung ) responsible for the DoSV (see www.hochschulstart.de) for the nationwide application and admission matching and compared with the data you have deposited there (legal basis Art 7 para. 3 No. 4 Bavarian Higher Education Admission Act (BayHZG) in conjunction with. Section 2 para. 1 and 3 para. 1 No. 4 Bavarian Higher Education Admission Act (BayHZV).
Within the framework of admission and the course of studies, your data will be compared with the relevant statutory health insurance fund (legal basis199 a SGB V (Social security statute book) and, if necessary, data will be transferred to the Studentenwerk Erlangen-Nürnberg in connection with BAföG applications (student benefits programme) submitted by you there (legal basis Sections 47 / 48 Bundesausbildungsförderungsgesetz - BAföG).
We operate our library and library systems in association with the Catholic University of Eichstätt/Ingolstadt (KUE):You can use both the THI library and the KUE library, and the libraries provide each other with user data. The systems and data themselves are hosted at the Leibnitz Computing Centre, an institute of the Bavarian Academy of Sciences and Humanities, and technically administered by KUE.
In many scholarship programmes, THI has a right of nomination for possible candidates among the students: We only ever pass on your contact and performance data with your consent. Data may be passed on without your knowledge on the basis of Section 27 BayDSG (Bavarian Data Protection Act) for the preparation and implementation of state or municipal awards or honours.
In addition, THI works with various cooperation partners and IT service providers within the framework of the organisation and processing of your applications and your studies, who are obliged to data protection in the same way as THI itself or are obliged by us to do so.
Information on the transfer of data to a third country or an international organisation (Art. 13 para. 1 lit f GDPR)
A transfer of your personal data to entities in countries outside the scope of the GDPR (so-called third countries) takes place if this is required by law, if it is necessary for the performance of the task assigned to us by the legislator as a university, for the fulfillment of a contract with you or if you have given us your consent.
For certain tasks, we use service providers (e.g. IT infrastructure, plagiarism check for theses) who have their company headquarters in a third country or operate data centres there. A transfer is permissible if the transfer is subject to an adequacy decision by the European Commission (Art. 45 GDPR). In the absence of such a decision, we may only transfer the data if appropriate safeguards have been agreed and the data subjects have enforceable rights and effective remedies (Art. 46 para. 1 GDPR).
We only use service providers who guarantee that appropriate guarantees for compliance with the European level of data protection have also been agreed with their contractual partners.
Your obligation to provide the personal data / possible consequences of not providing it (Art. 13 para. 2 lit e GDPR)
In accordance with Art. 42 para. 4 of the Bavarian Higher Education Act (BayHSchG), you are obliged to provide all personal data relevant to the processing of your application and your studies. If you do not provide the requested, decision-relevant data, you may lose any claims based on this (e.g. for admission to studies, enrolment, examinations, leave of absence, extensions of deadlines and access, etc.).
Planned storage period of your personal data (Art. 13 para. 2 lit GDPR)
The following deletion or anonymisation deadlines apply subject to the implementation of the Bavarian Archive Act (BayArchivG). If documents are worthy of archiving, they are offered for archiving before deletion or anonymisation and transferred if necessary.
Your applicant data will only be used to process your application. If your application was not successful, this data will be deleted six months after the end of the application process (legal basis Art. 12 para. 1 No. 2 BayDSG).
If you are enrolled with us, we store your personal data for the duration of your studies in accordance with the legal requirements:
- Applications and other correspondence will be stored for the duration of the degree programme and for six months beyond, in order to be able to track the course of studies and issue corresponding certificates, etc., if necessary.
- According to Section 12 of the Framework Study Regulations for Universities of Applied Sciences in Bavaria (RaPO), examination documents must be kept for two years, beginning with the end of the calendar year in which you were notified of the result of the respective module examination. Examination documents which are the subject of an appeal or legal action shall, in derogation thereof, be stored until the legal conclusion of the proceedings.
- A reduced examination file is stored for a period of 50 years with information on the enrolment period, examination results, exmatriculation and the awarding of the academic degree. The retention period begins with the end of the calendar year in which you are exmatriculated.
- Your personal timetables, which you can compile individually each semester from all the courses offered and display online in our timetable tool, will be deleted at the end of the following semester.
- Personal data concerning financial transactions (student union fees, tuition fees in the part-time Bachelor's and Master's degree programmes) are stored for a period of ten years on the basis of budgetary and tax law.
Your right to information, to correction of data or restriction of processing, to deletion and data portability (Art. 13 para. 3 lit b, 15 to 20 GDPR). Pursuant to Art. 15 GDPR, you have the right to request information as to whether and which of your personal data is stored,
for what purpose it is used, to whom the data was transmitted, and, if applicable, where the stored data originates, unless it was collected from you personally (Art. 15 GDPR). If you are of the opinion that incorrect personal data is being stored about you, you have the right to have this data corrected in accordance with Article 16 of the GDPR or to have the processing restricted until the accuracy has been clarified in accordance with Art. 18 GDPR. With regard to personal data that is no longer required for the purpose for which it was collected, you may have the right to have your data deleted in accordance with Art. 17 GDPR.
Art. 20 GDPR establishes your right to have the data provided by you made available in a structured, common, machine-readable format or to have it made available directly to another person responsible named by you.
Your right of appeal (Art. 13 para. 2 lit d, Art. 77 GDPR)
If you as a data subject or data subject are of the opinion that the processing of personal data concerning you violates the GDPR, you also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy. The supervisory authority responsible for public bodies in Bavaria is the Bavarian State Commissioner for Data Protection (BayLfD) pursuant to Art. 15 BayDSG. You can reach him at