Help and Emergency
Information on the processing of personal data in the context of the use of the emergency and crisis app "EVALARM" on mobile devices
Status: Version 2.0 from 28/05/2024
With this data protection notice, University of Bielefeld fulfils its duty to provide information in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) for the processing of personal data as described above.
With regard to the other terms used, "personal data", "processing", "controller", "third party", etc., please refer to the definitions in Article 4 of the EU-GDPR
1. Contact details
University of Bielefeld, a public corporation with legal capacity supported by the state of North Rhine-Westphalia, is responsible for the processing. It is represented by the Rector, Prof. Dr. Angelika Epple.
1.1 Contact details of the person responsible
University Bielefeld
Universitätsstraße 25
D-33615 Bielefeld
Tel: 0521 / 106 - 00
Email: post@uni-bielefeld.de
Web: https://www.uni-bielefeld.de
1.2 Contact person
Email: krisenmanagement@uni-bielefeld.de
Phone: 0521/106-3342
Web: https://www.uni-bielefeld.de/themen/hilfe-notfall/index.xml
1.3 Contact details of the data protection officer
You can contact the data protection officer by post at the address of the controller
Phone: 0521 106-5225
Email: datenschutzbeauftragte@uni-bielefeld.de
2. Personal data processed and purposes
Purpose of data collection:
We collect and process your personal data to enable you to use the EVALARM app safely and effectively. Your data is processed in the following user roles
- Guest (students, employees without NF & crisis management function, other university members)
- Function holder (e.g. crisis team, company paramedic, intervention team)
Types of data processed:
- Personal master data and communication data:
- Required for registration: email address; first name, last name
- Telephone number (voluntary information; required for function holders for further use and telephone contact directly from the app)
- Alarm data: depending on the scenario
- User position: GPS coordinates
- Log data for device function and support:
- IP address
- Browser data
- Operating system
- Language and version of the end device/browser
- Data scope of the transmission
- HTTP status codes
- Time information
- Device identifier
- Request/request content
- Push notifications: Push ID via APN or FCM
- Login protection: reCAPTCHA (IP address, cookies, referrer URL, browser and operating system information)
- Map material: GPS coordinates, IP address
Further information:
For a detailed description of data processing in the EVALARM app, including information on app permissions and the use of push services, please visit the app provider's data protection declaration and terms of use.
Additional information on the handling of alarms and the processing of usage data can be found in Bielefeld University's terms of use.
3 Legal basis for data processing
- The following legal basis applies to the use of the Evalarm app in the user role as a guest: Art. 6 para. 1 b GDPR, based on the consent to the terms of use.
- For functionaries in the area of crisis and emergency management, data processing is based on Art. 88 para. 1 GDPR in conjunction with Section 18 para. 1 DSG NRW.
4 Data transmission
University of Bielefeld has concluded an order processing contract with the company GroupKom, based in 12437 Berlin, in accordance with Article 28 of the General Data Protection Regulation (GDPR). GroupKom is responsible for providing the EVALARM system, which includes the app, web client and PC client.
For further information on data processing and data protection measures, please visit the EVALARM data protection declaration. There you will find additional documents that provide further details on Data protection in the context of the use of EVALARM.
5. Deletion periods
Personal master data and communication data: Users can unsubscribe from the service in EVALARM at any time. Users can also delete their EVALARM account at any time. When the account is deleted, the user data is deactivated and permanently deleted after a period of 3 months. The administrator and super administrator have no access to the user's personal data from the time of deactivation. All data from the alerting processes is anonymised at the time of deactivation.
All alerting data is automatically archived a few hours after an alert has ended. Users with the Guest and Employee roles do not have access to archived alarms.
The Administrator, Emergency and Crisis Team Leader, Emergency and Crisis Team Employee and Employee user roles have access to archived alarms on the mobile client (app) for 7 days. Archived alarms are automatically deleted after 3 months.
The log data and the data generated in connection with push notifications are also deleted after 3 months
The location data in the event of a (personal) SOS alarm by the Guest role is stored both on the mobile device and on the server and is automatically deleted after the deletion period of 3 months.
6 Your rights as a data subject
As a data subject, you can assert the rights granted to you by the EU GDPR at any time:
- the right to help desk whether and which of your data is being processed(Art. 15 EU GDPR),
- the right to request the rectification or completion of data concerning you (Art.16 EU GDPR)
- the right to erasure of the data concerning you in accordance with Art. 17 EU GDPR
- the right to request the restriction of the processing of the data in accordance with Art. 18 EU GD PR,
In addition to the aforementioned rights, you have the right to lodge a complaint with the data protection supervisory authority(Art. 77 EU GDPR), for example with the supervisory authority responsible for the university:
State Commissioner for Data Protection and
Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf