1. Name and address of the controller and his/her representative
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws - in particular the Hessian Data Protection and Freedom of Information Act (HDSIG) - as well as other data protection regulations is:
Technische Hochschule Mittelhessen (THM)
Wiesenstraße 14
Tel.: +49 641 309-0
E-mail:
Legally represented by its President
Prof. Dr. Matthias Willems
Wiesenstraße 14
Tel.: +49 641 309-0
E-mail:
Contact details of the data protection officer:
The data protection officers of the controller are:
Jasmin Möschet (Law)
Prof. Thomas Friedl (Technology)
Wiesenstraße 14
Tel.: +49 641 309-0
E-mail:
2. Scholarship provider
a. Scope of data processing
As a scholarship provider, the following data will be collected and processed from you:
- Name and address of the scholarship provider or legal representative
- Contact details such as telephone number or email address
- Account details
For reasons of transparency in public administration, the names and the amount of the donation are included in the report on sponsorship services and are hereby forwarded to the Hessian state administration.
Internally, the Fundraising staff unit and the Budget Department will have access to your data.
b. Purpose of processing:
Implementation of the Germany Scholarship program and implementation of the funding agreement
c. Legal basis for processing
The processing is carried out for the implementation of the funding agreement pursuant to Art.6 para. 1 b GDPR.
d. Duration of storage of personal data
The personal data will be stored for 10 years in accordance with the legal requirements of the decree on record keeping in the offices of the State of Hesse.
3. Applicants selected for funding
a. Scope of data processing
The following categories of personal data are processed
- Personal data such as name, address and date of birth
- Contact details such as email address and telephone number
- Student data such as matriculation number and academic achievements
- Account details
- Tax identification number
- Internship or work data
- Data on voluntary engagement
- special categories of personal data pursuant to Article 9 GDPR, such as religious affiliation or health data
- Other categories that are voluntarily specified as part of the application
b. Purpose of processing
The processing of the data serves the purpose of reviewing and awarding the scholarship as well as the subsequent payment.
Furthermore, the data was processed for the purpose of contacting the applicant.
To prevent double funding, the Federal Ministry of Education and Research conducts random checks, for which personal and student data are shared.
c. Legal basis for processing
The legal basis for processing within the scope of reviewing and administering the scholarship is the consent given by the data subject(s) pursuant to Art. 6 para. 1 a GDPR or Art. 9 para. 2 a) GDPR in the case of special categories of personal data.
If you are obliged to cooperate in accordance with Section 10 of the Scholarship Program Act (StipG), the processing will be carried out on the basis of Art. 6 para. 1 c) GDPR in conjunction with Section 10 StipG.
In the event of a random sample being taken by the Federal Ministry, the data will be transferred on the basis of Article 6 Paragraph 1 c) in conjunction with Section 4 Paragraph 2 of the Scholarship Act
d. Duration of storage of personal data
The data will be deleted five years after the end of the scholarship.
e. Right of withdrawal
Consent to processing can be withdrawn at any time with effect for the future. The lawfulness of the data processing carried out on the basis of the consent until its withdrawal remains unaffected.
In the event of a revocation, further funding is no longer possible.
4. Applicants who were not selected for funding
a. Scope of data processing
The following categories of personal data are processed
- Personal data such as name, address and date of birth
- Contact details such as email address and telephone number
- Student data such as matriculation number and academic achievements
- Internship or work data
- Data on voluntary engagement
- special categories of personal data pursuant to Article 9 GDPR, such as religious affiliation or health data
- Other categories that are voluntarily specified as part of the application
b. Legal basis for processing
The legal basis for processing is the consent given by the data subject(s) pursuant to Art. 6 para. 1 a GDPR.
c. Purpose of processing
The processing of the data serves the purpose of reviewing and awarding the scholarship as well as contacting the applicant.
d. Duration of storage of personal data
The data will be deleted one year after notification of the rejection notice, whereby the one-year period only begins at the end of the year in which the notice was issued.
5. Rights of data subjects
If your personal data is processed, you, as a data subject within the meaning of the GDPR, have the following rights against the controller:
- Right to information,
- Right to rectification,
- Right to erasure,
- Right to restriction of processing,
- Right to withdraw your consent,
- Right to object to processing,
- Right to data portability in a commonly used, structured and machine-readable format
6. Rights and complaint options
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the EU General Data Protection Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
You have the right to lodge a complaint with the responsible supervisory authority of the state of Hesse regarding data protection issues.
Contact address of the supervisory authority of the Technische Hochschule Mittelhessen :
The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
E-mail:
Telephone: +49 611 1408-0
