Privacy Statement

for Moodle Users

Protecting your data is of utmost importance to us. Our privacy statements for different groups of data subjects offer a brief overview of the personal data we collect and what it is used for.

We, CAMPUS 02 University of Applied Sciences (abbr. CAMPUS 02), Körblergasse 126, 8010 Graz, use the online learning platform Moodle for teaching purposes. The data processing that takes place in this way serves to implement and support proper teaching, study and examination operations.

The following personal data will be processed:

Access and profile data: Username, password in encrypted form, email address, first name, last name, personal identifier, role, status, course profiles, login activity, group.

Content data: e.g. uploaded files, registered courses, course entries, forum posts, forum topics, notes, learning plans, assessment overview, timeline/upcoming activities, messages, calendar/dates, course achievements, course reports, course activity, course participation, course history, course statistics, assessments, submitted assignments, wiki entries.

Cookies: Login-Cookies

Connection and usage data: e.g. IP address, date and time of access, log data, last access to course, last visited courses, first and last access to website

Voluntary provision of personal data: e.g. photo, telephone number, address, city, country, personal interests, department, institution, other names, pseudonym

The processing of this data is based on our legitimate interest pursuant to Art. 6 (1) f of the EU General Data Protection Regulation (GDPR) in the implementation and support of proper teaching, study and examination operations for teaching and learning purposes. Furthermore, the data processing is based on the fulfilment of the study contract pursuant to Art. 6 para. 1 lit b GDPR.

The processing of data voluntarily provided by you is based on your express consent pursuant in accordance with Art 6 para 1 lit a GDPR

The last access to the website and the IP address are overwritten with every login.

Log data, course activity, course participation and last access to the course will be deleted after 1000 days.

The remaining data contained in the Moodle courses are deleted after 4 years, calculated from the end of the academic year in which the Moodle course was held.

In addition, voluntarily disclosed data can be changed and deleted at any time.

Moodle sets two cookies on your terminal device. The cookie “MoodleSession” must be activated so that you remain logged in when you change pages. This cookie is automatically deleted when you log out of Moodle or close your browser. The second cookie, “MoodleID”, stores your login name – if you wish – so that you do not have to enter it again and again when logging in. You can allow or disallow the setting of this cookie.

In the case of embedded YouTube videos, cookies may be set by YouTube on the end device you are using, which may enable YouTube to analyse user behaviour for market research and marketing purposes. YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In what way YouTube uses data for its own purposes, to what extent activities are assigned to individual users, how long this data is stored and whether data is passed on to third parties is not conclusively and clearly stated and is not known to us. Data transfer to countries outside the EU, such as the US, is possible in principle.

Since the ECJ ruling C-311/18, an adequate level of data protection cannot be guaranteed for data transfers to providers who are subject to US surveillance laws. However, these are permitted according to the exception in Art. 49 (1) lit b General Data Protection Regulation (GDPR)  if they are necessary for the fulfilment of the contract. The use of YouTube videos for teaching and learning purposes is necessary for the fulfilment of the study contract. Further information on data processing can be found in the data protection declaration (https://policies.google.com/privacy) and Google’s cookie policy (https://policies.google.com/technologies/cookies?hl=en-GB#types-of-cookies). According to CAMPUS 02 internal guidelines, YouTube videos should be embedded in Moodle in extended data protection mode, if this is technically possible. In this case, cookies are blocked until the video is actively clicked on.

H5P is used as a supporting Moodle plug-in for the creation of learning content in the context of teaching. H5P is offered by Joubel AS, Flow Coworking AS Strandgata 9, 9008 Tromsø in Norway (data protection information available at https://h5p.org/privacy). Personal data is stored exclusively on the company’s own host system (on-premise). If learning content is created in connection with YouTube videos, the extended data protection mode cannot be activated for technical reasons.

Please note that we will update this privacy statement from time to time (e.g. due to law amendments, usage of new technology, new study opportunities). We recommend that you regularly check it for updates.

In general, you have right of access, the right to rectification, to erasure, to restrict, to data portability, to withdraw and to object.

Please contact us – we will be happy to help.

Data Protection Coordination Team
at CAMPUS 02
CAMPUS 02 University of Applied Sciences
Körblergasse 126, 8010 Graz, Austria
+43 316 6002-348

Data Protection Officer
at CAMPUS 02