The data controller for the “online application platform for the one-off payment for students at higher education institutions, trade and technical schools (Fachschulen) and full-time vocational schools (Berufsfachschulen) under the Students’ Energy Price Allowance Act (Studierenden-Energiepreispauschalengesetz – EPPSG)” (hereinafter: the “online application platform for the EPPSG one-off payment”), which is intended to help you to complete your application and to facilitate its transfer to the IT applications of the Länder, is the Ministry of Infrastructure and Digital (MID) of Land Saxony-Anhalt:
Ministerium für Infrastruktur und Digitales des Landes Sachsen-Anhalt (MID)
Turmschanzenstraße 30
39114 Magdeburg
Tel.: +49 (0)391 567-01
Email: poststelle-mid(at)sachsen-anhalt.de
The controller for data processing in the IT applications of the Länder – i.e. during the administrative decision-making process on online applications for the EPPSG one-off payment – is the competent body in each of the Länder; separate privacy statements apply in relation to this.
The data protection officer of the Ministry of Infrastructure and Digital (MID) of Land Saxony-Anhalt, designated under Article 37 (1) (a) of the EU’s General Data Protection Regulation (GDPR), can be contacted as follows:
Ministerium für Infrastruktur und Digitales des Landes Sachsen-Anhalt
Datenschutzbeauftragter
Turmschanzenstraße 30
39114 Magdeburg
Tel.: +49 (0)391 567-3577
Email: datenschutz-mid(at)sachsen-anhalt.de
Personal data, as defined in Article 4 no. 1 of the GDPR, means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, for example by reference to an identifier such as a name, an identification number, location data, or an online identifier.
The information below sets out the exact sequence of (1) visiting the website, (2) support for applicants when submitting an application, (3) data processing through transfer to the IT applications of the Länder and their processing of the submitted applications, as well as disclosure to processors, and (4) notification of the decision.
When you visit the information website, we collect data during an active session via your web browser, and by using technically necessary “session cookies”. This data relates solely to your IP address (see the bullet points below). Session cookies enable the site’s functionality.
The use of cookies results in the following information being collected by the entity which has set the cookie (in this case us):
Information already stored on users’ devices is accessed on the basis of section 25 (2) no. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG). The subsequent processing of personal data takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section (9) (3) of the E-Government Act of Land Saxony-Anhalt (EGovG LSA), in the framework of public relations. The data processing is necessary to provide users with the information they need.
The aforementioned data is erased after seven days at the latest. The session cookies are deleted from your devices when you end the session. Any web browser can show you when cookies are set and what information they contain. However, you can disable cookies or set your browser to only store cookies for the duration of your internet session.
Each time this website is accessed, or each time a file is accessed, data about this operation is temporarily processed in a log file. Specifically, the following data is stored:
On the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2 of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA), we are authorised to collect and store data with the aim of protecting the internet infrastructure of Land Saxony-Anhalt from attacks. The data is analysed and, in the event of attacks on our communications technology, is necessary to take legal action or bring criminal proceedings. The data is erased after a maximum of seven days.
Data which is recorded when you access the website of Land Saxony-Anhalt is passed on to third parties if we are legally obliged to do so and/or if doing so is necessary to take legal action or bring criminal proceedings in the event of attacks on communications technology. It is not passed on in other circumstances. Nor is this data combined with other data sources.
If you have questions about the application process, you can contact the support team by telephone. A telephone number is available which will put you directly in touch with people who can answer your questions. We process your telephone number in order to connect you to them.
In addition, you can submit enquiries using the contact form. We process the personal data associated with this (last name, first name, email address and the information contained in your enquiry) so we can answer your enquiry, and we erase the data as soon as it is no longer needed for this purpose.
The data you provide is stored for the purpose of contacting you and dealing with your enquiry. The processing takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2 of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA) and is necessary so that we can deal with your enquiry.
You need to register in order to submit an application on the online application platform for the EPPSG one-off payment and to use the EPPSG site.
Registration for the online application platform for the EPPSG one-off payment takes place via your BundID account. You will be taken automatically to the BundID website; the BundID privacy policy applies. You have the option of proving your identity using an ELSTER certificate or an eID card, or alternatively by using a username and password in combination with the PIN provided by your education or training establishment. Further information on this can be found in the FAQ.
Once you have granted consent in your BundID account, you will be taken automatically to the online application platform for the EPPSG one-off payment. We will take the following data from your BundID account, if available:
In addition, we store the IP address used and the access code you enter. This data is stored for the purpose of preventing any further applications from being submitted. It is not possible to change these details, but read-only access is available. The use and storage of the data within the application account takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA), in conjunction with section 3 (4) of the administrative regulation on the Students’ Energy Price Allowance Act (VwV-EPPSG).
To complete the registration process, you are asked to provide further details (including your email address and the Land where the education or training establishment is located that issued the access code to the applicant) which we cannot obtain from your BundID account. This information is needed in order for you to apply for the energy price allowance, however. The processing of this application data takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA).
We erase your registration data as soon as it is no longer required for an application for the energy price allowance.
You are also asked to provide your email address so that you can be contacted and officially notified about the decision on your application by the competent bodies at Land level. To verify your email address, we send you an email with an activation link. Clicking on the link completes the registration process. If you have successfully submitted your application – see below – a confirmation email will be sent to this address.
The processing of your email address takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA).
Once you have completed the registration process, you can log in to the online application platform for the EPPSG one-off payment. You will have to verify your identity again using your BundID user account. For security reasons, verifying your identity using your BundID account is required every time you log in; depending on the method chosen, this may include providing the PIN. The processing takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA).
The application assistant supports you, as an eligible applicant, in completing an application on the online application platform for the EPPSG one-off payment. The submission of the application takes place after transfer to the competent bodies of the Länder.
When you come to fill out the application, the (master) data contained in your BundID account is initially copied into the form. This applies to the following information:
The automatic addition of this data makes it easier for you to enter the remaining application data. In addition, you have to enter
You can also choose to enter the following optional information:
The processing of the applicant’s personal data, and the personal data which is relevant for the subsequent administrative process, takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA). This permits the processing of personal data by a public body if such processing is carried out to perform a task in the public interest for which the controller is responsible. The application assistant, for which the Ministry of Infrastructure and Digital (MID) of Land Saxony-Anhalt is responsible, is intended to enable the centralised submission of applications, in order to reduce the processing time and avoid confusion about the competent bodies in the Länder.
By entering optional information in the application form, you are agreeing to the processing of this personal data. The data processing therefore takes place on the basis of your consent, under Article 6 (1) (a) of the GDPR.
During the initial processing of your application, i.e. before it is submitted, the system checks whether you have provided all of the necessary information and whether it is possible for the information you have entered to be accurate. This paves the way for the automation of the subsequent administrative process, and is intended to provide effective support for the submission of error-free applications.
The processing of the applicant’s personal data takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA). The completeness check ensures that only validated applications are transferred to the IT applications of the awarding authorities.
When applications are submitted by the applicants, after the data has been entered in the online application platform for the EPPSG one-off payment, the application data is transferred to the IT applications of the Länder. From the time when this data is received after its transfer, the competent bodies of the Länder are the controllers. They use your personal data to process your application; the administrative process begins only after receipt of the application data.
The data processing takes place for the purpose of transfer and disclosure to the competent body at Land level.
The transfer of your personal data takes place on the basis of Article 6 (1) (e) of the GDPR in conjunction with section 4, first sentence, no. 2, first part of the sentence, of the GDPR Implementation Act of Land Saxony-Anhalt (DSAG-LSA).
The processing of personal data in order to provide transparent information is carried out, subject to the agreed security requirements, by a processor in accordance with Article 28 (3) of the GDPR, namely ]init[ AG, Köpenicker Straße 9, 10997 Berlin.
The processing of personal data in order to answer enquiries when you contact us is carried out, subject to the agreed security requirements, by a processor in accordance with Article 28 (3) of the GDPR, namely the service provider Telemark Rostock, Kommunikations- und Marketinggesellschaft mbH, Am Hechtgraben 1b, 18147 Rostock.
In each case, the Ministry of Infrastructure and Digital (MID) remains the controller.
You have the following rights regarding your personal data under the GDPR, within the scope of the law:
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
In addition, under Article 77 of the GDPR you have the right to lodge a complaint with a supervisory authority.
You can contact the Ministry’s data protection officer with questions and complaints relating to data protection. The contact details are provided in section II above.