Data protection

The following information applies to all online offers of the Federation of Foreign Students (BAS).

Data protection in short form

General notes

The following notes give a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. Detailed information on data protection can be found in the section “General Notes and Mandatory Information”.

Data collection on our websites

Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. Contact details can be found in the imprint of this website.

How do we collect your data?
Your data is collected on the one hand by sharing it with us. This includes, for instance, data you enter into the contact form or comment box. Other data is automatically collected by our IT systems when visiting the website. This is mainly technical data (e.g. Internet browser, operating system or time of page call). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the site is displayed correctly. Other data can be used to analyze your user behavior.

What are your rights with regard to your data?
You have the right at any time to receive information about the origin, recipient and purpose of your stored personal data free of charge. You also have the right to request the correction, blocking or deletion of this data. For this purpose, as well as on other questions about data protection, you can contact us at any time at the address provided in the imprint.

You are also entitled to appeal to the relevant supervisory authority. You also have the right, in certain circumstances, to require the restriction of the processing of your personal data. Details can be found in the privacy policy under “Right to Restrict Processing”.

Third-party analysis tools and tools

When you visit our website, your browsing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programmes. Analysis of your surfing behaviour is usually anonymous; the surf behavior cannot be traced back to you. You can object to this analysis or prevent it by (not) using certain tools. Detailed information about these tools and your ability to object can be found in the following privacy policy.

General notes and mandatory information

Data protection

The operator of these sites, the Federal Association of Foreign Students (BAS), takes the protection of your personal data very seriously. We treat your personal data confidentially and according to data protection legislation and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This Privacy Statement explains what data we collect and what we use it for. It also explains how and for what purpose this happens.


When contacting the BAS (for instance, by contact form or e-mail), the user’s information is only collected, stored and used for the purpose of processing the request. We do not disclose this data to third parties. The legal basis for processing the data is our legitimate interest in answering your request in accordance with the clause 6 para. 1 lit. f GDPR.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) security gaps can exhibit. Complete protection of data from access by third parties is not always guaranteed.

Note on the responsible association

The responsible association for data processing on this website is:

Federal Association of Foreign Students (BAS) e.V.
c/o StEx University Ulm
Albert-Einstein-Allee 11
D-89081 Ulm

Phone: +49 176 2345 27 07

Responsible body is the natural or legal person who decides alone or together with others on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.). The Federation of Foreign Students is the responsible association for this website in terms of clause 4 para. 7 GDPR.

Your most important rights to privacy

You are entitled to rights for persons concerned, i.e. rights that you can exercise as a person affected on a case-by-case basis. They result from the GDPR:

  • Right to information (clause 15 GDPR): You have the right to free information about the personal data stored about you.
  • Right to rectify (clause 16 GDPR): If you think that incorrect data is being processed about you, you can request correction. Incomplete data must be completed taking into account the purpose of processing.
  • Right to erasure (clause 17 GDPR): You have the right to request that your data is deleted if there are certain reasons for deletion. This is particularly the case where that data is no longer necessary for the purpose for which it was originally collected or processed.
  • Right to object (clause 21 GDPR): If we process your personal data on the basis of our predominant legitimate interest as part of a balance of interests, you have the right to dispute against this processing at all times, for reasons arising from your particular situation, with effect for the future. If you exercise your right to object, we will in principle stop processing the affected data.
  • You are also entitled to other rights of the person concerned, in particular the right to restrict data processing, objection and data portability (in accordance with the specifications in clauses 12 – 23 GDPR).

To exercise your rights, please contact BAS under .

If you have any questions regarding the processing of your personal data by the BAS or concerning data protection, you can also contact us directly via the contact routes published in the imprint.

The right to complain to the competent supervisory authority

If you believe that the processing of your data is not permitted under data protection law, you can lodge a complaint with the competent supervisory authority. In the event of breaches of the GDPR, those affected are entitled to complain to a supervisory authority, in particular in the member state of your common residence, job or place of alleged breach. The complaint to the supervisory authority can be made informally. The right to appeal exists regardless of other administrative or judicial remedies.

Right to data portability

You have the right to get the data that we automatically process, which we process automatically on the basis of your consent or in the fulfillment of a contract, in a common, machine-readable format handed over to yourself or or to a third party. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.

TLS encryption

This page uses TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. An encrypted connection can be seen by the address bar of the browser switching from http:// to https://, and from the lock icon besides your address bar. As a result, the data you submit to us cannot be read by third parties. In addition, the manipulation of our page contents by unauthorized third parties is almost impossible.

Right to restrict processing

You have the right to demand that the processing of your personal data is restricted. For this purpose, you can contact us at any time through the address provided in the imprint. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the audit, you have the right to request that the processing of your personal data is restricted.
  • If the processing of your personal data is unlawfully done, you can request the restriction of the data processing instead of the deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data is restricted instead of deletion.
  • If you have handed in a contradiction by clause 21 para. 1 GDPR, a balance must be established between your interests and ours. As long as it is not yet decided whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from your storage – only processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

Data collection on our websites


Websites sometimes use so-called cookies. Cookies do no harm to your computer and contain no viruses. Cookies serve for making our offer user-friendly, effective and safer. In addition, they offer the website provider the opportunity to collect statistical data on website use and to analyse it to improve the offer. Cookies are small text files that are stored on your computer and that your browser stores. On the website of the BAS so-called “session cookies” are used. They will be automatically deleted at the end of your visit.

Other cookies will remain stored on your device unless you delete them. These cookies enable us to recognize your browser at your next visit. You can set your browser in such a way that you are informed about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, as well as enable the automatic deletion of cookies when closing the browser. With the deactivation of cookies, the functionality of this website may be restricted. Cookies required to perform the electronic communications process or providing certain functions you want are saved based on clause 6 paragraph 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. So far as other cookies (e.g. cookies for the analysis of your browsing behavior) are stored those are covered separately in this Privacy Statement.

More information you will find under: Cookie Policy

Access data

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • name of the retrieved website/file
  • browser type and version
  • operating system used by the user
  • referrer URL
  • date and time of server request
  • amount of data transferred
  • anonymised IP address

A combination of this data with other data sources is not made. The collection of this data is based on clause 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded.

BAS uses log data only for statistical analysis for the purpose of operation, safety and optimization of the offer. However, BAS reserves the right to check the log data retrospectively if there is a reasonable suspicion of unlawful use on the basis of concrete evidence.

Contact form

If you send us requests via contact form, your details from the request form, including the contact details provided there, will be stored for processing the request and in the event of follow-up requests with us. We do not share this data without your consent. The data entered into the contact form is therefore only based on your consent (clause 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do this, an informal message by e-mail to us is enough. The legality of the data processing processes carried out until the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose of data storage is omitted (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Request by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your request, including all the personal data (name, request), will be stored and processed with us for the purpose of processing your request. We do not share this data without your consent. The processing of this data is based on clause 6 para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (clause 6 para. 1 lit. (GDPR) and on our legitimate interests (clause 6 paragraph 1 lit. (GDPR) because we have a legitimate interest in the effective handling of the requests addressed to us.

The data you send to us via contact requests will remain with us unless you ask us to delete it, revoke your consent to storage or the purpose of storing the data is omitted (e.g. after your request has been dealt with in progress). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Comment feature on this website

In addition to your comment, the comment function on this page also provides information about the time of the comment, your e-mail address and, if you do not post anonymously, the username you have chosen.

Storing the IP address
Our comment function stores the IP addresses of users who write comments. Since we do not check comments on our site before unlocking, we need this data in order to be able to take action against the author in the event of violations of the law such as insults or propaganda.

Storage period of comments
The comments and the associated data (e.g. IP address) will be stored and remain on our website until the annotated content has been completely deleted or the comments need to be deleted for legal reasons (e.g. offensive comments).

Legal basis
The retention of the comments is based on your consent (clause 6 para. 1 lit. a GDPR). You can revoke any consent you give at any time. To do this, an informal message by e-mail to us is enough. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Contribution function on this website

If you submit your own content and image files through the contribution function of this website (if applicable), you comply with the publication and, if necessary, editorial revision. Furthermore, BAS reserves the right to use the published content (image and/or text) for publications and presentations. In addition, the terms and conditions for comments (see above) apply to publications of your own articles.

Social media

Our social media offerings in general

On some of our websites you will find links to Facebook fan pages, Twitter and other social media platforms. Facebook provides fan page operators with a platform where it is possible to analyze the usage behavior of logged-in and non-logged users. Detailed statistics are provided free of charge using the tool “Insights” (range analysis, analysis and report of the use of one or more websites and the behavior of their visitors). The statistics relate to authenticated users and the Facebook pages associated with them and are available for administrators with Facebook account (statistics on: Information about user gain, demographics, use and creation of content, user activity, age and gender, geographical data, singular/multiple page views, media consumption of video/audio/photo, log-outs). After exceeding a certain quantity of page impressions (calls), the qualified analysis of the usage is provided. This feature is currently unlockable and cannot be cancelled.

Use of social plugins

On our Facebook fan pages (profile pages on Facebook) and our websites you can find so-called “social plugins” such as the “like button” of the social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and plugins of WhatsApp and Twitter. If you visit a fan page or website that contains such a plugin, information will be transferred through the immediate connection of your browser to the servers of the respective provider and assigned to your user account. Transmission and storage takes place regardless of registration with these services. We have no influence on the amount of data transmitted, or for what purposes it is used.

For details on how Facebook and Twitter handle your data, as well as your rights and settings, please check out the privacy notices of the respective provider. For web browsers there are effective free add-ons that block some of the social media plugins.