---
type: concept
title: "Data Processing Guidelines (Richtlinien zur Datenverarbeitung)"
tags: [compliance, data-protection, legal]
related: [ums, gdpr-compliance, it-konzept]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_rechenzentrum_information_ordnungen_und_richtlinien_richtli.md"]
---

# Data Processing Guidelines (Richtlinien zur Datenverarbeitung)

The **Richtlinien zur Datenverarbeitung** are the mandatory legal and procedural commitments that users of the [[universitatsrechenzentrum-urz]] must accept when requesting IT resources through the [[ums]].

## Core Obligations
When requesting resources (e.g., storage space on central file servers), the applicant assumes full responsibility for the legality of the data they store. The guidelines mandate:

1. **Written Documentation**: All required consents and permissions for the data being processed must be available in written form.
2. **Verification**: The user must be able to produce these written consents upon request by the URZ.
3. **Regulatory Adherence**: All personal data processing must comply with:
    - **EU-Datenschutz-Grundverordnung (DS-GVO)** (GDPR).
    - **Landesdatenschutzgesetz (DSG M-V)** (Regional data protection law for Mecklenburg-Vorpommern).

## Responsibility Shift
A critical aspect of these guidelines is the shift of liability. The [[universitatsrechenzentrum-urz]] provides the technical infrastructure, but the **applicant is solely responsible** for the data protection assessment (*datenschutzrechtliche Begutachtung*). The URZ does not conduct these assessments on behalf of the user.

## Relation to Other Frameworks
These guidelines serve as the operational "fine print" for the [[it-konzept]] and provide the specific enforcement mechanism for [[gdpr-compliance]] within the university's resource allocation process.