---
type: source
title: "Data Protection Information for the Central User Account"
tags: [privacy, gdpr, user-accounts]
related: [zentraler-nutzeraccount, username-change-process, gdpr-compliance]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_zentraler_nutzeraccount_datenschutz.md"]
---

# Data Protection Information for the Central User Account

This source provides the legal and data protection framework for the management of central user accounts at the Universität Greifswald, as managed by the Universitätsrechenzentrum (URZ).

## Key Provisions

### Legal Basis for Processing
- **General Administration**: The processing of personal data for the creation and administration of accounts is based on **Art. 6(1)(e) GDPR** in conjunction with **§ 7 LHG M-V**.
- **Username Changes**: Because changing a username may involve processing sensitive data, it is based exclusively on explicit consent under **Art. 6(1)(a) GDPR** and **Art. 9(2)(a) GDPR**.

### Data Collection
- **Automated**: For eligible members, data is automatically retrieved from the URZ's [[identity-management-system]].
- **Manual**: Applicants must provide:
    - First and last name
    - Birth date
    - Institution/Department
    - Gender (used solely for salutation)
    - Academic title (optional)
    - Emergency email address (optional, for password resets)

### Special Cases: Username Changes
Usernames are generally fixed. However, exceptions are granted for specific legal or personal situations, including:
- Contentious divorces.
- Name changes under the **Self-Determination Act** (Selbstbestimmungsgesetz).
- Name changes based on a **dgti supplement ID**.

These requests are handled via the URZ ticket system and may involve **Special Categories of Personal Data** (Art. 9 GDPR).

### Data Retention and Deletion
Data is processed until:
1. The account is deleted following the expiration of the [[karenzzeit]] (grace period) after eligibility ends.
2. The user voluntarily requests account deletion.
3. Consent for processing is withdrawn.

## Responsible Parties
- **Controller**: Universität Greifswald, represented by Rector Prof. Dr. Katharina Riedel.
- **Data Protection Officer**: Provided by SIS - Schweriner IT- und Servicegesellschaft mbH (Contact: Dominique Kandzia).
- **Supervisory Authority**: Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern.
- **Processors**: System administrators of the URZ and, for students/doctoral candidates, administrators of the **E-Verwaltung**.
