---
type: concept
title: Data Processing Guidelines
tags: [legal, compliance, data-protection]
related: [gdpr-compliance, ressourcenverwaltung, ums]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_rechenzentrum_information_ordnungen_und_richtlinien_richtli.md"]
---

# Data Processing Guidelines

The **Data Processing Guidelines** are the formal rules governing the use of IT resources provided by the [[universitatsrechenzentrum-urz]]. These guidelines shift the legal burden of compliance from the infrastructure provider to the individual user.

## Legal Responsibility
The URZ provides the technical infrastructure, but the user (the applicant) is solely responsible for the legality of the data stored and processed. This includes:
- Ensuring all necessary **written consents** and permits are in place.
- Providing proof of these consents upon request.
- Conducting the required **data protection assessments** (*datenschutzrechtliche Begutachtung*) for any personal data processing.

## Regulatory Framework
All data processing activities must comply with:
- **EU-DS-GVO (GDPR)**: The overarching European regulation for data protection.
- **DSG M-V**: The regional data protection law of Mecklenburg-Vorpommern.

## Integration with Resource Management
These guidelines serve as the legal "fine print" for the [[ressource-beantragen]] process. While the [[ums]] handles the technical request for a resource, the act of applying constitutes a commitment by the user to follow these data processing guidelines.
