---
type: concept
title: "Ordnung des Universitätsrechenzentrums"
tags: [regulation, legal, it-governance]
related: [zentraler-nutzeraccount, it-konzept, gdpr-compliance, data-privacy-compliance]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_rechenzentrum_information_ordnungen_und_richtlinien_ordnung.md"]
---

# Ordnung des Universitätsrechenzentrums

The **Ordnung des Universitätsrechenzentrums** is the formal statutory regulation that governs the use of the communication and data processing infrastructure at the Universität Greifswald. It provides the legal basis for the technical services implemented by the [[universitatsrechenzentrum-urz]].

## Core Principles

### Usage Permission (Nutzungserlaubnis)
The right to use URZ services is not absolute but is a granted permission tied to a [[zentraler-nutzeraccount]]. 
- **Purpose Limitation:** Use is restricted to university-related duties (research, teaching, administration).
- **Private Use:** Only "minor" private use is tolerated, provided it does not impact the primary purpose of the URZ or other users.

### Operational Supervision (Betriebsfachliche Aufsicht)
The URZ holds a mandate for the operational supervision of *all* IT systems within the university, regardless of whether the URZ operates them directly. This ensures a centralized standard for security and stability across the institution.

### Telecommunications and Data Secrecy
URZ staff are legally obligated to maintain the confidentiality of communications (Telekommunikations- und Datengeheimnis), ensuring that the infrastructure is used securely and privately.

## Legal Framework for Users

### Obligations
Users must adhere to strict security protocols, including:
- **Credential Security:** Immediate replacement of initial passwords and absolute secrecy of credentials.
- **Account Integrity:** Prohibition of account sharing or unauthorized access to others' data.
- **Legal Compliance:** Adherence to copyright laws and software license agreements.

### Consequences of Misuse
The regulation defines a tiered enforcement system:
1. **Temporary Restrictions:** Decided by the URZ Director for immediate threats or malfunctions.
2. **Permanent Exclusion:** Decided by the Rector via a formal administrative act (Bescheid) for severe or repeated violations.

## Data Protection and Liability

### Log Processing
The URZ is authorized to process protocol and procedure data for:
- System administration and resource planning.
- Security and the prevention of illegal use.
- Protection of user data.
This is conducted in accordance with [[gdpr-compliance]].

### Liability Gap
The regulation explicitly states that the university does not guarantee error-free operation or the prevention of data loss. This legal disclaimer reinforces the necessity for users to implement their own backup strategies, such as using [[restic]].
