---
type: source
title: Nextcloud Data Protection Information
tags: [nextcloud, data-protection, gdpr, urz, privacy]
related: [nextcloud, gdpr-compliance, universitatsrechenzentrum-urz, zentraler-nutzeraccount, nextcloud-datenschutz]
created: 2026-07-01
updated: 2026-07-01
authors: [Universitätsrechenzentrum Greifswald]
year: 2026
url: "https://rz.uni-greifswald.de/dienste/webdienste/nextcloud/datenschutz"
venue: "Universität Greifswald"
sources: ["output/rz_uni_greifswald_de_dienste_webdienste_nextcloud_datenschutz.md"]
---

# Nextcloud Data Protection Information

This source provides the official data protection disclosure and privacy framework for the Nextcloud service provided by the Universitätsrechenzentrum (URZ) at the Universität Greifswald.

## Purpose and Governance

### Purpose
The service is provided for the purpose of exchanging and collaboratively editing data.

### Responsibility and Oversight
- **Responsible Entity:** Universität Greifswald, represented by Rector Prof. Dr. Katharina Riedel.
- **Data Protection Officer:** Dominique Kandzia (via SIS – Schweriner IT- und Servicegesellschaft mbH).
- **Supervisory Authority:** Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern.

## Data Collection and Processing

### Collected Data
The service collects the following personal data:
- **Technical Logs:** IP addresses.
- **User Identity:** Full name (first name, last name), email address, and profile picture (if provided).
- **Usage Data:** Storage quota usage and any data uploaded by the user to the system.

### Legal Framework
The processing of data is based on:
- **GDPR:** Art. 6 Abs. 1 lit. e DSGVO / Art. 6(1)(e) GDPR (processing for a task carried out in the public interest).
- **Institutional Regulations:** 
    - § 6 Abs. 2 of the Data Protection Statute (Datenschutzsatzung) / Data Protection Statutes (regarding user identification and operation of teaching/learning environments).
    - § 8 Abs. 6 of the URZ Ordinance (URZ-Ordnung) / URZ Regulations (regarding processing of traffic and connection data).

## Data Retention and Sharing

### Retention and Deletion
- **Technical Logs:** IP addresses are deleted after a maximum of seven days.
- **User Data:** Deleted automatically when the user's account is removed from the university's central account management ([[zentraler-nutzeraccount]]).

### Third-Party Sharing
The URZ explicitly states that user data is **not passed on to third parties**.

## User Rights
Users are granted rights under the GDPR guidelines, including:
- Right to free information regarding stored personal data.
- Right to correction, restriction of processing, and deletion.
- Right to data portability.
- Right to object to processing (specifically mentioned under Art. 6(1)(e) and (f) GDPR in the newly generated version).