Information on data processing for remote electronic examinations

The Catholic University of Eichstätt-Ingolstadt (KU) holds remote electronic examinations during the coronavirus - pandemic.
Participation in these remote examinations is voluntary. Alternatively, we also offer on-campus examinations, so that students may choose between the two different types of examination.

 

1. Purpose and scope of data processing

When participating in a remote exam instead of an on-campus examination, the KU will process your personal data in order to be able to conduct oral, practical or written remote examinations. Supervision during this type of examination is guaranteed by using video supervision. Students are therefore required to leave their cameras and microphones switched on during the entire examination. Video supervision is a means to prevent cheating and thus to ensure equal opportunities for all examinees. Supervision will be set up in such a way as to not restrict the protection of individuality and privacy of an examinee more than is necessary for the legitimate purpose of supervision.
We ask students to position themselves in their rooms in such a way, that if possible, no personal objects can be filmed via the camera and that no rights of third parties are impaired by the video supervision.

Supervisors will generally be members of staff of the University. In cases of remote examinations, where there are not enough supervisors, the software Inspera will be used to carry out an automated video supervision. We use this software as part of a pilote experiment and it will record examinees’ video and audio data during the examination.

Before the examination, every examinee shows a valid ID or passport for identification purposes. In the case of automated video supervision during remote examinations, a face recognition system will compare the face of an examinee with their ID in order to identify them. There will be no eye tracking.

If you choose to take a remote exam, for the duration of the examination, a lockdown browser will be installed on your device, restricting your access to other applications. However, the lockdown browser does not access any data on your device.

2. Legal basis for data processing

Any processing of your personal data for the purpose of remote examinations is based on Section 6, para. 1, lit. a of the Gesetz über den Kirchlichen Datenschutz (KDG) in conjunction with Section 4, para 1. and in conjunction with Sections 5, 6 and 7 of the Bayerische Fernprüfungserprobungsverordnung. Examinations can also be held in electronic formats according to Section 17, para. 1, sentence 2 APO (general examination regulations).

When examinees are filmed via automated video supervision during examinations, any processing of this data is based on the voluntary consent of the person concerned pursuant to Section 6, para. 1, lit. b KDG.

3. Recipient and duration of data storage

Your personal data will be stored for as long as is necessary for carrying out of the examination and for supervising it. Recordings of remote examinations will be deleted within 2 days after completion of the examination, as long as no signs of attempted cheating are detected during the recording. In cases where cheating is suspected, the recording will be deleted as soon as it is no longer needed for documenting the act of presumed cheating.

For remote examinations, the University uses Zoom or Inspera (for remote Klausuren). As data processing company they are the recipient of the transmitted data. The KU has signed agreements on data processing with Zoom and Inspera.

The following data are processed by Inspera: inscription number, last name, first name, log-in ID, e-mail address, ID card data, chat contents, login data, examination content, video and audio data, metadata, biometric data.

For information on data processing by Zoom, please see our Datenschutzhinweise zur Nutzung von Zoom on the pages of the KU Computer Center.

If applicable, other exam participants may also take note of your video and audio data during the exam (e.g. event participants during presentations, etc.). Recordings during remote examinations are viewed by the examiners and, if necessary, by additional persons called in to consult on an examination.

4. Data subject rights

You can request information from the KU in accordance with Section 17 KDG about which personal data regarding your person is being processed by the KU and request correction/completion in accordance with Section 18 KDG if the data is incorrect or incomplete. You can also request deletion in accordance with Section 19 KDG or the restriction of processing of your personal data in accordance with Section 20 KDG or file an objection against certain types of data processing in accordance with Section 23 KDG. You also have the right to data transferability in accordance with Section 22 KDG. If you make use of the mentioned rights, the responsible person will verify whether legal prerequisites are fulfilled.

Furthermore, you have the right to complain to the data protection supervisory authority (joint data protection supervisory authority of the Bavarian (arch)dioceses, Kapellenstr. 4, 80333 Munich).

Your personal data will not be processed for the purpose of automated decision making (including profiling).

If the KU is processing your personal data on the basis of your consent, you can revoke your consent at any time by submitting a corresponding declaration to the responsible data processor. Processing of your personal data will then be inadmissible for the future. However, this shall not affect the lawfulness of the processing effected on the basis of the initial consent up to the point in time of the revocation.

Responsible person for data processing:

Catholic University of Eichstätt-Ingolstadt
represented by the president
Ostenstraße 26, 85072 Eichstätt
Phone: +49-8421-93-0
info(at)ku.de

 

KU data protection officer:

SK-Consulting Group GmbH
Herr Georg Möller
Osterweg 2
32549 Bad Oeynhausen, Germany Phone: +49 8421/49064-30
datenschutz(at)SK-consulting.com