Data Protection Declaration

This website is offered by („operator“). For purposes of legibility website visitors are referred to as „users“.

The server of the operator is hosted at noris network AG in Munich.

Log data

When accessing websites the user's browser sends technical data to the operator. The operator logs the following data: date and time of the call, address of the visited page, IP of the user and browser recognition. This log information have no direct connection to personal data and are not linked to personal information gathered elsewhere on the site. The data is used to ensure operational reliability and data security of the server. The log data will be kept confidential and in no case be transmitted to any third party.

Measurements provided by INFOnline GmbH >


Data Protection Declaration for the App

The App is provided by xStudy SE (hereinafter referred to as „Provider“).

Version 1.12.0, December 4, 2018

Our Data Protection Statement will refer to our users collectively as „User“.

In the following the Provider informs the App User of the nature, scope and purpose of collecting, processing and use of personalized data. Users can access the present data protection statement as well as store it/print it out locally at any time inside the App or on the Internet page

The server and the database for the App are hosted by noris network AG in Munich, Germany.

The Provider makes the following data available in the form of course catalogues (when present):

General Data
  • University
  • Curriculum
  • Academic degree
  • Total ECTS points
  • Study module:
    • Module title and abbreviation
    • Semesters
    • ECTS items
    • Module type (mandatory/elective subject)
    • Weighting

In addition to these general data, the following data are also stored:

User-Specific Information
  • Target grade
  • Passed (Yes/No)
  • Grade(s) with weighting

The User expressly declares his or her consent to the use of the general data and user-specific information to improve and update the functionality of the App and in particular also to create and update course catalogues. This applies without restriction above and beyond the termination of the contractual relationship.

The following information is read from the User's device so that the Provider is able to give support to the User:

Device-Specific and Operating System-Specific Data
  • Device model
  • Device OS version
  • Device token / Registration ID
  • Country
  • Language
  • Date identifiers for linking to calendar entries


By activating the backup functionality the user expressly indicates his or her consent to the additional storage by the Provider on Provider's servers of the following User's data:

Personal Information
  • E-mail
  • Notes
  • Grade(s)with weighting

Transcript of Records

If the User is using this function, he gives the permisson to the provider for saving the received data temporarily for the purpose of creating a PDF document. This consent also applies expressly in the case of use of optional information:

General Data
  • University
  • Curriculum
  • Academic degree
  • Total ECTS points
  • Study module:
    • Module title and abbreviation
    • Semesters
    • ECTS items
    • Module type (mandatory/elective subject)
User-Specific Information
  • Previous modules
  • Passed (Yes/No)
Personal information (optional)
  • Grade(s)
  • Picture
  • Name
  • Phone Number
  • Email
  • Upcoming modules

Sharing the course plan

By using this function the User expressly agrees that the Provider may publish or make available to other users the general data of the course catalogues created / modified by the User. This consent also applies expressly in the case of use of optional information:

Personal Information
  • Name
  • Description
  • Notes

Your Career Module

This functionality is only available when the function „Your Career“ has been activated. Only then is the User presented with appropriate study and job opportunities from universities and companies.

By activating „Your Career“ the User expressly agrees to the evaluation of User's general data and user-specific information. In case the User's course profile matches the requirement profile of the university / company, the User will be informed within the App and when appropriate also by push message regarding study and job opportunities at the university or company in question. Here contact data for the university and/or the company are also transmitted.

The User is then free to make use of this information and e.g. to enroll in the curriculum/course offered by the university, to accept the job opportunity at the company or to contact the university/company e.g. for additional information.

Deletion of Personal Data / Termination

By terminating/deleting the account of the User, the User's personal and user-specific information as well as the User's device-specific data are permanently deleted at the User's request. This request must be submitted by e-mail to and must clearly express the request for deletion. The general data provided by the User also remain stored in the database of the provider after termination and can be used by the Provider freely and without restriction for the purpose of improving the App and its functionality.

Measurements provided by INFOnline GmbH

Our application uses the measurement procedure (“SZMnG”) provided by INFOnline GmbH to measure statistical parameters relating to the use of our sites. The aim of the usage measurement is to statistically measure the use intensity, number of usage instances and users of our application and their surfing behaviour on the basis of a standardised procedure to allow values to be collected that are comparable across the market.

For all sites that are members of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. [German Audit Bureau of Circulation] or that participate in online research carried out by the Arbeitsgemeinschaft Online-Forschung e.V. [German Online Research Working Group] (AGOF), the user metrics will be processed further on a regular basis by the AGOF and the Working Group for Media Analysis (agma) and will be published under the performance indicator “Unique User” as well as by the IVW with the performance indicators “Page Impression” and “Visits”. This reach and statistics can be accessed on their respective web pages.

1. Legal Basis for Processing

The measurement by INFOnline GmbH using the SZMnG measurement procedure is carried out, upon legitimate interest, under Art. 6 Para.1 lit. f) of the GDPR.

The purpose of processing personal data is to gain statistics in order to create user categories. We use the statistics to understand and substantiate the use of our sites. The user categories form the basis for an interest-oriented alignment of advertising material and advertising measures. A usage measurement which guarantees comparability with competitors in the market is essential for the marketing of this application. Our legitimate interest stems from the economic usability of our findings that we get from the statistics, user categories and the market value of our application, as well as the direct comparison with third-party applications, which can be determined from the statistics.

In addition, we have a legitimate interest in making the pseudonymised data of INFOnline, AGOF and IVW available for the purposes of market research (AGOF, agma) and for statistical purposes (IVW, INFOnline). Furthermore, we have a legitimate interest in providing INFOnline’s pseudonymised data for the further development and provision of interest-oriented advertising material.

2. Types of Data

INFOnline GmbH collects the following data which, according to GDPR, can be linked to a particular person:

  • IP address: On the Internet, each device requires a unique address to transmit information: the IP address. Because of how the Internet functions, it is technically necessary for the IP address to be stored, at least for a short period. IP addresses are truncated and anonymised before any processing. No IP addresses that have not been truncated are saved or processed.
  • A device identifier: To allow devices to be recognised, the reach measurement uses the terminal’s unique identifiers or an anonymous signature that is compiled from diverse information from your device that is transmitted automatically. Under certain circumstances, it is possible to measure the data and to subsequently assign it to the respective identifier by accessing other applications that also use the measuring method (“SZMnG”) of INFOnline GmbH. The following unique device identifiers can be transmitted to INFOnline GmbH as hash:
    • Advertising identifier
    • Installation ID
    • Android ID
    • Vendor ID

3. Data Use

INFOnline GmbH’s measurement process, which is posted on this application, determines usage data. This is done to collect the performance indicators of page impressions, visits and clients, and to provide additional performance indicators (e.g. qualified clients). In addition, the measured data is used as follows:

  • Geolocalisation (web page access being linked to the access location) is performed exclusively on the basis of the anonymised IP addresses and only to the geographical level of federal state/region. The geographical information thus collected cannot under any circumstances be used to determine a user’s specific place of residence.
  • The usage data from a technical client (e.g. from a device’s browser) are amalgamated from all applications and saved in a database. This information is technically evaluated for age and gender and handed over to the AGOF service providers for further processing. In the course of the AGOF study, random samples for social characteristics are taken for technical evaluation, which are organised into the following categories: Age, Gender, Nationality, Occupation, Marital Status, General Household Information, Household Income, Place of Residence, Internet Use, Online Interests, Place of Use, Type of User.

4. Data Storage Time

The full IP address will not be saved by INFOnline GmbH. The truncated IP address will be saved for a maximum of 60 days. The usage data in connection with the unique identifier is saved for a maximum of 6 months.

5. Data Disclosure

Neither the IP address nor the truncated IP address will be disclosed. The data with client IDs will be disclosed to the following AGOF service providers for the creation of the AGOF study:

6. Rights of the Data Subject

The data subject has the following rights:

  • Right of access (Art.15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art.20 GDPR)

For inquiries related to this, please consult Please note: For questions such as these, we must ensure that the question actually involves the data subject.

Right to Object
If you would rather not take part in the measurement, you can opt out within the app.

The data subject has the right to submit a complaint to a data protection authority.

Further information on data protection in the measurement procedure can be found on the website of INFOnline GmbH (the company that operates the measurement procedure), AGOF’s web page concerning data protection and the IVW’s data protection web page.