© Uni MS IT

Privacy Policy for the Use of "Mattermost"

The tool "Mattermost" is intended to serve as a means of communication in the context of studies, teaching, research and administration. In the following, we would like to provide you with information on the processing of personal data in connection with the use of "Mattermost".

1. Contact Details of the Responsible Controller

The responsible controller as defined in the EU General Data Protection Regulation (GDPR) is:

University of Münster
represented by its Rector, Prof Dr Johannes Wessels,
Schlossplatz 2, D-48149 Münster
Tel.: + 49 251 83-0
E-mail: verwaltung@uni-muenster.de

2. Name and Address of the Data Protection Officer

The data protection officer appointed by the responsible controller is:

Nina Meyer-Pachur
Schlossplatz 2, D-48149 Münster
Tel.: + 49 251 83-22446
E-mail: Datenschutz@uni-muenster.de

3. Data Processing during the Use of "Mattermost"

Scope of Data Processing
If you use the "Mattermost" service provided by Münster University to conduct chat communication, we process and store the following data from you:

  1. User data: account name, first name, last name, e-mail address, profile picture (optional)
  2. Communication data

Purpose of Data Processing
The purpose of processing your personal data is to make "Mattermost" available to you as a tool for carrying out chat communication in the context of studies, teaching, research and administration.

Legal Basis for Processing Personal Data
The legal basis for the processing is the legitimate interest according to Art. 6 (1 f) GDPR. 

Other Recipients of Your Personal Data
The Mattermost service uses push notifications to forward chat messages to mobile devices. These notifications are systemically routed via notification servers of the respective service provider and could be viewed by them. Involved providers are 'Mattermost Inc.' (via MPNS), 'Apple Inc.' (via APNS) and 'Google LLC' (via FCM). Personal data that may be visible in these notifications are the user ID (account name) and the display name (first and last name).

Duration of Storage of Personal Data
If a member leaves Münster University, the Mattermost account is only deactivated and personal data is only partially removed. Account name, display name and the associated chat messages are retained. Only if none of the participant's chat messages can be accessed by other communication partners, i.e. if deletion no longer destroys active communication lines, the account and its associated data will be removed from the system.

If a participant has the explicit wish to have his data removed from the chat system when he*she leaves Münster University, this is possible.

4. Your Rights as a Data Subject

You have a right of access to your personal data processed by Münster University (Art. 15 GDPR) at any time, a right of rectification of your personal data (Art. 16 GDPR), a right of deletion (Art. 17 GDPR), a right to limit processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR) and, if processing is based on your consent, a right to withdraw your consent (Art. 7 (3) GDPR).

You also have the right to make a complaint to a supervisory authority (Art. 77 GDPR). This can be done, for example, by contacting the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, D-40102 Düsseldorf, tel.: +49 211/38424-0, e-mail: poststelle@ldi.nrw.de.