The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Uhland-Gymnasium Tübingen
represented by the school management, OStD Dr. A. Petrowski
Uhlandstraße 24, 72072 Tübingen
Phone: (07071) 204 1207
E-Mail: poststelle@ug-tuebingen.schule
The school authority is the Universitätsstadt Tübingen, Amt für Familie, Schule, Sport und Soziales, Bei der Fruchtschranne 1, 72015 Tübingen.
Ms Petra Pyschik
E-Mail: datenschutz-schulen@rpt.bwl.de
This website (gts-ug.de) is used for the online registration for the extracurricular activities programme (GTS) and the clubs (AGs) at the Uhland-Gymnasium Tübingen, as well as for the subsequent administration of these registrations by the school and the respective club supervisors.
When filling out the registration form, the following data of the child and/or the parents/guardians is collected and stored in our database:
| Data | Purpose |
|---|---|
| First and last name, class | unambiguous assignment of the registration |
| Date of birth | organisational assignment (e.g. age groups) |
| Email address, phone number of the parents/guardians | follow-up questions about the registration, reachability if needed |
| Selected clubs / timetable choices | assignment to the chosen clubs |
| Participation in lunchtime care ("Circus Maximus") | planning of care capacity |
| Optional notes field | additional notes from the parents/guardians to the school |
| IP address when submitting the form | technical safeguard against misuse (e.g. duplicate or automated registrations) |
For club supervisors, the attendance of children at the respective club sessions is additionally documented, along with an optional notes field for the session.
The processing takes place in order to carry out a task in the public interest that has been assigned to the school as a public body (Art. 6(1)(e) GDPR), in conjunction with the school-law regulations of the state of Baden-Württemberg on extracurricular activities care. Information voluntarily provided via the notes field is processed on the basis of implied consent (Art. 6(1)(a) GDPR).
Within the school, only authorised members of the school administration have full access to the registration data. Club supervisors receive access, via their own password-protected login, only to the children registered in the club they lead - not to the entire registration list. Teachers receive access, via a shared password-protected teacher login, to the participant lists of all courses (name, class, contact details) and can add or remove children from a course there. Data is not passed on to any other third parties or external providers (e.g. advertising or analytics services).
This website is hosted by Strato AG (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with Strato.
Registration data is deleted no later than one year after the end of the respective school year, unless a longer statutory retention period applies. The school can also manually delete registration data earlier via the admin area (e.g. at the change of school year).
This website uses technically necessary cookies: a session cookie (PHPSESSID), which is required for logging in to the admin area or the club-supervisor area and for protection against cross-site request forgery (CSRF), and a cookie (gts_sprache) which, when the language switcher is used, stores your chosen display language for one year. No tracking, analytics, or advertising is used; no third-party cookies are embedded. Under § 25(2) no. 2 TDDDG (formerly TTDSG), no separate consent is required for these technically necessary cookies.
No external fonts, analytics, or map services are embedded; all content is served from our own server.
Access to the admin area and the club-supervisor area is password-protected. Club-supervisor passwords are stored exclusively in encrypted (hashed) form. After several failed login attempts, an account is temporarily locked. Transmission should generally take place encrypted via HTTPS.
Data subjects have the following rights under the GDPR:
| Right | Legal basis |
|---|---|
| Access to the processed data | Art. 15 DSGVO |
| Rectification of inaccurate data | Art. 16 DSGVO |
| Erasure ("right to be forgotten") | Art. 17 DSGVO |
| Restriction of processing | Art. 18 DSGVO |
| Data portability | Art. 20 DSGVO |
| Objection to processing | Art. 21 DSGVO |
To exercise these rights, an informal message to the school management named in section 1 is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI)
Heilbronner Straße 35, 70191 Stuttgart
Postfach 10 29 32, 70025 Stuttgart
Phone: 0711 / 61 55 41– 0
E-Mail: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
Last updated: 10.09.2026