see also: IuK-Rahmendienstvereinbarung (PDF) (German only)

Data mirror

A complete extract of the personal data stored in the IDM of an individual person ("data mirror") with information on the origin of this data can be accessed digitally by each individual after personal registration via the IDM Self Services. When a kiz account is set up and personal data is stored in the IDM for the first time, everyone receives a so-called account sheet that refers to the data mirror and the use of the Self Services to inform about changes to the stored data.

Processing forms and uses

(Excerpt from the VerfVz)

Identity management (IDM) forms the basic infrastructure for managing the authorisations that people need to access IT-based resources at the university.

The IDM obtains its information mainly automatically from the administrative systems for students and employees of the University of Ulm and the employees of the University Hospital Ulm (source systems) and creates accounts in target systems on the basis of predefined authorisation schemes which enable access to services. The data flow from the source systems is based on a push model, i.e. there is no external access to the source systems.

The IDM thus implements a largely automated, legally secure administration of the University's identities that operates according to the principle of data economy. Only authorised persons are granted access to licensed content/software and identities, and data that is no longer required is deleted promptly.

Via a web frontend, numerous self-service functions can be used depending on the individual role or official activity (e.g. changing passwords, booking services for use).

Type of the personal data

The record of a person is in detail:

• Matriculation number and/or personnel number(s)
• First name
• Call name (at the request of the person concerned)
• Surname
• Date of birth
• Title (correct form of address)
• Gender (correct form of address)
• Username (generated by the IDM)
• Mail address (generated by IDM)
• Nationality (for authorisations that may be restricted by the Wassenaar Arrangement (export control))
• Scientific employees; flag yes/no, due to licence use

For students additionally:

• Phone
• Address
• Study section
• Semester of study
• University semester

Use of data

• Computing clusters for individual research areas at the state universities
• Library system
• Mail
• LDAP (UNIX)
• WLAN
• Active Directory
• IDP (Shibboleth)
• Print services
• Software Download
• ETB
• VPN