How this portal handles your data

The SSP Goal Setting and Evaluation Portal is the system the Strategic Student Program uses to run an internship from application through goal-setting to the final evaluation and sign-off. Doing that means keeping a record about you.

These pages describe that record: what is in it, who can open it, how long it stays, and what happens when you ask for a copy or ask to be erased. Everything here was written by reading the source code of the running system, and stops where the code stops.

The pages

• Your dataWhat the portal records about you, who can see it, how long it keeps it, and how you get a copy or an erasure.
• CookiesThe three cookies this portal sets, all of them needed to sign you in — and why there is no consent banner.
• Companies involvedThe outside services this system actually uses, and what each of them handles.
• AccessibilityNo audit has been done, so no conformance is claimed. What exists today, the known gaps, and how to report a barrier.

What these pages are not, and what they cannot tell you

This is a description of a piece of software, written by the people who built it. It is not a legal document, and the program’s formal privacy documentation has not been issued yet. The following are missing on purpose, each for a reason:

Who the data controller is — the legal entity, its address, a data protection officer, an EU representative, or a supervisory authority to complain to

The application holds none of these. The fields exist in its internal record of processing and are deliberately empty, waiting for a human answer.

Terms of use, or an imprint

Those are legal documents. They belong to Siemens Legal and the program owner, and drafting them here would be inventing them.

Which country the servers are in

That depends on settings held in the hosting accounts, not in this code, so the honest answer is that this page cannot tell you.

The contracts behind the companies listed here — whether each has a signed processing agreement, or any certification

The application cannot see a contract. Only that the service is wired in.

Whether backup copies exist, where they are, or how long they last

Backups are not modelled anywhere in the code. Nothing on these pages should be read as a promise that a deletion has reached every copy.

Which specific people can see your record

That is computed live from who holds which role and which countries they cover. No fixed sentence would stay true; an administrator can see the current answer inside the portal.

Any conformance with an accessibility standard, or any statement of legal compliance

No audit and no legal review has been carried out. Claiming either would be the one thing these pages exist to avoid.

A page that guessed at any of these would read as authoritative and be wrong, which is worse than a page that says it does not know. If you need one of those answers, ask your program administrator — a person, not this software, has to give it to you.