Data protection declaration for the processing of personal data as part of the ideas management process on the TUD Impuls ideas platform
For what purpose will personal data be processed?
The TUD Impuls ideas platform serves the exchange of ideas and the communication between members of TU Dresden as part of an ideas management process. The following functions are made possible with the help of personal data:
- Authentication of TUD members accessing the ideas platform
- License management
- Communication between users
- Communication between users and the ideas platform
- Notifying users about activities on the ideas platform by email
- Profile management and individualization of notifications by the user
- Allocation of user and comment
- Allocation of user roles, e.g. expert
- Submission, further development / processing, evaluation and implementation of ideas
Who is responsible for data processing and to whom can data subjects turn?
TUD Dresden University of Technology
Communication Manager
Mr. Johannes Bernhardt
Tel.: +49 351 463-40843
Email:
Data Protection Officer
Mr. Jens Syckor
01062 Dresden, Germany
Tel.: +49 351 463 32839
Email:
What is the legal basis for the processing of personal data?
The legal basis for processing of personal data for the above-mentioned purposes for those submitting ideas is Art. 6 para. 1 subpara. 1 lit. a. GDPR (consent), for coordinators and specialists, § 11 para. 1 Saxon Data Protection Implementation Act (SächsDSDG).
What personal data will be processed?
The following personal data will be processed:
- User ID
- First name
- Last name
- Position
- Status
- Organizational Unit
- Profile picture
- University email address
- University telephone number
How long is personal data processed/stored?
Personal data will be deleted if consent is revoked, or at the latest 12 months after leaving TU Dresden.
Will personal data be transferred to third parties?
TU Dresden has appointed Innolytics AG to operate the ideas platform.
What general rights do data subjects have?
Voluntariness and withdrawal (Art. 7 para. 3 GDPR)
The provision of personal data by those submitting ideas is voluntary. You can refuse or withdraw your consent at any time without stating a reason to the person responsible for the data. Your personal data will then not be processed further. The withdrawal shall not affect the lawfulness of the processing that took place on the basis of the consent given up until the withdrawal.
Right of access to personal data (Art. 15 GDPR)
You have the right to obtain information on the data processed concerning your person, as well as the possible recipients of this data, at any time. You are entitled to a reply within one month after the responsible party receives the request for information.
Right to rectification, erasure and restriction (Art. 16–18 GDPR)
You may request that TU Dresden correct or erase your personal data and/or restrict its processing at any time.
Right to data portability (Art. 20 GDPR)
You may request that the responsible party send you your personal data in a machine-readable form. Alternatively, you can request the direct transfer of your personal data to a different responsible party, insofar as this is possible.
Right to lodge a complaint (Art. 77 GDPR)
You can contact TU Dresden's Data Protection Officer (see above) at any time and, in the case of a complaint pursuant to Art. 77 GDPR, the supervisory authority for data protection.
The supervisory authority for TU Dresden is:
Saxon Data Protection and Transparency Officer
Dr. Juliane Hundert
Devrientstraße 5
01067 Dresden, Germany
Tel.: +49 351 85471 101
Email:
Please note: To claim your rights, it is sufficient that you notify the responsible office named above in writing (letter or email). However, the rights can only be exercised if the processed data allows for the identification of your person.