Privacy Policy for the Dresden Children's University Regarding the Conduct of Online Events
Participation in the Dresden Children’s University and the associated consent to the processing of personal data is voluntary!
1. For what purposes will personal data be processed?
The Dresden Children’s University is a joint project of the Deutsches Hygiene-Museum Dresden (DHMD, Lingnerplatz 1, 01069 Dresden) and TU Dresden. As part of the Dresden Children’s University, lectures are offered for children between the ages of eight and twelve.
Personal data is processed for the purpose of conducting events as part of the Dresden Children’s University, as well as for sending materials and information by mail or digitally (e.g., registration confirmation, student ID, certificate of participation, and links for the livestream).
2. Who is responsible for data processing, and who can data subjects contact?
TUD Dresden University of Technology
Directorate 9: University Culture
Dresden Children’s University
Elisabeth Krollpfeiffer
01062 Dresden
Email:
Phone: 0351 463-32485
TUD Dresden University of Technology
Data Protection Officer
Jens Syckor
01062 Dresden
Email:
Phone: 0351 463-32839
3. What is the legal basis for the processing of personal data?
The legal basis for data processing for the above-mentioned purpose is Article 6(1)(a) of the GDPR (consent). In this context, the transfer of data to the United States is based on Article 49(1)(a) of the GDPR.
Important Note: As part of the registration process, you must review our Privacy Policy and provide your consent to it. If you do not agree to our Privacy Policy, we unfortunately cannot process your registration.
4. What personal data is processed?
The following personal data is processed:
- The child’s first and last name
- Contact information (valid email address, current mailing address, phone number)
- Date of birth (for verification of participation only)
- Device identification and traffic data
- Chat data
After registration, you will receive documents for the upcoming semester of the Dresden Children’s University by mail, as well as a link via email to participate in the livestream lectures.
Note: When using the Zoom video conferencing service, usage data generated during the use of Zoom—such as the IP address or recordings of user behavior (user tracking) etc., may be collected and further processed in third countries where data protection standards are not adequate—that is, countries outside the European Union and countries without an adequacy decision pursuant to Article 45(3) of the GDPR—or transferred between or to these countries. In such cases, it cannot be guaranteed, in particular, that:
- an adequate level of data protection exists in these third countries,
- the provisions of the GDPR and other relevant data protection regulations applicable in the European Union and in countries with an adequacy decision are complied with in every case,
- disclosure to third parties—particularly in these third countries—will not occur, and
- the rights of data subjects can be enforced in every case.
Your consent expressly covers these circumstances regarding the processing of personal data, if applicable.
5. Is personal data transferred to third parties?
Since the Dresden Children’s University is a joint project of the DHMD and TU Dresden, the DHMD and TU Dresden exchange the data provided during registration for the purpose of organizing and conducting the Dresden Children’s University. The contact person at the DHMD is the Science and Events Department.
As a result of using the Zoom software, data is transferred to a third country (the United States). Based on current case law, this transfer entails risks for the data subjects.
6. How long will the data be processed/stored?
The data collected allows for the identification of specific individuals. Personal data will be deleted no later than two months after the last lecture of the respective semester. Please note the information provided in section 4.
7. Is personal data published?
Neither the DHMD nor TU Dresden will publish the data of participating children or your data. If the video conferencing service is not used under a pseudonym, other video conference participants may be able to see your name or that of your child and associate the comments with you.
8. What rights do data subjects generally have?
To exercise these rights, simply send a written notice (letter or email) to the data controllers (TU Dresden, Directorate University Culture, Dresden Children’s University, 01062 Dresden, email: ). Please note, however, the information provided in section four.
- Voluntary Participation and Withdrawal of Consent Pursuant to Art. 7(3) GDPR
The provision of personal data is voluntary. You will not suffer any disadvantages as a result of not participating or withdrawing your consent. Consent to the processing of personal data may be revoked at any time pursuant to Article 7(3) of the GDPR, with the result that the personal data of the data subject will no longer be processed. The lawfulness of the processing carried out on the basis of consent up until the time of revocation remains unaffected by this. - Right of Access (Article 15 of the GDPR)
Data subjects have the right to request information at any time regarding the personal data processed about them, as well as the potential recipients of such data. You are entitled to receive a response within one month of receipt of the request for information. Please note, however, the information provided in section four. - Right to Rectification, Erasure, and Restriction (Art. 16–18 GDPR)
Data subjects may at any time request that TU Dresden rectify or erase their personal data or restrict its processing. Please note, however, the information provided in section four. - Right to Data Portability (Art. 20 GDPR)
Data subjects may request that the data controllers provide them with their personal data in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to other data controllers, to the extent that this is possible. Please note, however, the information provided in section four. - Right to Lodge a Complaint (Art. 77 GDPR)
Data subjects may at any time file a complaint pursuant to Art. 77 GDPR with the competent data protection supervisory authority. The competent supervisory authority is: Saxon Data Protection Officer, P.O. Box 11 01 32, 01330 Dresden, Tel.: 0351 85471-101, Email: