What personal data is processed and for what purposes?

• Last name, first name, degree program, e-mail address, institute/faculty: 
  • Information to be collected in advance
  • List of participants, certificates of participation (if requested), any organizational changes/waiting lists
  • Adapt workshop content, if necessary
  • Evaluation/feedback following the event
  • Transfer to the exclusion list in the event of non-attendance without prior cancellation

Additional items for events:

• TUD-internal billing of material costs, e.g. catering
• Provision of name badges
• If excursions are planned, forwarding information to any third parties for organization purposes as well as for material cost invoicing.

• CVs, cover letters, information relevant to career entry
  • Processing as part of the consultation with the data provider
• First and last name, gender, date of birth, country of birth, field of study and intended academic title (BA/MA/PhD)
  • Collection and processing on a voluntary basis for the purposes of consultation, application, implementation, and proper invoicing of funding projects

For cooperation with employers:

• First and last name, contact details, date of last contact, content of the last conversation
  • Specific information on cooperation methods in terms of recruiting and university marketing, as well as optimization of cooperation consultations.

Who is responsible for data processing, and to whom can data subjects turn?

TUD Dresden University of Technology
Career Service

Katharina Maier
01062 Dresden
Tel: +49 351 463 42401
Email:

TUD Dresden University of Technology
Data of Protection Officer

01062 Dresden
Tel: +49 351 463 32839
Email:
https://tu-dresden.de/datenschutz

Saxon Data Protection and Transparency Officer

Dr. Juliane Hundert
Devrientstrasse 5
01067 Dresden, Germany
Tel:  +49 351 85471-101
Email:
www.datenschutz.sachsen.de

What is the legal basis for the processing of personal data?

The legal basis for the processing of personal data is Art. 6 para. 1 letter a) GDPR (consent) – the use of the service and consent to the associated processing of your personal data are voluntary.

For how long is personal data stored?

Unless otherwise stated, personal data will be stored for up to 24 months following the event.

For the invoicing of costs, such as for catering, the first, and last names of participants are stored in accordance with the statutory retention periods.

In the case of funded projects, the storage period depends on the funding regulations stipulated by the funding body.

The data of employers' contact persons is stored for up to 8 years.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Will personal data be transferred to recipients? Who at TU Dresden has access to this data? Will data be stored by third parties?

At TU Dresden, personal data can be accessed in the following way:

• Last name, first name, degree program, email address, institute/faculty:

Career Service staff

• For excursions: First and last name, degree program of the participants:

Staff of the third party (company, public or non-profit organization, internal or external research institute) responsible for organizing the excursion.

For funded projects, the conditions stipulated by the funding body apply:

• If the European Commission (EC) is the third-party funding body, the respective funding agreement of the EU project as well as the data protection notices published on the EC's homepage - available at: https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/support/legalnotice (last accessed October 1, 2024, 4:00 pm) - have legal authority.
• If the German Academic Exchange Service (DAAD) is the third-party funding body, its data protection regulations apply: https://www.daad.de/de/datenschutzerklaerung/
• Personal data of employer representatives (first and last name, contact details, date of last contact, content of the last conversation):

Career Service staff

• It is important to bear in mind that data transmission, especially by email, via the internet is still largely not secure. It cannot be guaranteed that this data will be protected from access or falsification by unauthorized persons.
• NOTE: Contact by encrypted email (external senders only): https://securemail.tu-dresden.de
• Senders with an email address ending in tu-dresden.de should use the S/MIME certificates of the DFN-Verein for encryption.
• Your personal data will not be published.

What general rights do data subjects have?

• Voluntariness and withdrawal of consent according to Art. 7 Para. 3 GDPR
  The submission of personal data is voluntary. Consent to the processing of personal data may be withdrawn at any time pursuant to Art. 7 Para. 3 GDPR. The personal data of the person in question will no longer be processed.
• Right of access by the data subject (Art. 15 GDPR)
  Data subjects have the right to obtain information on the data processed concerning them, as well as possible recipients of such data, at any time. They are entitled to a reply within one month after the responsible party receives the request for information.
• Right to rectification, erasure, and restriction of processing (Art. 16–18 GDPR)
  Data subjects may request that TU Dresden rectify, erase or restrict the processing of their personal data at any time.

In this case, your personal data will be deleted within a reasonable time period, but at the latest after 4 weeks following your request. To do so, simply send an email stating this request to career.service@tu-dresden.de. If you choose to do this, however, participation in the event is not or no longer possible and your data will be erased. If the revocation is requested after the end of the event, your data will be erased unless there are legal reasons to the contrary.

• Right to data portability (Art. 20 GDPR)
  Data subjects can request that the responsible party transfer their personal data back to them in a machine-readable format. Alternatively, you can request the direct transmission of your personal data to a different responsible party, insofar as this is possible.
• Data Protection Officer and Supervisory Authority for Data Protection
  Data subjects can contact TU Dresden’s Data Protection Officer at any time and, in the case of a complaint pursuant to Art. 77 GDPR, a supervisory authority for data protection. The supervisory authority for TU Dresden is:
  Saxon Data Protection and Transparency Officer
  Frau Dr. Juliane Hundert
  Maternistraße 17
  01067 Dresden, Germany
  Email:
  Tel.: + 49 351 85471 10
  www.datenschutz.sachsen.de

To claim your rights, it is sufficient that you notify the responsible person in writing (email or letter).