Privacy Policy and Consent Form for the “Participation in the prize draw for first-semester backpacks 2026”

For what purposes will personal data be processed?

Personal data is collected to verify “first-semester” status and for further communication with the winners.

Who is responsible for data processing, and who can data subjects contact?

TUD Dresden University of Technology
Directorate 7, Marketing Projects
Frank Seidel
Nöthnitzer Straße 69, Room C.101
01187 Dresden
Email:
Phone: 0351 463-34288

TUD Dresden University of Technology
The Data Protection Officer
01062 Dresden
Email:
Phone: +49 (0) 351-463 32839
https://tu-dresden.de/datenschutz

What is the legal basis for the processing of personal data?

The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR (consent), meaning that the use of our services and your consent to the associated processing of your personal data are voluntary.

What personal data is processed?

The following personal data is processed:

• Email address,
• Last name,
• First name,
• Student ID number

How long is personal data stored?

The data will be deleted or destroyed on November 30, 2026. This does not affect the lawfulness of the processing based on consent until such consent is revoked.

Is personal data transferred to recipients? Who at TU Dresden has access to this data, and is data collected from third parties?

Unless otherwise required by law or unless you have expressly consented in individual cases, no personal data is transferred to third parties.

What rights do data subjects generally have?

• Voluntary Provision and Withdrawal of Consent Pursuant to Art. 7(3) GDPR
  The provision of personal data is voluntary. Consent to the processing of personal data may be withdrawn at any time pursuant to Article 7(3) of the GDPR, with the result that the personal data of the data subject will no longer be processed.
• Right of Access (Article 15 of the GDPR)
  Data subjects have the right to request information at any time regarding the data processed about them, as well as the potential recipients of such data. They are entitled to a response within one month of receipt of the request for information.
• Right to Rectification, Erasure, and Restriction (Articles 16–18 of the GDPR)
  Data subjects may at any time request that TU Dresden rectify or erase their personal data or restrict its processing.
• Right to Data Portability (Art. 20 GDPR)
  Data subjects may request that the data controller provide them with their personal data in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to another data controller, to the extent that this is possible.
• Data Protection Officer and Data Protection Supervisory Authority
  Data subjects may contact the Data Protection Officer at TU Dresden at any time, and may also contact the competent data protection supervisory authority in the event of a complaint pursuant to Article 77 of the GDPR. The competent supervisory authority for TU Dresden is:
  Saxon Data Protection and Transparency Commissioner
  Dr. Juliane Hundert
  Maternistraße 17
  01067 Dresden
  Email:
  Phone: +49 (0) 351 85471 101
  www.datenschutz.sachsen.de

To exercise your rights, simply send a written notice (email or letter) to the person in charge.