For which purposes shall personal data be processed?
The personal data provided will be processed exclusively for the preparation, implementation and follow-up of the events within the framework of the "Diversity Days 2023 / Social & Sustainable: Diversity is the first step" as well as any existing verification purposes. These are particularly justified in the accounting towards the funding body....

Who is responsible for data processing and whom can data subjects contact?
Dresden University of Technology
01062 Dresden

Contact persons:
Dr. Sylvi Bianchin
Department 9.3 Diversity Management
Mommsenstr. 15, Room 7-205
01069 Dresden
Phone: +49 351 463-39759
E-mail:

Dresden University of Technology
The Data Protection Officer
Mr. Jens Syckor
01062 Dresden
Phone: +49 351 463-32839
E-Mail:

What is the legal basis for processing personal data?
Of course, participation in the event is voluntary. If you decide to participate, your personal data will be processed on the basis of Art. 6 para. 1 lit. e) DSGVO (performance of duties) in conjunction with § 5 para. 2 no. 11 and no. 12 SächsHSFG (duties of universities) and § 3 SächDSDG (permissibility of processing personal data) as well as Art. 6 para. 1 p. 1 lit. f) DSGVO (legitimate interest / public relations).

What personal data is processed?

Name, first name, structural unit or study program are processed.

During the event, pictures will be taken for public relations purposes (publication on the Internet on web pages, social media, etc. and in printed materials), whereby persons are not the focus of attention (overview pictures). Please note the instructions at the beginning of the event.

Every participating person has the right to object at any time to the making of image and sound recordings concerning him or her for reasons arising from his or her particular situation. The objection must be communicated to the person making the image recordings on site.

If images are to be made for the same purpose that focus on individuals (speakers, individual recordings), separate consent will be obtained in each individual case before the start of the event.

How long is personal data processed/stored and is it published?
Personal data will be deleted at the latest after the event has been completed and proof has been provided to the funding body, unless there are legal grounds for deletion.

Personal data will not be passed on to third parties. This does not apply to photographs. These will be published as described above. A list of participants will only be compiled for internal purposes and will not be made available to event participants.

What are the basic rights of data subjects?

To exercise the rights, a notification in text form (letter, e-mail or fax) to the controller is sufficient.

1) Right of access (Art. 15 DSGVO)
Data subjects have the right to request information at any time about the data processed about them and the possible recipients of this data. They are entitled to a response within a period of one month after receipt of the request for information.

2) Right to rectification, deletion and restriction (Art. 16 - 18 DSGVO)
Data subjects may at any time request TU Dresden to correct, delete or restrict the processing of their personal data.

3) Right to data portability (Art. 20 DSGVO).
Data subjects may request that the controller transmit their personal data to them in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to another controller, where this is possible.

4) Right of appeal (Art. 77 GDPR).
Data subjects may contact the TU Dresden data protection officer at any time and, in the event of a complaint pursuant to Art. 77 DSGVO, the competent supervisory authority for data protection. The competent supervisory authority is:

Saxon Data Protection Commissioner
Devrientstraße 5
01067 Dresden
www.datenschutz.sachsen.de