Privacy policy on the processing of personal data/information obligations under the GDPR

For what purposes will personal data be processed?
The personal data provided will be processed exclusively for the purposes of preparing, conducting, and following up on the event.

Who is responsible for data processing, and who can data subjects contact?
TUD Dresden University of Technology
01062 Dresden

Contact Persons:
Franziska Schneider
Unit 9.3 Diversity Management
Nöthnitzer Str. 43, Room 202
01187 Dresden
Phone: 0351 463-39772
Email:

TUD Dresden University of Technology
The Data Protection Officer
Mr. Jens Syckor
01062 Dresden
Phone: 0351 463-32839
Email:
https://tu-dresden.de/datenschutz

What is the legal basis for the processing of personal data?
The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR (consent), meaning that the use of our services and your consent to the associated processing of your personal data are voluntary.

What personal data is processed?
The following data is processed: last name, first name, email address, affiliation with the group of employees or students (including assignment to degree programs and organizational units), and affiliation with the group of employees at member institutions of the Dresden Network for Work and Family (including assignment to the member institution).

How long is personal data stored?
Personal data will be deleted no later than upon completion of the event, provided there are no legal grounds preventing deletion. This does not affect the lawfulness of the processing based on consent until such consent is revoked.

Is personal data transferred to recipients? Who at TU Dresden has access to this data, and is data collected from third parties?
Unless otherwise required by law or you have expressly consented in individual cases, no personal data is transferred to third parties. A list of participants is created solely for internal purposes and is not made available to event participants.

What rights do data subjects generally have?

• Voluntary Provision and Withdrawal of Consent Pursuant to Art. 7(3) of the GDPR
  The provision of personal data is voluntary. Consent to the processing of personal data may be withdrawn at any time pursuant to Article 7(3) of the GDPR, with the result that the personal data of the data subject will no longer be processed.
• Right of Access (Article 15 of the GDPR)
  Data subjects have the right to request information at any time regarding the data processed about them, as well as the potential recipients of such data. They are entitled to a response within one month of receipt of the request for information.
• Right to Rectification, Erasure, and Restriction (Articles 16–18 of the GDPR)
  Data subjects may at any time request that TU Dresden rectify or erase their personal data or restrict its processing.
• Right to Data Portability (Art. 20 GDPR)
  Data subjects may request that the data controller provide them with their personal data in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to another data controller, to the extent that this is possible.
• Data Protection Officer and Data Protection Supervisory Authority
  Data subjects may contact the Data Protection Officer at TU Dresden at any time, and may also contact a data protection supervisory authority to file a complaint pursuant to Article 77 of the GDPR. The competent supervisory authority for TU Dresden is:
  Saxon Data Protection and Transparency Commissioner
  Dr. Juliane Hundert
  Devrientstraße 5
  01067 Dresden
  Email:
  Phone: +49 (0) 35185471 10
  www.datenschutz.sachsen.de

To exercise these rights, simply send a written notice (via email or letter) to the person in charge.