Privacy policy of the Service Desk

Processing of Personal Data at TU Dresden Service Desk

The Service Desk is the contact point for IT related enquiries at TU Dresden. It can be reached by telephone and in-person during the opening hours or at any time by email. Incoming enquiries are answered by the staff members and/or forwarded to the responsible parties at TU Dresden.

• For what purpose will personal data be processed?
  All personal data contained in an enquiry (e.g. name, ZIH login, email attachments) is exclusively used for processing the enquiry. The purpose of data processing is to offer the user solutions to specific problems.
  The data is treated in strict confidence. Members of TU Dresden should only use the email address provided by TU Dresden for communication purposes (e.g. max.mustermann@tu-dresden.de / maxi.musterfrau@mailbox.tu-dresden.de).
• What personal data is processed?
  Depending on your request, the processing includes the following personal data:
  • ZIH login,
  • title,
  • name,
  • enrolment data (enrolment number, degree programme/field of study, academic title),
  • contact details (TU internal and external email addresses, official telephone number, mobile phone number, office building and room, organisational unit).
• How is the data processed?
  Upon receipt of a request, a ticket will be issued (by telephone, in-person or by email). In addition to the personal data mentioned, the ticket also contains information on the matter to be resolved. Missing information is requested and added to the ticket. Only the information required to solve the problem is requested. The necessary information may vary depending on the type of request and the IT services involved.
• What is the legal basis for the processing of personal data?
  Personal data is processed based on § 11 of the Saxon Data Protection Implementation Act (SächsDSDG) for employees and Art. 6 para. 1 lit. a) GDPR for students..
• Will personal data be transferred to third parties?
  The Service Desk processes incoming enquiries directly or forwards them to the responsible contact persons within TU Dresden. Insofar as this is not otherwise stipulated by law, no personal data will be transferred to third parties.
• How long will personal data be stored?
  Telephone calls are not recorded, but counted to track the amount of work involved.  Emails to the Service Desk are stored - including personal data - for the time necessary to process them. For quality assurance purposes, the course and processing of individual email enquiries will be analysed.
  As a rule, requests will be deleted 2 years after the enquiry has been processed. Exceptions to this rule are requests in connection with the provision, modification or cancellation of services.
  If your membership or employment status expires, all personal data will be deleted after 15 months.

• Who is responsible for compliance with the data protection regulations?
  Responsible office and contact point for enquiries:
  Technische Universität Dresden
  Centre for Information Services and High Performance Computing (ZIH)
  01062 Dresden
  
  E-Mail:
  Telephone: +49 (0) 351 463-40000
  Fax: +49 (0) 351 463-42328

• What are the basic rights of data subjects?

  • Voluntary disclosure and right of appeal according to Art. 7 para. 3 GDPR
    The provision of personal data by students is voluntary. Consent to the processing of personal data can be revoked at any time in accordance with Art. 7 para. 3 GDPR with the consequence that all personal data of the data subject will not be processed further. It shall be sufficient to notify the Service Desk in written form to make use of the right of appeal.
  • Right of information (Art. 15 GDPR)
    Data subjects have the right to obtain information at any time about the data processed concerning them and the possible recipients of such data. They are entitled to a reply within one month of the responsible party for data processing receiving the request for information. Employees of TU Dresden can also view their requests in the customer portal of the ticket system.

  • Right to correction, deletion and limitation (Art. 16 - 18 GDPR)
    Data subjects can contact TU Dresden at any time to request the correction, deletion or limitation of the processing of their personal data. For this purpose, a notification in written form addressed to the Service Desk shall be sufficient.

  • Right to data transferability of data (Art. 20 GDPR)
    Data subjects can demand that TU Dresden provides them with their personal data, which they made available to the Service Desk, in a structured, common and machine-readable format. For this purpose, a notification in written form addressed to the Service Desk shall be sufficient. Alternatively, you can request the direct transfer of your personal data to another responsible person, as far as this is possible.
  • Right of objection (Art. 21 GDPR)
    If the Service Desk processes personal data of data subjects on the basis of legitimate interest, they have the right to object to the processing. For this purpose, a notification in written form addressed to the Service Desk shall be sufficient.
  • Right of appeal (Art. 77 GDPR)
    Data subjects can contact the Data Protection Officer of TU Dresden at any time and, in case of a complaint according to Art. 77 GDPR, the responsible supervisory authority for data protection.