Privacy Policy for the Provision of a ZIH Login and the Use of Related IT Services
- For what purpose will personal data be processed?
Personal data is processed exclusively for the provision of a ZIH login and for the use of the associated IT services of the TU Dresden. - Who is responsible for data processing and whom can data subjects contact?
-
Technische Universität Dresden
01062 Dresden
Service Desk
Tel.: +49 351 463-40000 -
Technische Universität Dresden
Der Datenschutzbeauftragte
Herr Jens Syckor
01062 Dresden
Tel.: +49 (0)351 463 32839
E-Mail:
-
- What is the legal basis for the processing of personal data?
The legal basis for the processing of data for the above-mentioned purposes is
a) for employees § 11 para. 1 SächsDSDG (processing is necessary for the execution of the service or employment relationship or for the implementation of organizational measures as defined in § 11 para. 1 p. 1 SächsDSDG),
b) for the students § 3 para. 1 SächsDSDG (the processing is necessary for the execution of the study in the sense of § 14 para. 1 p. 1 No. 1 SächsHSFG),
c) for guests Art. 6 para. 1 UAbs. 1 lit. a DSGVO (consent) - What personal data is processed?
The following personal data are processed:- Name, first name, title, date of birth, place of birth, sex, organizational affiliation
- Additionally for employees: personnel number, academic degree, birth name, assigned structural unit, contract type, citizenship
- Additionally for students: Matriculation number, home address, private email address, mobile number, birth name, country of birth, subject semester, start semester, course of studies, aspired academic degree
- Additionally for guests: private email address
- In addition, further specific personal data may be processed in the IT services. What these are is explained in more detail in the respective service description or in the privacy policy of the IT service.
- How long is personal data processed/stored?
The personal data will be stored on servers of the ZIH and, in accordance with § 15 para. 3 IT-Ordnung of the TU Dresden, will be deleted 15 months after the user's departure at the latest. - Will personal data be transferred to third parties?
Unless otherwise stipulated by law or you have expressly consented in individual cases, no personal data will be transferred to third parties. -
What are the basic rights of data subjects?
To exercise the following rights, a notification in text form (letter or e-mail) to the responsible person is sufficient.- Voluntary disclosure and right of appeal according to Art. 7 para. 3 GDPR
The consent is voluntary for guests. The consent can be revoked at any time in accordance with Art. 7 (3) GDPR with the consequence that the personal data of the person concerned will not be further processed. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected. - Right of information (Art. 15 GDPR)
Data subjects have the right to obtain information at any time about the data processed concerning them and the possible recipients of such data. They are entitled to a reply within one month of the responsible party for data processing receiving the request for information. -
Right to correction, deletion and limitation (Art. 16 - 18 GDPR)
Data subjects can contact TU Dresden at any time to request the correction, deletion or limitation of the processing of their personal data. For this purpose, a notification in written form addressed to the Service Desk shall be sufficient. - Right to data transferability of data (Art. 20 GDPR)
Data subjects can demand that TU Dresden provides them with their personal data, which they made available to the Service Desk, in a structured, common and machine-readable format. For this purpose, a notification in written form addressed to the Service Desk shall be sufficient. Alternatively, you can request the direct transfer of your personal data to another responsible person, as far as this is possible. - Right of objection (Art. 21 GDPR)
Employees and students have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. - Right of appeal (Art. 77 GDPR)
Data subjects may contact the competent supervisory authority for data protection at any time in the event of a complaint pursuant to Art. 77 GDPR:
Sächsische Datenschutz- und Transparenzbeauftragte
Frau Dr. Juliane Hundert
Devrientstraße 5
01067 Dresden
E-Mail: post@sdtb.sachsen.de
Telefon: + 49 (0) 35185471 101
www.datenschutz.sachsen.de
- Voluntary disclosure and right of appeal according to Art. 7 para. 3 GDPR