Privacy Policy for PICTURE process platform

For what purpose will personal data be processed?

In principle, personal data is collected in the PICTURE process platform for user administration. In order to fulfill the purpose of regulating transparency regarding responsibilities, for example, it cannot be ruled out that personal data may also be collected for the process descriptions.

Who is responsible for data processing and to whom can data subjects turn?

Responsible in the sense of Art. 4 No. 7 GDPR is TUD Dresden University of Technology.

Responsible Department

Technische Universität Dresden
CIDS - Center for Interdisciplinary Digital Sciences
Support Center Digitalization (SCD)
01062 Dresden

Tel.: +49 (0)351 463-40000
Email: picture-prozessplattform@tu-dresden.de

Data Protection Officer

Data Protection Officer of the TUD Dresden University of Technology
Mr Jens Syckor
01062 Dresden

Tel.: +49 (0)351 463-32839
Email: informationssicherheit@tu-dresden.de

Which personal data will be processed?

The PICTURE process platform is used on a voluntary basis or on instruction. If you register using the ZIH login, your surname, first name and email address will be processed. As part of the user administration, the salutation, academic title, structural unit and the need for accessibility mode can also be stored. In the context of process descriptions, official contact details may be stored if there is a corresponding requirement.

What is the legal basis for processing personal data?

The legal basis for the processing of personal data is Section 11 of the Saxon Data Protection Implementation Act (SächsDSDG).

How long is personal data stored?

The data is currently stored until revoked.

Will personal data be transferred to third parties?

The PICTURE process platform is operated by the company PICTURE GmbH.

Between the users of the PICTURE process platform, such as the TUD Dresden University of Technology, and the Saxon State Chancellery (SK), there is also a joint responsibility in accordance with Art. 26 GDPR, which is contractually regulated, within the framework of the use of the platform as a basic component of the Free State of Saxony.

What are the basic rights of data subjects?

• Right to information (Art. 15 GDPR)

  Data subjects have the right to obtain at any time information on the data processed concerning them and on the possible recipients of such data. They are entitled to receive a reply within a period of one month after submitting the request.

• Right of correction, deletion and restriction (Art. 16 - 18 GDPR)

  The persons concerned may at any time request TUD Dresden University of Technology to correct or delete their personal data or to restrict the processing of such data.

• Right of appeal (Art. 77 GDPR)

  Data subjects can contact the Data Protection Officer of TUD Dresden University of Technology at any time and, in the case of a complaint under Art. 77 GDPR, a supervisory authority for data protection. The responsible supervisory authority for TUD Dresden University of Technology is:

  Sächsische Datenschutz- und Transparenzbeauftragte
  Frau Dr. Juliane Hundert
  Maternistraße 17
  01067 Dresden
  Email: post@sdtb.sachsen.de
  Telephone: +49 (0)351 85471-101
  www.datenschutz.sachsen.de

To exercise these rights, notification in text form (letter or email) to the controller is sufficient.