Privacy Policy for Provision of a ZIH Login and Use of Related IT Services — Center for Information Services and High Performance Computing (ZIH) — TU Dresden

For what purpose will personal data be processed?

Personal data is processed exclusively for the provision of a ZIH login and for the use of the associated IT services of the TU Dresden.

Who is responsible for data processing and to whom can data subjects turn?

Responsible in the sense of Art. 4 No. 7 GDPR is TUD Dresden University of Technology.

Responsible Department

Technische Universität Dresden
CIDS - Center for Interdisciplinary Digital Sciences
01062 Dresden

Tel.: +49 (0)351 463-40000
Email: servicedesk@tu-dresden.de

Data Protection Officer

Data Protection Officer of the TUD Dresden University of Technology
Mr Jens Syckor
01062 Dresden

Tel.: +49 (0)351 463-32839
Email: informationssicherheit@tu-dresden.de

What personal data is processed?

The following personal data are processed:

Name, first name, title, date of birth, place of birth, sex, organizational affiliation Additionally for employees: personnel number, academic degree, birth name, assigned structural unit, contract type, citizenship Additionally for students: Matriculation number, home address, private email address, mobile number, birth name, country of birth, subject semester, start semester, course of studies, aspired academic degree Additionally for guests: private email address In addition, further specific personal data may be processed in the IT services. What these are is explained in more detail in the respective service description or in the privacy policy of the IT service.

What is the legal basis for the processing of personal data?

The legal basis for the processing of data for the above-mentioned purposes is

1. for employees § 11 para. 1 SächsDSDG (processing is necessary for the execution of the service or employment relationship or for the implementation of organizational measures as defined in § 11 para. 1 p. 1 SächsDSDG),
2. for the students § 3 para. 1 SächsDSDG (the processing is necessary for the execution of the study in the sense of § 14 para. 1 p. 1 No. 1 SächsHSFG),
3. for guests Art. 6 para. 1 UAbs. 1 lit. a DSGVO (consent).

How long is personal data processed/stored?

The personal data will be stored on servers of the ZIH and, in accordance with § 15 para. 3 IT-Ordnung of the TU Dresden, will be deleted 15 months after the user's departure at the latest.

Will personal data be transferred to third parties?

Unless otherwise stipulated by law or you have expressly consented in individual cases, no personal data will be transferred to third parties.

What are the basic rights of data subjects?

• Right to voluntary nature and revocation (Art. 7 (3) GDPR)

  If the use of the services is based on consent, this consent can be revoked at any time in accordance with Art. 7 (3) GDPR with the consequence that the personal data of the person concerned will not be further processed. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

• Right to information (Art. 15 GDPR)

  Data subjects have the right to obtain at any time information on the data processed concerning them and on the possible recipients of such data. They are entitled to receive a reply within a period of one month after submitting the request.

• Right of correction, deletion and restriction (Art. 16 - 18 GDPR)

  The persons concerned may at any time request TUD Dresden University of Technology to correct or delete their personal data or to restrict the processing of such data.

• Right to data transferability (Art. 20 GDPR)

  The persons concerned can demand that TUD Dresden University of Technology transfers their personal data to them in a machine-readable format. Alternatively, they may request that the personal data provided by you be transferred directly to another responsible party, as far as this is possible.

• Right of objection (Art. 21 GDPR)

  Data subjects may object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.

• Right of appeal (Art. 77 GDPR)

  Data subjects can contact the Data Protection Officer of TUD Dresden University of Technology at any time and, in the case of a complaint under Art. 77 GDPR, a supervisory authority for data protection. The responsible supervisory authority for TUD Dresden University of Technology is:

  Sächsische Datenschutz- und Transparenzbeauftragte
  Frau Dr. Juliane Hundert
  Maternistraße 17
  01067 Dresden
  Email: post@sdtb.sachsen.de
  Telephone: +49 (0)351 85471-101
  www.datenschutz.sachsen.de

To exercise these rights, notification in text form (letter or email) to the controller is sufficient.