Recording the incoming invoice process at the HSZG

Privacy Notice pursuant to Article 13, subsections 1 and 2, of the General Data Protection Regulation (GDPR) regarding the processing of incoming invoices at the University of Zittau/Görlitz (HSZG).

Person responsible for data processing

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please direct any inquiries regarding data processing to
. Your request will be forwarded to the appropriate department and processed promptly.

Data Protection Officer (DPO) of the controller

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail:

Purposes of data processing

The personal data is required for the implementation of EU Directive 2014/55/EU via the law on the implementation of Directive 2014/55/EU on electronic invoicing in public procurement at the HSCG.
The results serve as the basis for the creation of a target concept for a media disruption-free invoicing process at the HSZG.

Legal basis

Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Categories of personal data

The following categories of personal data are processed for specific purposes:

Name of the person, function, structural unit

Recipients

The survey results are made available to the project team and the service provider (iklaro GmbH) and processed.

The data will not be transferred to third countries or international organizations.

Storage duration

The duration of data storage depends on the project duration and will be deleted after the end of the project.

Rights of the data subjects

Due to the anonymous nature of the evaluation, it is not possible to identify the individual questionnaire. The aggregated evaluation results can be accessed.

  • You have the right to information about the processing of your personal data(Art. 15 GDPR).
  • You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR).
  • You have the right to erasure of your personal data (Art.17 GDPR).
  • You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
  • You have the right to object to the processing of your personal data (Art.21 GDPR)
  • You have the right to lodge a complaint with the Saxon Data Protection Officer
    (for contact details, see https://www.saechsdsb.de/n-kontakt).

Provision of personal data

The provision of personal data is not required by law in accordance with Art. 13 para. 2 lit. e GDPR.

Decision-making and profiling

This processing activity does not involve automated decision-making or profiling in accordance with Art. 22 GDPR.