Enterprise Europe Network

Privacy Notice pursuant to Article 13(1) and (2) of the GDPR regarding the processing of personal data by Zittau/Görlitz University of Applied Sciences (HSZG) as part of the EEN project.

Person responsible for data processing

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please direct any inquiries regarding data processing to
. Your inquiry will be forwarded to the appropriate department and processed promptly.

Data Protection Officer (DPO) of the controller

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail:

Purposes of data processing

Personal data is processed for the following purposes:

To organize events and one-on-one meetings to support small and
medium-sized enterprises (SMEs) through EEN Saxony. EEN Saxony supports
companies by providing comprehensive information on access to financing and
funding programs, as well as networks and services of the European Union;
by working with them to internationalize their offerings; by communicating their needs for knowledge and technology
—initially in anonymized form; by compiling information on the funding landscape in the area of research and
development / funding of research projects, provides support
to help them find the best technology, services, and business partners,
forwards their information regarding issues with the application of European directives and
laws to the European Commission or the relevant administrative bodies
, and keeps them informed of the corresponding responses.

Legal basis

The processing of personal data of SMEs is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of consent.

Categories of personal data

The following categories of personal data are processed for specific purposes:

Only data that is absolutely necessary for the provision of services or
consulting services is processed, e.g., form of address, title, names, contact information,
inquiries, and financial metrics.

Receiver

The HSCG discloses the personal data to the following recipients exclusively for the purposes of this processing activity.

The personal data is disclosed within the university to the administrator. In individual cases, the personal data is disclosed to external auditors and the European Commission or corresponding administrative bodies.
 

Storage duration

The data is stored for a reasonable period of time for the duration of the fulfillment of the purposes for which it was collected
. This takes place until the end of the third-party funded project and the associated
associated retention periods of the funding bodies and the legislator
(in particular from the German Commercial Code (HGB) and the German Fiscal Code (AO)). In the case
of HSCG projects without third-party funding, this classification is the responsibility of the specialist department.

Rights of the data subjects

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

  • You have the right to information about the processing of your personal data(Art. 15 GDPR).
  • You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
  • You have the right to erasure of your personal data (Art.17 GDPR).
  • You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
  • You have the right to data portability of your personal data (Art.20 GDPR)
  • You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
  • You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
  • You have the right to lodge a complaint with the Saxon data protection officer
    (Art. 77 GDPR).

Provision of personal data

The provision of personal data is not required by law; however, it is necessary for active participation in the project. For externally funded projects, your personal and company-related data may be necessary in order to provide services at all. In other words, your personal and company-related data may be essential for participation in the third-party-funded project, as failure to provide this data may result in you being unable to participate in the project or use its specific services.

Decision-making and profiling

The "EEN project" processing activity does not involve automated decision-making or profiling in accordance with Art. 22 GDPR.