If the Faculty of Social Sciences processes personal data of students and internships in the context of internships

Data protection information in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) on the processing of personal data by the Zittau/Görlitz University of Applied Sciences (HSZG) in the context of the implementation and recognition of internships for its students.

Person responsible for data processing

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please send inquiries regarding data processing to datenschutz(at)hszg.de
Your request will be forwarded to the responsible department and processed promptly.

Data Protection Officer (DPO) of the controller

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de

Purposes of data processing

The HSZG processes personal data of its students and practice partners in the context of the organization and implementation of compulsory internships of its students in accordance with the curricula of the degree programmes for the purposes of reviewing and approving internship advertisements, training and internship agreements, activity certificates, applications for recognition of internship modules and for communication with students and practice partners.

Legal basis

Personal data is processed on the basis of Art. 6 para. 1 lit. b, e GDPR in conjunction with § 5 para. 2 no. 1, para. 4 SächsHSFG, § 1 para. 2 SächsSozAnerkG and § 2 para. 2 SächsSozAnerkVO.

Categories of personal data

The HSZG processes the following personal data when submitting

job advertisements

from students	from internships
Surname, first name Degree program Class, matriculation no. Contact details Type of internship Field of activity in institution Focus of the internship Signature	Name and address of the institution / sponsor Surname, first name, function, contact details of the contact person Surname, first name, professional qualification and signature of the supervisor Surname, first name, professional qualification, state recognition, full-time function, contact details of the person providing guidance Signatures of the contact person and contact person

Training and internship agreements

from students	from practical training centers
Surname, first name Date and place of birth Address Type of internship Fields of learning and work during the internship Duration of the internship Amount of training allowance Amount of travel allowance Signature	Name, address, contact details and signature of the institution / sponsor Surname, first name, professional qualification and signature of the supervisor

Proof of employment

from students	from practical placements
Surname, first name Class Date of birth Duration of the internship Type of internship Number of hours worked Absences Focus and assessment of the activity	Name, address of the institution / sponsor Signature

Applications for recognition of practical modules

from students	from practical placements
Surname, first name Degree program Class, matriculation no. Contact details Type of internship Duration of the internship Number of hours worked Signature	Name, address of the institution / sponsor

Origin of the personal data

The HSZG receives the aforementioned categories of personal data from its students, who submit this data to the HSZG with the forms for internship advertisements, training and internship agreements, proof of activity and applications for recognition of internship modules.

Receiver

The personal data is regularly processed by employees of the HSZG for the purposes of this data processing.

The HSZG stores the preliminary clarifications, training and internship agreements and activity records in accordance with Art. 28 GDPR with restricted access for authorized persons on the IT systems of the following processor.

BPS Bildungsportal Sachsen GmbH
Dresdner Straße 6
09130 Chemnitz

The HSZG does not transfer personal data to a third country or an international organization.

Storage duration

Without prejudice to the right to erasure (Art. 17 GDPR), the personal data will be stored for a reasonable period of time for the duration of the fulfillment of the purposes for which it was collected. This classification is the responsibility of the specialist department.

All personal data must be deleted five years after disenrolment (from university) or termination of studies. In the case of archiving, this takes the place of deletion.

Rights of data subjects

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

You have the right to information about the processing of your personal data(Art. 15 GDPR).
You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
You have the right to erasure of your personal data (Art.17 GDPR).
You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
You have the right to data portability of your personal data (Art.20 GDPR)
You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
You have the right to lodge a complaint with the Saxon data protection officer
(Art. 77 GDPR).

Provision of personal data

The provision of personal data is necessary for the performance of a contract in accordance with Art. 13 para. 2 lit. e GDPR. If personal data is not provided, it will not be possible to review and approve internship advertisements, training and internship agreements, certificates of employment, applications for recognition of internship modules or communication with students.

Decision-making and profiling

This processing activity does not involve automated decision-making or profiling in accordance with Art. 22 GDPR.