When you get in touch with us
Privacy notice pursuant to Article 13, subsections 1 and 2, of the General Data Protection Regulation (GDPR) regarding the processing of personal data when you contact Zittau/Görlitz University of Applied Sciences (HSZG).
Person responsible for data processing
Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau
Please direct any inquiries regarding data processing to datenschutz(at)hszg.de
Your inquiry will be forwarded to the appropriate department and processed promptly.
Data Protection Officer (DPO) of the controller
The data protection officer can be contacted at
DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden
Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de
Purposes of data processing
Zittau/Görlitz University processes the personal data you provide when contacting the university for the purposes of handling your inquiry, fulfilling its legal obligations, and contacting you regarding your inquiry.
Legal basis
Zittau/Görlitz University processes your personal data on the basis of your implied consent pursuant to Article 6(1)(a) of the GDPR.
If your inquiry falls within the scope of the Zittau/Görlitz University of Applied Sciences’ statutory duties pursuant to § 5(2) of the Saxon Higher Education Act (SächsHSG), then we also process your personal data on the basis of Article 6(1)(e) of the GDPR in conjunction with Section 3(1) of the Saxon Data Protection Act (SächsDSDG) and Section 5(2) of the Saxon Higher Education Act (SächsHSG).
If you are a member, affiliate, prospective student, exam candidate, guest student, or a former member of the Zittau/university/Görlitz and if your request justifies processing in accordance with § 15(1)(1) through (11) of the Saxon Higher Education Act (SächsHSG), then Zittau/Görlitz University of Applied Sciences also processes your personal data on the basis of § 15(1) of the Saxon Higher Education Act (SächsHSG).
Recipients
Zittau/Görlitz University of Applied Sciences does not disclose to third parties the personal data it has received from you based on implied consent when you first contacted us, nor does it transfer such data to a third country or to an international organization.
Storage duration
Provided that your personal data is no longer needed after your request has been fully processed and there are no statutory retention periods related to your request that preclude this, Zittau/Görlitz University of Applied Sciences will delete your personal data processed for the aforementioned purposes when you contact us
- by overwriting it with new caller data within the next few months when you contact us
- automatically from the fax log after 1 month if you contact us via fax,
- manually, at the discretion of the contact person, for emails and letters
Rights of the data subjects
As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met:
- You have the right to information about the processing of your personal data(Art. 15 GDPR).
- You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
- You have the right to erasure of your personal data (Art.17 GDPR).
- You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
- You have the right to data portability of your personal data (Art.20 GDPR)
- You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
- You have the right to lodge a complaint with the Saxon Data Protection Officer
(for contact details, see https://www.saechsdsb.de/n-kontakt).
Provision of personal data
If you are a member or affiliate of Zittau University of Applied Sciences/Görlitz and the processing of your personal data is carried out pursuant to § 15(1) of the Saxon Higher Education Act (SächsHSG) for the purposes specified in § 15(1)(1) through (11) of the Saxon Higher Education Act (SächsHSG), you have a legal obligation under § 15( 2 of the Saxon Higher Education Act (SächsHSG), you are legally required to provide your personal data.
Decision-making and profiling
This processing activity does not involve automated decision-making or profiling in accordance with Art. 22 GDPR.