Erasmus+

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please direct any inquiries regarding data processing to datenschutz(at)hszg.de
. Your inquiry will be forwarded to the appropriate department and processed promptly.

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de

The HSZG processes the personal data submitted to it in applications for participation in the Erasmus+ program for the purposes of

• conducting the application process
• selecting grant recipients based on the eligibility criteria
• administering funding in the context of a scholarship
• compiling statistics

The HSZG uses the mobility portal Mobility Online of the IT service provider SOP, based in Austria, to collect and manage personal data.

SOP Hilmbauer & Mauberger GmbH
Siemensstraße 5
3300 Amstetten
Phone: +43 (0) 505 29
Fax: +43 (0) 505 29 90
E-mail: office@sop.co.at

The HSZG processes personal data in connection with applications for participation in the Erasmus+ program in accordance with Article 6(1)(a) of the GDPR, based on voluntary and informed consent. The processing of personal data for the purpose of initiating, concluding, and fulfilling a grant agreement in connection with the awarding of a scholarship is based on Article 6(1)(b) of the GDPR.

Personal data is transmitted to the NA (National Agency for Erasmus+ Higher Education Cooperation), the DAAD (German Academic Exchange Service), and the European Commission to verify the proper use of funds.

The HSZG transmits the last names, first names, dates of birth, and the names of the degree programs in which applicants are enrolled to partner universities. This information is transmitted for the purpose of nominating candidates for the Erasmus+ program.

Pursuant to Section 93a(1) of the German Fiscal Code (AO), the HSZG, as a public entity, is required to report personal data to the competent tax office.

The HSZG does not transfer personal data to a third country or an international organization.

Without prejudice to the right to erasure, personal data is stored for the duration necessary to fulfill the purposes for which it was collected and in accordance with statutory retention periods. Personal data is erased no later than ten years after collection.

Once transferred to external recipients, the transferred personal data is no longer subject to the administrative control of the HSZG. Compliance with retention and erasure periods is then the responsibility of the recipients, who will process the personal data under their own responsibility from that point forward.

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

• You have the right to information about the processing of your personal data(Art. 15 GDPR).
• You have the right to rectification of inaccurate personal data concerning you(Art. 16 GDPR)
• You have the right to erasure of your personal data(Art. 17 GDPR).
• You have the right to request the restriction of the processing of your personal data(Art. 18 GDPR)
• You have the right to data portability of your personal data(Art. 20 GDPR)
• You have the right to object to the processing of your personal data at any time(Art. 21 GDPR)
• You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
• You have the right to lodge a complaint with the Saxon data protection officer(Art. 77 GDPR).

The provision of personal data is not required by law or contract as part of the application process. However, failure to provide personal data will result in exclusion from the selection process.

The provision of personal data is required for the conclusion and fulfillment of a grant agreement in connection with the awarding of a scholarship.

In the "Erasmus+" processing activity, no automated
decision-making or profiling is carried out in accordance with Art. 22 GDPR.