Image and sound recordings of events
Privacy notice pursuant to Article 13, subsections 1 and 2, of the General Data Protection Regulation (GDPR) regarding the creation and use of video and audio recordings of events involving the Zittau/Görlitz University of Applied Sciences (HSZG).
Person responsible for data processing
Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau
Please direct any inquiries regarding data processing to datenschutz(at)hszg.de.
Your inquiry will be forwarded to the appropriate department and processed promptly.
Data Protection Officer (DPO) of the controller
The data protection officer can be contacted at
DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden
Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de
Purposes of data processing
The HSZG produces video and audio recordings of events in which it participates. The data is collected and used for the purpose of informing the public (creating articles, public relations work) about the HSZG’s activities, as well as for documenting and applying for events.
The collected data may be published in the following media:
- On the HSZG website at hszg.de
- On the HSZG’s “studier hier ” landing page at studier-hier.de
- On YouTube at youtube.com/user/hszigr
- On Facebook at facebook.com/hszg.de
- On Instagram at instagram.com/hszg.de
- On Twitter at twitter.com/hochschulezigr
- On Xing at www.xing.com/companies/hochschulezittau/görlitz
- On LinkedIn
- In the press (print and online media)
Legal basis
Image and sound recordings that do not focus on people
If image and sound recordings are made that depict an event as such, the data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest of the HSZG. In particular, the HSZG has a legitimate interest in the documentation of events and in public relations work.
The publication of image and sound recordings that reproduce an event as such is based on Art. 85 para. 1 GDPR and, in individual cases, on Sections 23 para. 1 sentence 1 and 23 para. 1 sentence 3 KunstUrhG.
Image and sound recordings that focus on individuals
If image and sound recordings are made of individuals or small groups of people, the data processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR.
The publication of image and sound recordings of individuals or small groups of people is based on Art. 85 para. 1 GD PR and § 22 KunstUrhG.
Recipients
The HSZG discloses the image and sound recordings exclusively for the purposes of this processing activity to the following recipients:
Service providers and contractual partners:
- Facebook & Instagram: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
- Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
- LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- Organizer
- Press
The HSZG does not directly transfer personal data to a third country or an international organization. Personal data may be transferred indirectly to the USA or other third countries or stored and processed there in accordance with the terms and conditions of the respective service provider or contractual partner, particularly in the case of publication in the aforementioned reproduction media.
When published in the aforementioned reproduction media, the data can be accessed worldwide and can be found in particular by search engines.
Storage duration
Without prejudice to the right to erasure(Art. 17 GDPR), image and sound recordings are stored for a reasonable period of time for the duration of the fulfillment of their collection purposes. This classification is the responsibility of the specialist department. Before deletion, the recording can be submitted to the University archives.
Rights of the data subjects
As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.
- You have the right to information about the processing of your personal data(Art. 15 GDPR).
- You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
- You have the right to erasure of your personal data (Art.17 GDPR).
- You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
- You have the right to data portability of your personal data (Art.20 GDPR)
- You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
- You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
- You have the right to lodge a complaint with the Saxon data protection officer
(for contact details, see https://www.saechsdsb.de/n-kontakt).
Provision of personal data
According to Art. 13 (2) lit. e GDPR, the provision of personal data is not required by law.
Decision-making and profiling
In the processing activity "Image and sound recordings of events", no automated decision-making or profiling is carried out in accordance with Art. 22 GDPR.