Event management
Data protection information in accordance with Article 13 of the General Data Protection Regulation (GDPR) on event management at the Zittau/Görlitz University of Applied Sciences (HSZG).
Person responsible for data processing
Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau
Please send inquiries regarding data processing to datenschutz(at)hszg.de
Your request will be forwarded to the responsible department and processed promptly.
Data Protection Officer (DPO) of the controller
The data protection officer can be contacted at
DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden
Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de
Purpose of data processing
You can register for events at via registration lists or on the subpages of hszg.de via online forms. If you enter or enter information in the list or input fields provided for this purpose and submit the form, this data will be transmitted to us, stored and processed by us.
The personal data that you voluntarily provide to us will be processed for the following purposes:
- Organization and implementation of events
- Creation of participant lists and name badges
- Confirmation of registration
- authentication
- Obtaining feedback on the event
- Creation of confirmations of attendance and certificates of attendance
- Preparation of invoices for chargeable events
- Settlement of representation expenses
Legal basis
Free events
If you register for a free event, the data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent.
Events subject to a fee
If you register for a paid event, the data processing is carried out in accordance with Art. 6 para. 1 lit. b GD PR on the basis of a contract.
Recipients
The HSZG discloses the registration data to the following recipients exclusively for the purposes of this processing activity:
- Funding providers (financing of the event via third-party funded projects)
- Funding bodies for sponsoring services
The HSZG does not transfer personal data to a third country or an international organization.
Storage duration
Without prejudice to the right to erasure(Art. 17 GDPR), the personal data will be stored for a reasonable period of time for the duration of the fulfillment of the purposes for which it was collected. This classification is the responsibility of the specialist department.
In the case of chargeable events, the storage period results from the retention periods of the funding bodies and the legislator (in particular from the German Commercial Code (HGB) and the German Fiscal Code (AO)).
Rights of the data subjects
As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.
- You have the right to information about the processing of your personal data(Art. 15 GDPR).
- You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
- You have the right to erasure of your personal data (Art.17 GDPR).
- You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
- You have the right to data portability of your personal data (Art.20 GDPR)
- You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
- You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
- You have the right to lodge a complaint with the Saxon data protection officer
(for contact details, see https://www.saechsdsb.de/n-kontakt).
Provision of personal data
The provision of personal data is not required by law, but it is necessary for the conclusion of the contract in the case of chargeable events in accordance with(Art. 13 para. 2 lit. e GDPR).
Failure to provide your personal data excludes you from the fulfillment of their respective purposes of collection (e.g: Event participation, catering, issue of participation certificates).
Decision-making and profiling
No automated decision-making or profiling in accordance with Art. 22 GDPR is carried out in the "Event management" processing activity.