Outgoing invoices

Data protection information in accordance with Article 13 subsections 1 and 2 of the General Data Protection Regulation (GDPR) on invoicing at the Zittau/Görlitz University of Applied Sciences (HSZG).

Person responsible for data processing

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please send inquiries regarding data processing to
Your request will be forwarded to the responsible department and processed promptly.

Data Protection Officer (DPO) of the controller

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail:

Purposes of data processing

The HSCG processes personal data for the purposes of issuing and sending invoices for services provided by it.

Legal basis

The processing of personal data takes place on the basis of Art. 6 para. 1 lit. b, e GDPR in conjunction with. § 3 SächsDSDG.

Categories of personal data

The HSZG processes the following personal data for the purposes of this processing activity:

  • First name, surname
  • Address and contact details
  • e-mail data
  • Invoice data
  • Bank details
  • Value added tax ID

Receiver

The personal data is regularly processed by employees of HSZG for the purposes of this data processing. The data is disclosed to the main cash office in Saxony.

The HSZG does not transfer personal data to a third country or an international organization.

Storage duration

The retention period for personal data is 10 years.

Rights of the data subjects

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

  • You have the right to information about the processing of your personal data(Art. 15 GDPR).
  • You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
  • You have the right to erasure of your personal data (Art.17 GDPR).
  • You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
  • You have the right to data portability of your personal data (Art.20 GDPR)
  • You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
  • You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
  • You have the right to lodge a complaint with the Saxon data protection officer
    (Art. 77 GDPR).

Provision of personal data

The provision of personal data is necessary for the fulfillment of a contractual obligation pursuant to Art. 13 para. 2 lit. e GDPR. If the personal data is not provided, the contract cannot be fulfilled in full.

Decision-making and profiling

This processing activity does not involve automated decision-making or profiling in accordance with
Art. 22 GDPR.