Time recording
Privacy notice pursuant to Article 13, subsections 1 and 2, of the General Data Protection Regulation (
, or GDPR) regarding time tracking at Zittau/Görlitz University of Applied Sciences (HSZG).
Person responsible for data processing
Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau
Please direct any inquiries regarding data processing to datenschutz(at)hszg.de
. Your inquiry will be forwarded to the appropriate department and processed promptly.
Data Protection Officer (DPO) of the controller
The data protection officer can be contacted at
DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden
Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de
Purposes of data processing
Personal data is processed for the following purposes:
Recording attendance and absence times
Recipients
The HSCG discloses personal data to the following recipients exclusively for the purposes of this processing activity:
Internal recipients: Supervisors, authorized employees DPR, HRZ, V-IT, Chancellor-related area, Staff Council (at the request of the respective employee)
External recipients: Access is only possible on a legal basis.
Third country: No
Legal basis
The processing of personal data is based on the following legal bases.
Art. 6 para. 1 lit. b GDPR; Art. 88 para. 1 GDPR; § 11 para. 1 SächsDSDG; § 16 (2) ArbZG; § 6 (1) SächsAZVO; service agreement on flexible working hours at the HSZG dated 31.01.2011 in the currently valid version
Categories of personal data
The following categories of personal data are processed for specific purposes.
Working hours, names, sick days, vacation days, time recording terminal used for logging in and out, personnel number, card number for terminal login, additional login name for online login
Storage duration
Personal data is subject to the following retention and deletion periods.
Data on attendance and absence times are stored until the end of the year following their collection in accordance with the service agreement on flexible working hours. They are then deleted within three months. Data on sick days and vacation days must be stored for at least 3 years.
Rights of the data subjects
As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met:
- You have the right to information about the processing of your personal data(Art. 15 GDPR).
- You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
- You have the right to erasure of your personal data (Art.17 GDPR).
- You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
- You have the right to object to the processing of your personal data (Art.21 GDPR)
- You have the right to lodge a complaint with the Saxon Data Protection Officer
(for contact details, see https://www.saechsdsb.de/n-kontakt).
Provision of personal data
Pursuant to Section 16 (2) ArbZG, the HSZG is obliged to record working hours in excess of the working day as defined in Section 3 sentence 1 ArbZG. Within the framework of the service agreement on flexible working hours at the HSZG dated 31.01.2011, as amended, this is only possible if employees provide their working time data for processing. According to § 6 para. 1 SächsAZVO, civil servants must regularly use time recording devices to determine their working hours. This does not apply to civil servant professors.
Decision-making and profiling
This processing activity does not involve automated decision-making or profiling in accordance with Art. 22 GDPR.