Event management

Data protection information in accordance with Article 13 of the General Data Protection Regulation (GDPR ) on event management at the Zittau/Görlitz University of Applied Sciences (HSZG).

Person responsible for data processing

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please direct any inquiries regarding data processing to
Your request will be forwarded to the responsible department and processed promptly.

Data protection officer of the controller

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Tel.: +49 (0)351 / 655 772 - 0
E-Mail:

Purpose of data processing

You can register for events at via registration lists or on the subpages of hszg.de via online forms. If you enter or enter information in the list or input fields provided for this purpose and submit the form, this data will be transmitted to us, stored and processed by us.

The personal data that you voluntarily provide to us will be processed for the following purposes:

  • Organization and implementation of events
  • Creation of participant lists and name badges
  • Confirmation of registration
  • authentication
  • Obtaining feedback on the event
  • Creation of confirmations of attendance and certificates of attendance
  • Preparation of invoices for chargeable events
  • Settlement of representation expenses

Legal basis

Free events

If you register for a free event, the data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent.

Events subject to a fee

If you register for a paid event, the data processing is carried out in accordance with Art. 6 para. 1 lit. b GD PR on the basis of a contract.

Recipients

The HSZG discloses the registration data to the following recipients exclusively for the purposes of this processing activity:

  • Funding providers (financing of the event via third-party funded projects)
  • Funding bodies for sponsoring services

The HSZG does not transfer personal data to a third country or an international organization.

Storage duration

Without prejudice to the right to erasure(Art. 17 GDPR), personal data will be stored for an appropriate period of time for the purposes for which it was collected at . This classification is the responsibility of the specialist department.

In the case of chargeable events, the storage period results from the retention periods of the funding bodies and the legislator (in particular from the German Commercial Code (HGB) and the German Fiscal Code (AO)).

Rights of the data subjects

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

  • You have the right to information about the processing of your personal data(Art. 15 GDPR).
  • You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
  • You have the right to erasure of your personal data (Art.17 GDPR).
  • You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
  • You have the right to data portability of your personal data (Art.20 GDPR)
  • You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
  • You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
  • You have the right to lodge a complaint with the Saxon data protection officer
    (for contact details, see https://www.saechsdsb.de/n-kontakt).

Provision of personal data

The provision of personal data is not required by law, but it is necessary for the conclusion of the contract in the case of chargeable events in accordance with(Art. 13 para. 2 lit. e GDPR).

Failure to provide your personal data excludes you from the fulfillment of their respective collection purposes (eg: Event participation, catering, issue of participation certificates).

Decision-making and profiling

No automated decision-making or profiling in accordance with Art. 22 GDPR is carried out in the "Event management" processing activity.