Outgoing invoices

Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau

Please send inquiries regarding data processing to informationssicherheit(at)hszg.de
Your request will be forwarded to the responsible department and processed promptly.

The data protection officer can be contacted at

DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden

Web.: www.dids.de
Tel.: +49 (0)351 / 655 772 - 0
E-Mail: datenschutz(at)hszg.de

The HSCG processes personal data for the purposes of issuing and sending invoices for services provided by it.

The processing of personal data takes place on the basis of Art. 6 para. 1 lit. b, e GDPR
in conjunction with § 3 SächsDSDG.

The HSZG processes the following personal data for the purposes of this processing activity:

• First name, surname
• Address and contact details
• e-mail data
• Invoice data
• Bank details
• Value added tax ID

The personal data is regularly processed by employees of HSZG for the purposes of this data processing. The data is disclosed to the main cash office in Saxony.

The HSZG does not transfer personal data to a third country or an international organization.

The retention period for personal data is 10 years.

As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.

• You have the right to information about the processing of your personal data(Art. 15 GDPR).
• You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
• You have the right to erasure of your personal data (Art.17 GDPR).
• You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
• You have the right to data portability of your personal data (Art.20 GDPR)
• You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
• You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
• You have the right to lodge a complaint with the Saxon data protection officer
  (Art. 77 GDPR).

The provision of personal data is necessary for the fulfillment of a contractual obligation pursuant to Art. 13 para. 2 lit. e GDPR. If the personal data is not provided, the contract cannot be fulfilled in full.

This processing activity does not involve automated decision-making or profiling in accordance with
Art. 22 GDPR.