Privacy policy

Data Protection Information

  1. Name and address of the controller

Universität Erfurt
- Der Präsident –
Nordhäuser Straße 63
99089 Erfurt
E-Mail: praesident@uni-erfurt.de

  1. Data protection officer

The data protection officer
Nordhäuser Straße 63
99089 Erfurt
E-Mail: datenschutz@uni-erfurt.de

  • Specific information on data processing

  1. Scope and purpose of data processing

The following personal data is processed by the controller:

(1)  Name

(2)  Address

(3)  Contact information

Personal data will only be processed to the extent necessary for the organization of ICCA14.

The processing of personal data only takes place on the basis of a consent:

Please select an element

Data processing is carried out exclusively for the above-mentioned purpose. Further processing for other purposes therefore does not take place.

  1. Legal basis for the processing of personal data

The processing of personal data takes place on the basis of Art. 6 Abs. 1 lit. b DSGVO.

  1. Duration of storage

Personal data is only stored for as long as is necessary. As soon as the purpose of the data processing has been achieved or ceases to apply, the data will be deleted immediately, unless there is a statutory retention period..

  1. Rights of the data subject to art. 12 – 23 GDPR 
  1. Right to information

You can request confirmation from the controller at any time as to whether or which personal data concerning you is being processed.

You can request the following information:

  1. a) the purpose of the data processing
  2. b) Categories of personal data
  3. c) Recipients of the data stored about you
  4. d) duration of storage
  5. e) Existence of a right to rectification, erasure of personal data or restriction of processing
  6. f) Existence of a right to lodge a complaint with the supervisory authority
  7. g) Origin of the data, if it was not collected directly from you

 

  1. Right to correction

You have the right to have your personal data rectified or completed if it is incorrect or incomplete.

The controller must make the correction without delay.

  1. Right to restriction of processing

Sie können die Einschränkung der Datenverarbeitung unter folgenden Voraussetzungen verlangen:

  1. You can request the restriction of data processing under the following conditions:
  2. if you contest the accuracy of the personal data
  3. the processing is unlawful and you oppose the erasure of the data
  4. the controller no longer needs the data for its purposes, but you require the data for the establishment, exercise or defense of legal claims
  5. if you object to the processing acc.
  6. 21 para. 2 GDPR, but it is not yet certain whether this can be granted

  7. Right to erasure
    • Obligation to erase

You can request the controller to erase your personal data without undue delay.
The controller is obliged to erase your personal data without undue delay if one of the grounds specified in Art. 17 GDPR applies:

  1. a) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  2. b) You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
  3. c) The personal data concerning you has been processed unlawfully.
  4. d) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
  5. e) The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

  • Exceptions

The right to erasure does not exist insofar as the processing is necessary

  1. a) for exercising the right of freedom of expression and information
  2. b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  3. c) for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
  4. d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
  5. e) for the establishment, exercise or defense of legal claims
  1. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

  1. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures that use technical specifications.

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

  1. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.