Information of the persons concerned
Conducting surveys and evaluations – Evaluation system (EvaSys)
Information of the persons concerned (employees)
(Art. 14 DS-GVO in conjunction with § 23 BlnDSG)
Controller:
Berlin School of Economics and Law
Badensche Str. 52
10825 Berlin (Germany)
praesident@hwr-berlin.de
www.hwr-berlin.de
Legal representative:
Prof. Dr. Andreas Zaby
Data Protection Officer:
Vitali Dick (HiSolutions AG)
Tel: 030 – 30877 2552
E-mail: datenschutz@hwr-berlin.de
Details of the processing activity:
Purposes of the processing activity:
- Carrying out the evaluation of courses.
- Conducting surveys of the ZaQ (Allbest, alumni surveys)
- Conducting internal surveys in connection with employees or teaching staff (e.g. on online semesters, on working in a home office, etc.)
- Fulfilment of obligations from BlnStudAkkV / §8 (2) BerlHG and serves the accreditation or the HWR quality management system.
- Fulfilment of obligations according to the HWR Berlin Evaluation Statutes.
Legal basis of the processing activity:
The processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller.
The processing is necessary for the performance of tasks of the university.
The legal basis is BlnStudAkkV / §8 (2) BerlHG / §6 (1) 12 BerlHG / Evaluation Statutes HWR Berlin and serves the accreditation or the HWR quality management system.
Categories of personal data:
- Survey data (contents of survey questionnaires / individual questions).
- Cookie data (technically necessary session cookies)
- Protocol data – server (host – IP address of the client, identifier of the client, HTTP request of the client)
- Master data (surname, first name, e-mail address))
Categories of recipients:
For maintenance purposes, access may be granted by the HWR Information and Communication Technology.
Data transfer to a third country:
There is no planned transfer to third countries.
Additional information requirements:
Storage period of personal data:
- 10 years for raw survey data
- 2 years for master data for alumni surveys
- 6 months for master data for student surveys / teaching evaluations – 30 days for server log data
- Until the end of the session for cookie data (the token or cookie is deleted after the end of the respective browser session).
Rights of the data subject:
- Duty to inform when personal data is collected under Art. 13 GDPR.
- Duty to provide information if the personal data was not collected from the data subject pursuant to Art. 14 DSGVO
- Right to information about data stored by the data controller (HWR Berlin) according to Art. 15 DSGVO
- Right to rectification of data stored by the data controller (HWR Berlin) pursuant to Art. 16 DSGVO
- Right to have data stored by the data controller (HWR Berlin) deleted pursuant to Art. 17 DSGVO
- Right to restriction of processing of data stored by the data controller (HWR Berlin) pursuant to Art. 18 DSGVO
- Obligation to notify in connection with the correction or deletion of personal data or the restriction of processing pursuant to Art. 19 DSGVO
- Right to data portability according to Art. 20 DSGVO
- Right to object to data processing where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority pursuant to Art. 6 (1) e DSGVO or where the processing is necessary for the purposes of safeguarding the legitimate interests of the controller or a third party pursuant to Art. 21 DSGVO.
- Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
- Right to be notified under Article 34 GDPR of a personal data breach.
If you wish to exercise your rights, please contact the Data Protection Officer mentioned above.
Source of personal data:
Direct collection (The data was collected directly from the data subject).
Right to complain:
You have a right to complain, to the Berlin Commissioner for Data Protection and Information Security.
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de
Obligation to provide personal data:
Provision of email addresses for the sending of participation links according to
Evaluation Statutes. Participation in the surveys is voluntary.
Automated decision-making:
There is no automated decision-making or profiling.