Audit Family-Friendly University – Child Vacation Care

Privacy Policy according to the GDPR

Name and address of the official data protection officer

HWR Berlin

Vitali Dick (HiSolutions AG)

Badensche Str. 50/51

10825 Berlin

datenschutz@hwr-berlin.de

Controller according to GDPR

HWR Berlin

Office audit and Familienservice

Badensche Straße 52

10825 Berlin

fg-audit@hwr-berlin.de

Purposes of data processing

The personal data is collected and processed for the purpose of carrying out childcare and public relations work.

Processed personal data

Data categories Data types Affected categories Legal basis Required for
Base data Name first Name /

Address

Employee,

teachers,

students

Article 6 paragraph 1

(b) GDPR / §6

(1) 6 BerlHG

Fulfillment of contract / creation of an internal overview (who has how often from

Care offer made use of)

Master data 2 Email / Status Group (Prof. / MA / Students) Employee,

teachers,

Students

Article 6 paragraph 1

(b) GDPR

 

Performance of Contract
Information about the child Name Pre-Name Date of birth Children of

students

Article 6 para. 1 (b) GDPR Performance of Contract
Health data Responsible health insurance,

special instructions

(allergies, food intolerance or similar)

Children of

Employee, Teachers,

students

Article 9 para. 2 (a) GDPR Handling of special risks related to holiday care
Billing Information Account number, IBAN,

Account owner,

Purpose of use

Employee,

teachers,

students

Third

Account owner

Article 6 para. 1 (b) GDPR Performance of contract,

documentation of the payment,

Accounting duties

Health data Corona test result (positive / negative) children of

Employee,

teachers,

students

§14 (1) 1-3 BlnDSG in conjunction with §6a (2) SARSCoV-2-EindV. Implementation of 3G regulations Corona VO – Proof of a negative test result
photo records photographs of the children children of

Employee,

teachers,

students

Article 6 para. 1 (a) GDPR publication to

presentation purposes and

purposes of

Public relations work on the HWR Berlin website

If the processing is based on consent under Article 6 (1) a or 9 (2) b GDPR, there is neither a contractual nor any other obligation to provide the data. Consent is given on a voluntary basis and can be revoked at any time with effect for the future. Once the declaration of revocation has been received, the data may not be processed further. They will then be deleted immediately. The revocation of consent does not affect the legality of the processing that has taken place up to that point.

Storage of data and deletion periods

Data categories Data types Deletion periods
Base data Name; First name: Address 3 years after

Event execution

Master data 2 Status group (Prof. / MA /

students)

4 weeks after

event execution

Information about the child Name first Name,

birth date

4 weeks after

event execution

Health data Responsible health insurance company, special information (allergies, food intolerance

ten or similar)

4 weeks after

event execution

Photo records Video, audio,

photographs of the children

Until the consent is revoked,

however, a maximum of 10 years.

Health data Corona test result (positive /

negative)

There is no storage on the

HWR – deletion period is therefore immediate

Billing Information Account number, IBAN,

Account owner,

Purpose of use

Ten years

 

In addition, the data will be deleted as soon as the consent is revoked or the right to delete the data according to Art. 13 (2) b DSGVO is exercised.

Scope of processing of personal data 

In principle, we only process the personal data of our users to the extent that this is necessary.

Recipients or categories of recipients of the personal data

The master data and the information about the child are transmitted to the external provider of the holiday activity, the external care agency and, if necessary, to the external caterer.

Transmission of the data to a third country or an international organization 

A transfer of the above personal data to third countries outside the EU does not take place. However, data published on the HWR website can be accessed worldwide.

Automated decisions on a case-by-case basis, including profiling

Automated decisions in individual cases are not carried out.

Rights of the data subject

The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:

  • Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
  • Right to correction of data stored by the person responsible according to Art. 16 DSGVO
  • Right to deletion of data stored by the person responsible according to Art. 17 DSGVO
  • Right to restriction of processing of data stored by the person responsible Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 DSGVO
  • Right to data portability according to Art. 20 GDPR
  • Right to object to data processing if processing is required under Art. 6 (1) e GDPR to perform a task that is in the public interest or in the exercise of official authority or processing under Art. 6 (1) f GDPR is necessary to protect the legitimate interests of the person responsible or a third party according to Art. 21 DSGVO.
  • Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
  • Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.

Exercise of rights and right to complain 

You can exercise the above rights by sending us an email or a letter to:

In order to exercise the rights of the data subject, they can submit a request via our web portal at the following LINK [1] .

There is also the right to revoke the declaration of consent under data protection law at any time with effect for the future, whereby the revocation does not affect the legality of the data processing carried out on the basis of the consent up to the revocation (Art. 7 Para. 3 DSGVO). You can also withdraw your consent via the link above.

The person concerned also has the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is.

 

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219

10969 Berlin

mailbox@datenschutz-berlin.de

 

[1] https://dsgvo2.ds – manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9  

Diese Webseite verwendet ausschließlich technisch notwendige Cookies. Eine Einwilligung des Nutzers ist demnach nicht erforderlich. This website only uses technically necessary cookies. The consent of the user is therefore not required .