Privacy Policy
Data protection processes – Data Protection Management
Controller:
Berlin University of Economics and Law
Badensche Str. 52
10825 Berlin (Germany)
praesident@hwr-berlin.de
Legal representative:
Prof. Dr. Andrew Zaby
Data protection officer:
Vitali Dick (HiSolutions AG)
Badensche Str. 52
10825 Berlin (Germany)
datenschutz@hwr-berlin.de
Information on the processing activity:
Purposes of the processing activity:
Advising university members on all data protection issues
- Project support for procurement projects for services, IT systems and IT applications
- Advice on strategies of the HWR Berlin for the protection of personal data
- Data protection assessment of facts from the university context / preparation of data protection statements
- Assignment of data protection responsibilities / establishment of a suitable one
Data protection organization / data protection management
- Awareness raising and training of those involved in the processing operations employees
- Internal and external communication regarding data protection
- Internal and external committee work (e.g. group of Berlin data protection officers)
- Advice on research collaborations, especially on joint responsibility
- Cooperation with the supervisory authority and contact point for them
- Development of organizational instructions (guidelines, handouts and leaflets) – implementation of internal/external data protection audits
Legal basis of the processing activity:
The processing is required for the organization of research and studies in accordance with Section 6 (1) 2 BerlHG and to fulfill a legal obligation in accordance with Article 6 (1) (c) GDPR. The legal obligation results from the requirements for the implementation of the GDPR, in particular the accountability.
Categories of personal data:
Reference (content data, the relevant activity. These are in other called processing directories.)
Master data (master data (surname, first name, business telephone number, business e-mail))
Categories of recipients:
supervisory authority (supervisory authority)
Processor (processor within the meaning of Art. 4 in conjunction with Art. 28 GDPR)
Employees of external clients (employees of external clients)
Employees of external service providers (employees of external service providers)
Employees of partner universities (Employees of partner universities)
Data Protection Officer (Data Protection Officer)
Internal (Internal Department)
Other External (Other External Bodies)
Data transfer to a third country:
There are no planned transfers to third countries.
Additional information obligations:
Duration of storage of personal data:
5 years – starting time is the end of the calendar year.
Rights of the data subject
The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:
- Information obligation when collecting personal data according to Art. 13 DSGVO
- Information obligation if the personal data was not collected from the person concerned according to Art. 14 DSGVO
- Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
- Right to correction of data stored by the person responsible (HWR Berlin) according to Art. 16 DSGVO
- Right to erasure of data stored by the person responsible (HWR Berlin) in accordance with Art. 17 GDPR
- Right to restriction of processing of data stored by the person responsible (HWR Berlin) in accordance with Article 18 GDPR
- Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to object to data processing if processing is required under Art. 6 (1) e GDPR to perform a task that is in the public interest or in the exercise of official authority or processing under Art. 6 (1) f GDPR is necessary to protect the legitimate interests of the person responsible or a third party according to Art. 21 DSGVO.
- Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
- Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.
Right of providing information
You can request confirmation from the HWR as to whether personal data relating to you is being processed by us.
Exercise of Rights
If you would like to exercise your rights, please contact the data protection officer named above or submit the request using the link . [1] Right to Complain
The person concerned also has the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de
Obligation to provide personal data:
The data subject may be obliged to provide the data.
Automated Decision Making:
There is no automated decision-making or profiling.
[1] https://dsgvo2.ds – manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9