IT Application – Library Management System

Responsible

Berlin University of Economics and Law

Badensche Strasse 52

10825 Berlin (Germany)

praesident@hwr-berlin.de

Legal representatives:

Prof. Dr. Andrew Zaby

Data Protection Officer:

Vitali Dick (HiSolutions AG)

Badensche Strasse 52

10825 Berlin (Germany)

datenschutz@hwr-berlin.de

Information on the processing activity

Purposes of the processing activity:

Mapping of HS library processes and procedures using IT applications, application administration, user management, logging

Categories of processed personal data:

Lending and movement data

base data

cookie data

log data

Legal basis of the processing activity:

User : The processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller. The legal basis is Art. 6 (1) e GDPR. The processing is required for the use of university facilities in accordance with Section 6 (1) 6 BerlHG.
Administration of the application by employees : §88 GDPR in conjunction with §26 BDSG

Log files, activity logs : The processing is necessary to fulfill a legal obligation. The legal obligation consists of implementing technical security measures and investigating security incidents. The legal basis is Art. 6 (1) e GDPR in conjunction with Art. 32 GDPR and Section 26 (3) BlnDSG

Categories of recipients:

Processor (processor within the meaning of Art. 4 No. 8 DS-GVO in conjunction with Art. 28 DS-GVO)

Contractor (processor):

Bavarian State Library (Munich)

Data transfer to a third country:

There are no planned transfers to third countries.

Additional information requirements:

Duration of storage of personal data:

Students: 150 days after exmatriculation or completion of studies;

External users of the university library: 3 years of user inactivity

Employees, teachers: immediately after notification   [1] https://dsgvo2.ds-manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9of leaving the service

Rights of the data subject:

The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:

• Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
• Right to correction of data stored by the person responsible (HWR Berlin) according to Art. 16 DSGVO
• Right to erasure of data stored by the person responsible (HWR Berlin) in accordance with Art. 17 GDPR
• Right to restriction of processing of data stored by the person responsible (HWR Berlin) in accordance with Article 18 GDPR
• Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 DSGVO
• Right to data portability according to Art. 20 GDPR
• Right to object to data processing if processing is required under Art. 6 (1) e GDPR for the performance of a task that is in the public interest or in the exercise of public authority under Art. 21 GDPR.
• Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
• Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.

exercise of rights

If you would like to exercise your rights, please contact the data protection officer named above or submit the request using the link .[1]

right of appeal

The person concerned also has the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219

10969 Berlin

mailbox@datenschutz-berlin.de

Obligation to provide personal data:

The data subject is obliged to provide the personal data.

Consequences of non-provision:

Library resources cannot be used without a user account.

Automated Decision Making:

There is no automated decision-making or profiling.

[1] https://dsgvo2.ds-manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9