Privacy Policy on Events of the Bonn Graduate Center and Human Resources Development & Careers

University of Bonn
Department 3
Regina-Pacis-Weg 3
53113 Bonn
0228-73-1234

Data Protection Officer:
N.N.
Genscherallee 3
53113 Bonn
E-Mail: datenschutz@uni-bonn.de

Representative:
Eckhard Wesemann
Department 1, Abt. 1.0
Regina-Pacis-Weg 3
53113 Bonn
E-Mail: wesemann@verwaltung.uni-bonn.de

Your personal data will be processed in accordance with the requirements and provisions of the European Data Protection Regulation (EU-DS-GVO) and the NRW State Data Protection Act (DSG NRW), insofar as this is necessary for cRM Event Management at Rheinische Friedrich-Wilhelms-Universität.

The personal data will be deleted as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the responsible party is subject. Data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data to document participation in internal training courses and events. We store your personal data beyond this only to the extent that this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

1. The MA(s) register for a selected event using a registration form created with the Lucom form server via the seminar announcement.
2. The data of the employee(s) is forwarded directly via the form to the cRM and is available there.
3. The administration (confirmation mail, invitation to the event, attendance list, waiting list, feedback) is controlled in cRM by the clerks. For this purpose, responsibilities are defined by a feature, so that the clerk can only access the events that are in his area of responsibility.
4. Controlling lists can be generated from cRM, from which the anonymous attendance data can be seen.
5. Participant data is deleted in accordance with legal requirements. It is possible at any time to provide employees with information about which of their data is stored in cRM - integrated DS-GVO conformity.

Personal data is not transferred to third parties.

Responsible party for software maintenance within the meaning of the DS-GVO for the cRM event management system:

Combit Software GmbH
Bücklestraße 3-5
78467 Konstanz
Deutschland
T +49 7531 9060-10
F +49 7531 9060-18
service@combit.net
www.combit.net

You have the right,

• to request information about your personal data processed by the aforementioned controller in accordance with Art. 15 DS-GVO. In particular, you can request information about
  
  • the purposes of processing,
  • the category of personal data,
  • the categories of recipients to whom your data have been or will be disclosed,
  • the planned storage period or, if concrete information on this is not possible, criteria for determining the storage period,
  • the existence of a right to rectification, erasure, restriction of processing or objection,
  • the existence of a right of appeal,
  • the origin of your data, if it was not collected by the aforementioned controller,
  • sowie über das etwaige Bestehen einer automatisierten Entscheidungsfindung und ggf. aussagekräftige Informationen zu deren Einzelheiten verlangen;
• as well as about the possible existence of automated decision-making and, if applicable, meaningful information about its details;
• pursuant to Art. 17 DS-GVO, to request the deletion of your personal data stored by the aforementioned controller. This does not apply if,
  • for processing for the exercise of the right to freedom of expression and information,
  • for compliance with a legal obligation to which the controller is subject,
  • for reasons of public interest,
  • for the assertion, exercise or defense of legal claims, or
  • for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89 (1) DS-GVO, insofar as the erasure of the data is likely to render impossible or seriously prejudice the purposes of such processing,

the further storage of the data is necessary;

• pursuant to Art. 18 DS-GVO under the conditions specified therein, to request the restriction of the processing of your personal data;
• pursuant to Art. 20 DS-GVO, under the conditions specified therein, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and
• complain to a supervisory authority in accordance with Art. 77 DS-GVO, without prejudice to any other administrative or judicial remedy. The competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen,
Postfach 20 04 44,
40102 Düsseldorf.
Tel.: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw.de

University of Bonn
Research and Innovation Services - Bonn Graduate Center
Poppelsdorfer Allee 47
D-53113 Bonn
Email: graduiertenzentrum@uni-bonn.de
Phone: 0228 73-60141 

Official data protection officer:
N.N.
Genscherallee 3
D-53113 Bonn
Email: datenschutz@uni-bonn.de

Deputy:
Eckhard Wesemann
Dezernat 1
Regina-Pacis-Weg 3
D-53113 Bonn
Email: wesemann@verwaltung.uni-bonn.de

Doctorate plus 
Your personal data are collected, stored and processed to allow for the handling and administration of registration, cancellations, waiting list including the provision of information on the status of your request by email for our workshops by the Bonn Graduate Center Team. If you participate in one of our workshops your data will also be supplied to the course intructor as well as used to compile certificates of attendance and - in some cases - provide course material such as readers or presentations. If you, upon successful aquisition of a certificate, apply for an add-on within one of the three career tracks, your personal data, including your CV, will be supplied to the coach or host unit. Your data are processed in accordance with Art. 6 (1) sentence 1 lit. (a) GDPR. The personal data collected from you will be erased as soon as the purpose of storage ceases to apply.

Newsletter Bonn Doctoral Bulletin 
Your personal data are collected, stored and processed to allow for the dispatch of our newsletter. The subscription to our free newsletter can be cancelled by the affected user at any time. There is a corresponding link in every newsletter for this purpose.Your data are processed in accordance with Art. 6 (1) sentence 1 lit. (a) GDPR. The personal data collected from you will be erased as soon as the purpose of storage ceases to apply.

Cooperation
You are not obliged to provide your data in accordance with the aforementioned legal provisions or regulations. If you do not communicate or make the data available to the aforementioned controller, the following consequences will arise:

a. you will not be able to register for and particpate in the Doctorate plus programm
b. you will not be able to receive our newsletter Bonn Doctoral Bulletin

You have the right,

• to revoke your consent at any time in accordance with Art. 7 (3) GDPR to the controller stated above. As a result, data processing that was based on this consent may no longer continue in the future;
  
  
• pursuant to Art. 15 GDPR, to request information about your personal data processed by the controller. In particular, you can obtain information on the processing purposes,the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of the storage or, if specific information on this is not possible, the criteria for determining the storage period, the existence of a right to correction, erasure, restriction of processing or objection, the existence of a right to lodge a complaint,
  the origin of your data, unless these were collected by the aforementioned controller, and the possible existence of automated decision-making, including profiling and, where applicable, meaningful information on the details of this;
  
  
• pursuant to Art. 16 GDPR, to immediately request the rectification of incorrect or incomplete personal data stored by the aforementioned controller.
  
  
• pursuant to Art. 17 GDPR, to demand the erasure of your personal data stored by the aforementioned controller. This does not apply if longer storage of the data is required forprocessing to exercise the right to freedom of expression and information, to fulfil a legal obligation to which the controller is subject, for reasons of public interest to assert, exercise or defend legal claims or for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the erasure of the data is likely to render impossible or seriously impair the attainment of the objectives of such processing.
  
  
• pursuant to Art. 18 GDPR, to restrict the processing of your personal data under the conditions stated therein;
  
  
• pursuant to Art. 20 GDPR, under the conditions stated therein, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to demand transmission of those data to another controller and
  
  
• to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, without prejudice to any other administrative or judicial remedy. The competent supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, PO Box 20 04 44, D-40102 Düsseldorf.