for data subjects when collecting personal data
for
the “Talenteletter” of the BTU Cottbus-Senftenberg job exchange
Personal data is collected as part of the “talent newsletter” of the job exchange, which you can find in the data protection consent.
As part of the above-mentioned procedure, the Brandenburg University of Technology Cottbus - Senftenberg (BTU) also processes personal data, i.e. information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). In the interest of legal data protection rights and a transparent and comprehensible organization of data processing, BTU provides the following information:
Name and contact details of the controller and its legal representative
(Art 13 I a GDPR)
Brandenburg University of Technology Cottbus - Senftenberg (BTU)
represented by the President Prof. Dr. Gesine Grande
Platz der Deutschen Einheit 1, 03046 Cottbus
Phone: +49 (0)355 69-2283
Fax: +49 (0)355 69-2156
Email: praesidentin@b-tu.de
Contact details of the Data Protection Officer
(Art 13 I b GDPR)
Brandenburg University of Technology Cottbus - Senftenberg (BTU)
The Data Protection Officer - Mr. Sergey Romanov
Konrad-Wachsmann-Allee 5, 03046 Cottbus
Phone: +49 (0) 355 69-2112
Email: datenschutz@b-tu.de
Purpose and legal basis of the processing
(Art. 13 I c GDPR)
Purpose:
- Matching students with employers to improve the transition structures from study to practice
Legal basis:
- Consent of the data subject (Art. 6 I a GDPR)
- Performance of tasks of BTU (Art. 6 I c, e, GDPR in conjunction with §3 I "Brandenburg Higher Education Act)
If BTU uses the support of processors for data processing, the disclosure to the processor for the purpose of carrying out the processing is based on and within the scope of Art. 28, 29 GDPR.
Processing in accordance with Art. 6 I f GDPR
(Art. 13 I d GDPR)
Art. 6 I f GDPR does not apply to the fulfillment of public tasks of BTU.
Recipients of personal data
(Art 13 I e GDPR)
- BTU employees who are responsible for processing the process
- BTU employees who exercise control and management functions as part of their control and management tasks (data protection officer, internal audit, faculty and university management, etc.)
- Funding and other third-party funding providers including their representatives (project sponsors, experts, examiners, etc.) in accordance with the funding and grant regulations
- Processors
- External employers who participate in the Talent Letter and are registered in the BTU Job Exchange for the data of students with whom a match is made. In the course of this, the employers agree not to pass on personal data
- Students who participate in the talent letter and are registered in the BTU job exchange, for the data of the employers with whom a match is made
The data is processed at BTU by the responsible structural unit. Data is disclosed within the BTU to the responsible employees who, as public service employees or civil servants, are obliged to maintain confidentiality.
Transfer to third countries and international organizations
(Art. 13 I f GDPR)
BTU does not transfer personal data to a third country or an international organization.
Storage period of the data
(Art. 13 II a GDPR)
The storage period is determined by the following criteria:
The data is only stored at BTU for as long as this is necessary for the processing purpose, in particular for processing, legal documentation and as evidence of the process and there is a legal basis for storage. If the purpose of processing or the legal basis ceases to apply, the personal data will be deleted immediately (Art. 17 GDPR). If the processing is based on the consent of a data subject, the data will be erased immediately as soon as the data subject withdraws their consent and there is no other legal basis for the processing (Art. 17 GDPR).
In particular, the following criteria for determining the storage period and erasure are important for the data processing of the above-mentioned procedure:
- Users can delete their profile or individual data at any time on their own responsibility
- Inactive profiles will be deactivated after 12 months by the Career Center and Dual Studies Office after two requests.
- Documents relevant to funding law are stored in accordance with the usage and funding requirements of the grant notifications.
- Technically necessary data is stored for as long as is necessary for the technical processing of the procedure and the checking of errors/malfunctions.
Rights of the data subject
(Art. 13 II b GDPR)
Every person affected by data processing has the following explicit rights under the GDPR:
- Right to information (Art. 15 GDPR)
The data subject has the right to obtain confirmation from BTU as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information to be provided in accordance with Art. 15 GDPR.
If personal data is transferred to a third country or to an international organization, the data subject has the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
- Right to rectification (Art. 16 GDPR)
The data subject shall have the right to obtain from BTU without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to erasure (Art. 17 GDPR)
The data subject has the right to obtain from BTU the erasure of personal data concerning him or her without undue delay where one of the legal grounds for erasure specified in Art. 17 GDPR applies.
- Right to restriction of processing (Art. 18 GDPR)
The data subject has the right to obtain from the BTU restriction of processing where one of the conditions set out in Art. 18 GDPR applies.
- Right to object to the processing (Art. 21 GDPR)
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6 I e or f GDPR, including profiling based on those provisions. The BTU shall no longer process the personal data unless the BTU demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
The data subject has the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her for scientific or historical research purposes or statistical purposes pursuant to Article 89 I GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
- Right to data portability (Art. 20 GDPR)
Where processing is based on consent or on a contract, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the BTU, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the BTU, where the conditions of Art. 20 GDPR are met.
Right of withdrawal
(Art 13 II c GDPR)
If the processing is based on consent (Art. 6 I a or Art. 9 II a GDPR), the data subject has the right to withdraw consent at any time. This also applies to consent given before the GDPR came into force. This does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal; i.e. the withdrawal only applies to the future.
Right to lodge a complaint
(Art. 13 II d GDPR)
A data subject has the right to lodge a complaint with a supervisory authority. This right to lodge a complaint exists, for example, under Art. 77 GDPR if the data subject considers that the processing of personal data relating to them infringes the GDPR. In particular, the supervisory authority of the state of Brandenburg is responsible for BTU:
The State Commissioner for Data Protection and the Right of Access to Files Brandenburg
Dagmar Hartge
Stahnsdorfer Damm 77, 14532 Kleinmachnow
Telephone: 033203/356-0
Telefax: 033203/356-49
Email: Poststelle@LDA.Brandenburg.de
Consequences of non-provision
(Art 13 II e GDPR)
Participation in the talent letter is completely voluntary for you. Non-participation has no consequences for you. Please note that no matching can take place without certain mandatory information. The mandatory information can be found in the data protection consent.
Information provided on a purely voluntary basis is not required by law or contract. No one is obliged to provide them and failure to provide the voluntary information will have no further consequences.
Automated decision-making including profiling
(Art. 13 II f GDPR)
No profiling takes place as part of the talent letter. However, matching is based on automated decision-making.