Student Council of Electrical Engineering and Information Technology
Student Council EE/IT
Student Council of Electrical Engineering and Information Technology 

Supplementary Privacy Policy of the Student Council ET/IT

In addition to the general privacy policy (https://www.tu-chemnitz.de/tu/datenschutz.html) of Chemnitz University of Technology

Data protection and data security are very important to us. Therefore, and to fulfill our duty to inform you, you will find below how we, the Student Council ET/IT at Chemnitz University of Technology, process personal data, meaning information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). The following informs you as a participant in our events about the nature, scope, and purpose of the data processing (e.g., data collection, storage, etc.) that we carry out.

For better readability, gender-specific language forms are not used in this privacy policy. All personal designations apply equally to all genders. Please use @ instead of (x) for the specified e-mail addresses.

I. Name and contact details of the responsible party

The responsible party in terms of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Chemnitz University of Technology
represented by the Rector: Prof. Dr. Gerd Strohmeier
Straße der Nationen 62
09111 Chemnitz, Germany

Email: rektor(x)tu-chemnitz.de
Phone: +49 371 531-10000
Fax: +49 371 531-10009
Web: https://www.tu-chemnitz.de

If you have any questions regarding this supplement to the privacy policy of Chemnitz University of Technology or if you wish to exercise your rights, you can contact our data protection officer (contact details below) directly or, preferably by email, contact us at:

Student Council Electrical Engineering and Information Technology
Chemnitz University of Technology
09107 Chemnitz, Germany

Email: fsretit(x)tu-chemnitz.de
Phone: +49 371 531-16400
Web: https://www.tu-chemnitz.de/stud/fs/et-it

II. Contact details of the data protection officer

The data protection officer of Chemnitz University of Technology is:

Ines Maria Tacke
Thüringer Weg 7
09126 Chemnitz, Germany

Email: datenschutzbeauftragter(x)tu-chemnitz.de
Phone: +49 371 531-12030
Fax: +49 371 531-12039
Web: https://www.tu-chemnitz.de/rektorat/dsb/

III. Registration for events of the Student Council ET/IT

1. Description and scope of data processing

The scope of the data processing described below refers to the registration and implementation of the events of the Student Council ET/IT. When a user registers for these events via our website, personal data is transmitted to us and stored. For the processing of the (personal) data, the consent of the data subject is first obtained, and reference is made to this privacy policy.

When registering via the Web-Trust-Center (WTC) of Chemnitz University of Technology (i.e., with an existing URZ user account), the following data is transmitted to us:

  • User ID
  • Email address
  • Name
  • Affiliation (e.g., faculty affiliation)
  • User status at Chemnitz University of Technology (student or staff)
  • Content data (e.g., text and form entries)

For registration not via the WTC of Chemnitz University of Technology, the following data must be provided:

  • Email address
  • Name

The processing of personal data is carried out by the following named natural/legal persons: Chemnitz University of Technology, Student Council ET/IT. There is no transfer of personal data to third parties not named here, nor is there any transmission to another EU country or to a third country or an international organization.

2. Legal basis for data processing

The legal basis for processing the data is generally the consent of the data subject in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

3. Purpose of data processing

The processing of personal data is solely for handling your registration, particularly for the organization and planning of our events. No automated decision-making, including profiling, takes place.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For the collected personal data for event registration, this is the case when the respective event, including its follow-up, is completed (no later than two years after the event date).

5. Withdrawal and removal options

If the processing of personal data as part of event registration via our registration form is based on consent, this consent is voluntary, i.e., free from coercion and pressure, and can be withdrawn at any time, entirely or separately, without stating reasons and without undue disadvantage with effect for the future. To exercise your withdrawal, please send us an email to the email address fsretit@tu-chemnitz.de. The withdrawal of consent is as simple as granting consent. The withdrawal of consent and the resulting deletion of all (personal) data entered in the input mask stored during registration do not affect the legality of the processing carried out based on the consent until the withdrawal. However, in the event of a withdrawal against processing or the non-provision of personal data during registration for an event, participation in the event can no longer be guaranteed.

6. Legal/contractual requirements for the provision of personal data and consequences of non-provision

We also inform you that the provision of personal data for the above purpose is neither legally nor contractually required nor necessary for the conclusion of a contract, and you are not obliged to provide personal data. However, the non-provision of your personal data for the above purpose would mean that participation in our events is not possible, as these may have limited participant numbers and therefore a binding registration is required.

IV. Processing of image, sound, and video recordings

The following provides detailed information on the processing of image, sound, and video recordings according to our information obligations under Art. 13 GDPR. Please note that the following information always refers exclusively to events of the Student Council ET/IT at Chemnitz University of Technology.

1. Description and scope of data processing

Chemnitz University of Technology, especially members of the Student Council ET/IT, intends to make recordings of the depicted persons/event participants, such as pictures, videos, or other media, and to use them for event documentation/post-processing as well as for their press and public relations work. This includes, depending on the consent declaration given, publications on social media channels or the Internet. Commercial use is not intended. The email address and telephone number are required to contact you for coordination of the use of the recordings if necessary.

2. Legal basis for data processing

The legal basis for processing/transmitting your personal data for the purposes mentioned is, in these cases, regularly, provided such has been separately given in advance (not within the framework of event registration), your consent according to Art. 6 para. 1 sentence 1 lit. a) GDPR (Art. 85 GDPR in conjunction with § 22 KUG).

The legal basis for data processing (especially creation and storage of the recordings) is independent of a present consent declaration Art. 6 para. 1 sentence 1 lit. f) GDPR, i.e., data collection is necessary to safeguard our legitimate interests in event documentation/post-processing (press and public relations work). We could not determine any overriding interests or fundamental rights and freedoms on your part as a data subject that require the protection of personal data unless, for example, the data subject is a child.

3. Purpose of data processing

Chemnitz University of Technology, especially members of the Student Council ET/IT, intends to make recordings of the event participants, such as pictures, videos, or other media, and to use them for their press and public relations work. The recordings are made for Chemnitz University of Technology, especially for the Student Council ET/IT, and are used for online and print marketing purposes for an indefinite period.

If the photographer of Chemnitz University of Technology transfers the right of use of your recording, Chemnitz University of Technology receives the exclusive right, which can be transferred solely by Chemnitz University of Technology, to reproduce the recording itself or through third parties, to publish, alter, edit, and/or redesign it by the media covered by the consent, and to grant any usage rights to third parties for all types of use at its discretion. The types of use particularly include distribution, reproduction, and exhibition rights as well as performance, lecture, and broadcasting rights, the rights of reproduction by picture, sound, and data carriers or in film and radio broadcasts. Excluded from this is the use in a derogatory or defamatory manner. The photographer receives no usage rights to the recording beyond the right of transfer to Chemnitz University of Technology, area of events and merchandising.

4. Recipients / Categories of recipients

The processing of personal data in this context is generally only carried out by the following named natural/legal persons: Chemnitz University of Technology, especially members of the Student Council ET/IT. Depending on the options selected by you (consent declaration), your personal data (recordings) may also be transmitted to:

  • selected printing companies that create (print) publications on behalf of TUC,
  • Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland),
  • Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA),
  • Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA),
  • Instagram (Instagram Inc., 160

The personal data will not be disclosed to other third parties not mentioned here, nor will it be transferred to another EU country, a third country, or an international organization, unless otherwise specified below.

5. Transfer to a Third Country

The legal basis for the transfer of your personal data to a third country is – if applicable – your consent pursuant to Art. 6(1)(1)(a) GDPR within the framework of the transfer operations to:

  • Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland,
  • Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland,
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube),
  • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA).

The transfer of personal data to a third country or an international organization may also only take place if, among other things, the European Commission has decided that the third country in question, a territory, or one or more specific sectors in that third country or the international organization in question ensures an adequate level of protection. Such a data transfer does not require any special authorization in this case. For the aforementioned companies, an adequate level of protection is currently ensured on the basis of the US-EU Privacy Shield. According to this, such a level of protection is initially presumed for all companies that have certified themselves according to the requirements of the US-EU Privacy Shield:

  • Facebook Ireland Limited (USA, California, San Jose): www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active#participation
  • Twitter International Company (USA, California, San Francisco): www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active#participation
  • Google Ireland Limited (USA, California, Mountain View): www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active#participation
  • Instagram Inc. / Facebook Inc. (USA, California, San Jose): www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active#participation

The conditions of Art. 45 GDPR (data transfer on the basis of an adequacy decision) are thus met for the aforementioned transfer operations to a third country. Therefore, the transfer of personal data to the aforementioned external companies and thus to third countries is permissible because the controller and the processor comply with the conditions laid down in Art. 44 et seq. GDPR as well as the other provisions of the GDPR. This ensures that the level of protection for natural persons guaranteed by the GDPR is not undermined.

However, we would like to point out purely as a precaution that the transfer of personal data to a third country or to an international organization based on the US-EU Privacy Shield is currently viewed critically in some cases. According to Art. 49(1)(1)(a) GDPR, a data transfer is nevertheless permissible if you have expressly consented to the proposed data transfer after being informed of the possible risks for you of such data transfers without an adequacy decision and without appropriate safeguards. These risks consist in particular in the fact that the third country in question, a territory, or one or more specific sectors in that third country or the international organization does not provide an adequate level of data protection. This may have adverse effects for you in particular in the following points:

  • the rule of law, the respect for human rights and fundamental freedoms, the relevant legislation in the country concerned or in the international organization concerned, both general and sectoral – including with regard to public security, defense, national security and criminal law as well as access of authorities to personal data – and the application of such legislation, data protection rules, professional rules and security measures, including rules for the further transfer of personal data to another third country or to another international organization, case law as well as effective and enforceable rights of data subjects and effective administrative and judicial redress for data subjects whose personal data are transferred,
  • the existence and effective functioning of one or more independent supervisory authorities in the third country concerned or to which an international organization is subject, which are responsible for ensuring and enforcing compliance with data protection rules, including adequate enforcement powers, for assisting and advising data subjects in exercising their rights, and for cooperation with the supervisory authorities of the Member States, and
  • the international commitments the third country or international organization concerned has entered into or other obligations arising from legally binding conventions or instruments, as well as the participation of the third country or international organization in multilateral or regional systems, particularly in relation to the protection of personal data.

6. Duration of Storage

The data will be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. In the case of the use of your personal data through recordings, these will be stored for an indefinite period initially, bound to the purpose, and will only be deleted if and as soon as you have revoked your consent or the necessity must be denied for other reasons, particularly if the data processing is no longer necessary for safeguarding our aforementioned legitimate interests in event documentation/follow-up (press and public relations).

If the material was recorded and processed for the purpose of reporting in the form of event reviews, it will be deleted no later than one year after the material was recorded. If the image, sound, and video material is produced and processed for the purpose of promoting upcoming events at the Technical University of Chemnitz, the material will be deleted at a later date, but no later than three years after the recording date.

7. Right to Object/Withdraw and Elimination

Consent is voluntary, i.e., free from coercion and pressure, and thus has no relevance to your participation in offers of the Technical University of Chemnitz, the ET/IT Student Council, and can be withdrawn at any time in whole or in part without giving reasons and without undue disadvantage with effect for the future. To exercise your right of withdrawal, please send us an email to fsretit(x)tu-chemnitz.de. The withdrawal of consent is as easy as granting consent. However, please note that the legality of the processing carried out on the basis of the consent until the withdrawal is not affected by the withdrawal.

If your personal data is processed on the basis of Art. 6(1)(1)(f) GDPR (legitimate interests) (particularly the creation and storage of the recordings), you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. To exercise your right to object, please contact the organizer or responsible members (e.g., photographers) preferably before the data processing, alternatively, you can also send us an email to fsretit(x)tu-chemnitz.de or declare your objection as part of the event registration.

8. Supplement to the Right of Access

If interested and possible, I can receive recordings for private purposes.

9. Supplement to the Right to Erasure

Taking into account the available technology and implementation costs, we have taken appropriate measures, including technical measures, to inform data recipients/processors that you, as the data subject, have requested the deletion of all links to these personal data or copies or replications of these personal data from other controllers when we are obliged to delete them after publication, Art. 17(2) GDPR.

However, we explicitly point out that published recordings – especially on the internet – can be accessed and processed by any third party. Further processing, e.g., storage, transmission, etc., by such (for us unknown) third parties even after your deletion request cannot therefore be excluded despite all care and technical precautions.

Therefore, if recordings have been transmitted, the fulfillment of your right to deletion by the Technical University of Chemnitz, the ET/IT Student Council, regularly limits itself to the deletion of the data from its own data stock and – as far as possible – from the internet as well as to informing the responsible data processors who process the personal data in the course of publication that you have also requested the deletion of all links to these personal data or copies or replications of these personal data from them.

V. (Further) Rights of the Data Subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR, so you have the following rights vis-à-vis the Technical University of Chemnitz, the ET/IT Student Council (controllers): Right of access, right to rectification, right to erasure, right to restriction of processing, right to notification in the event of disclosure, right to data portability, right to object, right to not be subject to an exclusively automated decision. To assert your rights vis-à-vis the Technical University of Chemnitz or for further questions about data protection, you can contact us at any time.

1. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you violates applicable data protection regulations. The competent supervisory authority in the Free State of Saxony according to Art. 51 GDPR in conjunction with §§ 14 ff. SächsDSDG is: Saxon Data Protection Commissioner, Dr. Juliane Hundert, Devrientstraße 5, 01067 Dresden, Internet: www.saechsdsb.de, Email: saechsdsb(x)slt.sachsen.de, Telephone: 0351/85471-101, Fax: 0351/85471-109.

2. Further Information on Your Rights

For more detailed information on your rights as a data subject, please visit the following link: https://www.tu-chemnitz.de/tu/datenschutz.html

VI. Validity and Changes to this Privacy Policy

This privacy policy is currently valid and has the status as of May 29, 2024. Due to the further development of our website and our offers or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. The most current privacy policy can be accessed and printed at any time on the website at https://www.tu-chemnitz.de/stud/fs/et-it/events/datenschutz.php.en.

University News