Data protection notice for participants in the survey titled
iHED Workshop: Internationalisation at Indian Higher Education Institutions - Structures and Services, Guwahati
We, the German Academic Exchange Service (Deutscher Akademischer Austauschdienst e.V., DAAD), take protecting personal data and keeping them confidential very seriously. With this notice, we would therefore like to inform you of how your data collected through this survey "iHED Workshop: Internationalisation at Indian Higher Education Institutions - Structures and Services, Guwahati" will be processed. Your data will be processed exclusively within the legal framework of the applicable data protection provisions, in particular the General Data Protection Regulation (hereinafter referred to as “GDPR”) and the German Data Protection Act (Bundesdatenschutzgesetz, hereinafter “BDSG”).
- Who is responsible for processing my data, and who is the commissioner for data protection?
- The controller responsible for processing your personal data is:
Deutscher Akademischer Austauschdienst e. V. (DAAD)
Kennedyallee 50
53175 Bonn
Deutschland
Tel.: +49 228 882-0
datenschutz@daad.de
- Contact details of our commissioner for data protection:
Herr Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn
Deutschland
Tel.: (+49) 0228-227 226 0
https://www.scheja-partner.de/kontakt/kontakt.html
- What data are subject to data protection?
Data protection applies to personal data. Personal data refers to any information relating to an identified or identifiable natural person (known as the data subject). This includes information such as the data subject’s name, e-mail address, contact number, designation, name of institution.
- Which of my personal data will be processed?
We will only process personal data like your name, email address, contact number, designation, name of institution for this survey that you have provided in the course of your participation in the survey for registration purposes.
- For what purposes and on what legal basis will my personal data be processed?
We will process your personal data on the basis of your submitted Declaration of Consent. The purpose of processing is to confirm your participation for the workshop at Indore/Hyderabad
Your data will be processed based on Art. 6 par. 1 a) of the GDPR.
You may withdraw your consent at any time. However, please note that any such withdrawal only takes effect from that point forward and thus does not affect the lawfulness of data processing already performed on the basis of your previous consent.
Once the survey has concluded, the data will be analysed by the DAAD Regional Office New Delhi.
- Will you conduct any automated decision-making or profiling?
We use neither automated decision-making nor profiling as per Art. 22 of the GDPR.
- Will my personal data also be collected from third parties?
No.
- Am I required to provide my personal data?
You are neither contractually nor legally obligated to provide us with your personal data in the course of your voluntary participation in this survey. It is up to you what personal information you provide during the survey. We may however be unable to analyse your responses if you do not provide certain information.
- Who has access to my personal data and which recipients will receive them?
Your personal data will only be accessible to departments within the DAAD that need such access to fulfil their functions or duties, and to the staff working in these departments. This applies to selected DAAD personnel at the Regional Office New Delhi and at the head office of the DAAD in Bonn (ST16) who are obliged to observe the data secrecy and the working principles of the GDPR.
We will only pass your personal data on to external recipients if there is a legal justification for doing so. External recipients may be:
- Commissioned data processors: service providers entrusted with maintaining our IT systems. We carefully select such processors and regularly screen them to ensure that your personal data are in good hands. These service providers may moreover only process your personal data for the purposes we specify.
- Public authorities: public authorities and state institutions, such as public prosecutors, courts of law and fiscal authorities, to which we may be required to provide personal data in individual cases.
- Do you intend to transfer my data to third countries?
No.
- For how long will my personal data be stored?
You can find the retention period for your personal data in the chapter on data processing under section IV.
- What are my rights as a data subject?
You have the following rights regarding the processing of your personal data:
- Right to information
You have the right to obtain confirmation from us as to whether or not we process personal data on you. If we do, you have the right to access your personal data and the right to further information regarding their processing.
- Right to rectification
You have the right to demand the rectification of any inaccurate personal data we hold on you and the right to demand that incomplete personal data be completed.
- Right to erasure (“Right to be Forgotten”)
Under certain circumstances you have the right to demand that we erase your personal data. You have this right for example if your personal data are no longer required for the purpose for which they were collected or otherwise processed, or if your personal data have been unlawfully processed.
- Restriction of processing
Under certain circumstances you have the right to demand that we restrict our processing of your personal data. In this case we will only store those personal data for which you have given consent or for which the GDPR permits processing. You may for example have the right to restrict processing if you have contested the accuracy of your personal data.
- Data portability
If you have provided us with personal data on the basis of a contract or a Declaration of Consent and the appropriate statutory requirements are met, you can demand that we send you the data you gave us in a structured, commonly used and machine-readable format, or that we transfer them to a different controller.
- Withdrawal of consent
If you have given us your consent to the processing of your personal data, you can withdraw this consent at any time with future effect. This does not however affect the lawfulness of any processing of your data conducted prior to your withdrawal of consent.
- Right to lodge a complaint with the supervisory authority
You can also lodge a complaint with the competent supervisory authority if you believe the processing of your data to be unlawful. To do so, you can contact the data protection authority responsible for your place of residence, your workplace or the location of the alleged infringement, or the data protection authority responsible for us. The responsible data protection authority is the supervisory authority of the federal state in which you reside, work, or in which the alleged infringement that is the subject of your complaint took place.
- Whom can I contact if I have questions or to establish my rights as a data subject?
Should you have any questions on the processing of your personal data or on asserting your rights as a data subject as set out in section XI. nos. 1–7 you may contact us free of charge. To do so please use the contact data under section I. no. 1.
Valid from: 18.10.2020