Privacy Notice according to Art. 13 General Data Protection Regulation (GDPR)

1.    Responsibility for the processing of your personal data

If you join the Matchmaking event, the

Deutscher Akademischer Austauschdienst e.V. (DAAD)
Kennedyallee 50
53175 Bonn
Germany
Telephone: +49 228 882-8980 or -8741
E-Mail
www.daad.de

is the Controller and responsible for the processing of your personal data.

2.    Subject matter of data protection

Subject matter of data protection are personal data, meaning any information relating to an identified or identifiable natural person (‘data subject’).

Upon registration for the Matchmaking event, you will be asked to provide the following personal data: your name and your e-mail address.

3.    Purpose of the processing and legal basis

3.1    We need your name in order to identify you as participant of the Matchmaking event and to prevent misuse of the Matchmaking platform. Your e-mail address is necessary for the registration in the Matchmaking tool and the communication with other participating parties. Further you will receive e-mails with information on the Matchmaking event after registration. Without providing these personal data participation in the Matchmaking is unfortunately not possible.
Legal basis for the processing of these personal data is Art. 6 (1) b) GDPR (performance of contractual obligations). Your personal data will be deleted after the Matchmaking Event has ended.

3.2    Furthermore, you may consent that the DAAD may use your personal data in order to contact you after the Matchmaking for either conducting a follow-up survey concerning the event you attended and to provide you with information about further events of the DAAD.
If you declare your consent, legal basis for the processing of your personal data is Art. 6 (1) a) GDPR (consent). You may withdraw your consent at any time with future effect by sending an E-Mail. The lawfulness of the processing of your personal data up to this point of time will remain unaffected. After your withdrawal of consent your personal data will be deleted.

3.3    To the extent to which this is necessary, we process your personal data also in order to protect our legitimate interests. We only process your personal data if, after evaluation of our interests to perform the data processing with your possibly contradictory interests, fundamental rights and freedoms, we consider our interests to prevail. This may apply in the following case:

-    Protection and safety of IT resources

The data processing is effected on the basis of Art. 6 (1) f) GDPR. We delete the data when they are no longer required for the purposes we pursue and no other legal basis applies.

3.4    We may process your personal data also in order to comply with statutory obligations which may arise pursuant to commercial law, tax law, finance law, or criminal law. The purposes of the processing arise from the corresponding statutory obligation. Usually, the processing is effected in order to comply with governmental monitoring obligations and information obligations.

The data processing is effected on the basis of Art. 6 (1) c) GDPR. We delete the data after the legal obligation ceases to apply and provided that no other legal bases, in particular statutory or contractual periods of retention, apply.

4.    Recipients of your personal data

Within the DAAD, those departments are given access to your personal data that require them in order to manage the Matchmaking event, or, in case you have declared your consent, which require them to provide you with information which you like to receive.

We only forward your personal data to external recipients if there is a justification under statutory law for this or if you have consented thereto. External recipients may include:

• Processors: Service providers which are entrusted with the maintenance of our IT systems (in particular our external service provider who operates the Matchmaking platform). We select such processors with due care and they are regularly audited to ensure that your personal data are in good hands. The processors may use your personal data only for the purposes prescribed by us.
• Public bodies: public authorities and government institutions, as, e.g., public prosecutors, courts of law, or financial authorities, to which we may have to transfer personal data in certain individual cases.

5.    Automated decision-making or profiling

We use neither automated decision-making nor profiling pursuant to Art. 22 GDPR.

6.    Data transfer to third countries

Your personal data will not be transferred to third countries in the context of the use of the Matchmaking tool.

7.    Information about your rights as data subjects

As data subject you have the following rights:

Right of access: You have the right to obtain information which personal data concerning your person are being processed by the DAAD.

Right to rectification and to erasure: You have the right to rectification of your false personal data and – provided that the legal requirements are met – to erasure of your personal data.

Right to restriction of processing:  Provided that the legal requirements are met, you have the right to request the restriction of processing of your personal data.

Right to data portability: Provided that the legal requirements are met, you have the right to receive your personal data in a structured, commonly used and machine-readable format or to request us to transmit those data to another controller.
Withdrawal of consent: If you have given us your consent to the processing of your personal data, you may withdraw the consent at any time with effect for the future. This does not affect the lawfulness of the processing of your personal data before the withdrawal of the consent.

You furthermore have the right to lodge a complaint with the responsible supervisory authority, if you think that the processing of your personal data is against the law. You may either contact the supervisory authority that is responsible for your place of residence or for your country or the supervisory authority that is responsible for us.

If you have questions regarding the protection of your personal data, you may contact us free of charge by sending an E-Mail. Please ensure a clear identification of your person.

8.    Data protection officer

The contact data of our data protection officer are:

Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn
Telefon: +49 228 227226-0
Fax: +49 228 227226-26
www.scheja-partner.de

contact via website Scheja und Partner Rechtsanwälte mbB