Data privacy information for events

Dear Sir or Madam,

Städtisches Klinikum Görlitz gGmbH – referred to in the following as the Clinic – attaches considerable importance to compliance with the requirements of data protection laws. Kindly read the following information in order to ensure that you are fully aware of how your personal data is processed.

Contact details for the controller:

Städtisches Klinikum Görlitz gGmbH
Girbigsdorfer Straße 1 – 3, 02828 Görlitz
Email: gf@klinikum-goerlitz.de
Website: www.klinikum-goerlitz.de

Contact details for the data protection officer

RPM Datenschutz UG (haftungsbeschränkt)
Struvestr. 15, 02826 Görlitz
Email: datenschutz@klinikum-goerlitz.de

Categories of personal data that are processed

We collect personal data when you register for an event at our Clinic. Personal data means all information that refers to an identified or identifiable natural person (Art. 4 (1) GDPR).

For Clinic events, we ordinarily collect the title, first name, surname, address, telephone number and/or email address, information concerning your professional position and your organisation. For paid Clinic events, we may collect payment (transaction) data, meaning the account holder, bank name, account number, purpose, information concerning your professional position and your organisation. We also make photographic and video recordings of our events on a regular basis.

As a rule, your personal data will be collected directly from you when you register for one of our events.

Purposes of processing and legal basis

Data processing is necessary for the organisation and hosting of our event for which you have registered, as well as for public relations at the Clinic.

Where processing relates to organisation and hosting, the legal basis is Art. 6 (1) (b) GDPR and, where it relates to public relations, Art. 6 (1) (a) and (f) GDPR.

Where photographic and/or video recordings are produced at Clinic events, this takes place firstly for internal documentation of Clinic events and secondly for the purposes of the Clinic's public relations through publications in the print media, on the Clinic intranet, on the internet (e.g. website, Facebook, Twitter, YouTube etc.) or in one of our (print) publications.

You will be informed explicitly when you enter the venue if photographic and/or video recordings are produced at events. Kindly notify the photographer, i.e. camera operator at the event if you do not want to be recorded.

The legal basis for photographic and/or video recordings is set out in Art. 6 (1) (f) and, if you have given consent, also in Art. 6 (1) (a) GDPR.

Duration of storage

We store your data only for as long as is necessary to fulfil the aforementioned purposes. Your data will then be erased insofar as no other legal storage periods apply, e.g. 10 years for invoice data, starting with the end of the year in which invoicing took place. Should you request erasure of your data, we will erase your data without undue delay, provided no other legal storage periods apply.
Categories of recipients
Your personal data will not be transferred to third parties, except in the cases set out in this Privacy Statement, when permitted by law or for compliance with a legal obligation.

Transfer to third countries

As a rule, your personal data will not be transferred to third countries. Excepted from this is the worldwide ability to access (in particular by internet) the publications created as part of our public relations, which can also be accessed in third countries. However, this applies only insofar as your personal data is included in our public relations.

Rights of the data subject

The data subject has the following rights:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)

Please use our contact details above if you wish to exercise any of these rights.

Withdrawal of consent

You may withdraw your consent at any time, effective for the future. You are not obliged to provide reasons. The withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data is unlawful under data protection rules. There are no formal requirements to lodge your complaint with the supervisory authority. The competent supervisory authority in the Free State of Saxony is:

Commissioner for Data Protection and Freedom of Information in the Free State of Saxony;
Devrientstraße 5; 01067 Dresden
www.saechsdsb.de

Sincerely,

The Clinic

Version: August 2019