Data Privacy Information for DAAD Surveys
The German Academic Exchange Service (DAAD) takes the protection of personal data and confidential treatment thereof very seriously. We would therefore like to inform you about the processing of your personal data within the context of DAAD surveys in which you participate. Processing of your personal data takes place exclusively within the framework of the applicable statutory provisions of data privacy law, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
I. Who is responsible for the data-processing and who is the Data Protection Officer?
1. The body responsible for processing your personal data is:
Deutscher Akademischer Austauschdienst e.V. (DAAD)
Kennedyallee 50
53175 Bonn
Germany
Tel.: +49 228 882-0
datenschutz@daad.de
2. Our data protection officer is available at:
Dr. Gregor Scheja
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Germany
Tel.: (+49) 0228-227 226 0
https://www.scheja-partner.de/kontakt/kontakt.html
II. Subject-matter of data privacy protection
The subject-matter of data privacy protection is personal data. Personal data means any information relating to an identified or identifiable natural person (the so-called data subject). This includes, for example, information such as your name, postal address, e-mail address and telephone number.
III. What personal data will be processed?
Within the context of a survey, we only process personal data about you that you provide during the survey. This can include:
- Contact details including your name, e-mail address and social media profiles
- Gender, pronouns
- Date of birth
- Nationality, country of residence, city
- Educational details
- Experience from further education and funding
- Application videos
- Other information provided within the survey
IV. What purposes are pursued by the processing of my personal data and on what legal basis does the processing take place?
Insofar as participation in the survey is part of the terms of a scholarship or funding provided to you by DAAD, we will process your personal data on the basis of the underlying agreement on the provision of a scholarship or funding. In this respect, the data-processing takes place on the basis of Art. 6(1)(b), EU General Data Protection Regulation.
We also process your personal data in order to safeguard our legitimate interests. We only process your personal data if, having weighed our interest in processing the data against your possibly conflicting interests, fundamental rights and freedoms, we assume that our interests override your interests. Our legitimate interests in this respect lie in improving our programmes and funding options.
In an individual case, we will process your personal data on the basis of a declaration of consent you have issued. The purpose of the processing will be described in the underlying declaration of consent. The data-processing takes place on the basis of Art. 6(1)(a), EU General Data Protection Regulation. Insofar as we obtain specific categories of personal data within the context of the survey, for example information about your ethnic origin, your religion or health, we process such data on the basis of your express consent pursuant to Art. 9(2)(a), EU General Data Protection Regulation.
You may revoke your consent at any time. However, please take into consideration that the revocation of consent only has future effect, i.e., it does not affect the lawful nature of the processing of data based on your consent up to the date of revocation.
After completion of the survey we will analyze the data obtained. The data will be anonymized, i.e., all names and other references enabling conclusions to be drawn about your identity (e.g. name and e-mail address) will be removed.
V. Does automated decision-making or profiling take place?
We do not use automated decision-making or profiling in the sense of Art. 22, EU General Data Protection Regulation.
VI. Do I have to provide my personal data?
The provision of personal data is not required by contract or by law within the context of your voluntary participation in the survey. Within the context of the survey, you are able to choose freely which information you provide. However, should you choose not to provide certain information, it might not be possible to analyze the survey. Insofar as participation in the survey is part of the terms of a scholarship or funding provided to you by DAAD, there is no obligation to provide answers to questions marked as being voluntary.
VII. Who has access to my personal data and who are the recipients?
Within DAAD, only those departments and their employees have access to your personal data who require such access in order to perform their functions or responsibilities. The departments and employees are
K22 – Internationales Forschungsmarketing Research in Germany Initiative
Z01 – Recht
We only forward your personal data to external recipients if statutory justification exists. Potential external recipients are:
- Processors: Service providers that we entrust with the provision, maintenance and support of our survey tools and IT systems. These external service providers are carefully selected by us and vetted regularly to ensure that your personal data is in good hands. Such external service providers may process your personal data solely for the purposes we stipulate.
- Public offices: Authorities and state institutions, e.g., offices of public prosecution, courts and tax authorities to which we might be obliged to communicate personal data in individual cases.
- Private offices: Private offices to which we transfer your personal data on the basis of a legal provision or your consent, for example, your university.
VIII. Are there plans to transfer my personal data to third countries?
Your personal data will not be transferred to third countries.
IX. How long will my personal data be stored?
The storage duration of your personal data is displayed in the relevant chapter on data-processing in Clause IV.
X. What are my rights as a data subject?
You have the following rights as regards the processing of your personal data:
1. Right to Information
You are entitled to receive confirmation from us as to whether or not we are processing your personal data. If we are, you are entitled to receive information about your personal data and further information about the processing.
2. Right of Correction
You are entitled to require the correction of inaccurate personal data about you and to require the completion of incomplete personal data about you.
3. Right to Erasure (“Right to be Forgotten”)
In certain circumstances you are entitled to require us to erase your personal data. This right arises, for example, if the personal data is no longer required for the purposes for which it was collected or otherwise processed, or if the personal data was unlawfully processed.
4. Restriction of Processing
In certain circumstances you are entitled to require us to restrict the processing of your personal data. In that case, we will only store the personal data for which you granted your consent or which may be legitimately processed under the EU General Data Protection Regulation. For example, you might be entitled to require restricted processing if you have disputed the accuracy of the personal data concerning you.
5. Data Portability
If you have provided personal data to us on the basis of a contract or your consent, if the statutory prerequisites are met, you may obtain the data you provided, in a structured, common and machine-readable format, or may require that we transfer such data to another responsible person or body for processing.
6. Revocation of Consent
Insofar as you have granted your consent to us for the processing of your personal data, such consent may be revoked at any time with future effect. This will not affect the lawful nature of the processing of your personal data up to the time your consent is revoked.
7. Right to Complain to a Supervisory Authority
You are also entitled to submit a complaint to the competent supervisory authority if you believe that the processing of your personal data is in breach of the law in force. To this end, you may contact the data protection authority responsible for your place of residence, place of work or the place of a suspected breach, or the data protection authority responsible for us. The supervisory authority in the federal state in which you live or work, or in which a suspected breach constituting the subject-matter of the complaint took place, is responsible.
XI Who can I turn to with questions about or in order to assert my rights as a data subject?
Do not hesitate to contact us free of charge with questions about the processing of your personal data or in order to assert your rights as a data subject according to Clause X Nos. 1-7 . Please use the contact information provided in Clause I. No. 1. In order to revoke consent, you can also choose the communication channel you used when issuing the declaration of consent.
