APPENDIX Ⅰ – Data Privacy Information
Information on Data Privacy for the Experts Database in accordance with GDPR
- Legal Basis of Data Processing
The legal basis for the processing of the data is the consent of the data subject in accordance with Art. 6 para. 1 lit. a) EU General Data Protection Regulation (GDPR).
- Party Responsible
The party responsible within the meaning of GDPR is the:
University of Bayreuth
Universitätsstraße 30
95447 Bayreuth
Germany
Represented by the President
Prof. Dr. Stefan Leible
Universitätsstraße 30
95447 Bayreuth
Phone: +49 (0)921 / 55-5201
E-mail: praesident@uni-bayreuth.de
The data protection officer of the party responsible is:
Axel Pürckhauer
Angewandte Informatik (AI), Room 1.13
Universitätsstraße 30
95447 Bayreuth
Germany
Phone: +49 (0)921 / 55-7668
E-mail: datenschutz@uni-bayreuth.de
- Type of Data Processing
The data is stored on a server commissioned by the "IT-Servicezentrum (ITS)" within the University of Bayreuth, running MariaDB 11.2 on Ubuntu 20.04.
The data is regularly mirrored to an instance of PostgreSQL 16, running on the same server, dedicated solely to the purpose of providing the expert search portal.
3.1 Internal data processing
Internal data processing is done as shown in the process “Expertendatenbank / Expert Database” as per appendix Ⅱ in this document.
If the processing is necessary to safeguard a legitimate interest of the university or a third party, and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing.
Apart from feeding the expert search portal, the data may be used for the following, additional purpose(s):
- anonymized statistics collected for internal purposes
3.2 External data processing
The Africa Multiple Cluster of Excellence at the University of Bayreuth, Germany (afterwards referred to as Africa Multiple) is funded by the Deutsche Forschungsgemeinschaft (DFG, German Research Foundation) under Germany’s Excellence Strategy – EXC 2052/1 – 390713894 and therefore the given data/ information can potentially be part of annual reports to the German Research Foundation (DFG). If so, it will be submitted in anonymized form.
The transfer of data is based on a contractual relationship between UBT and the DFG, i.e. the legal basis between these two parties is Art. 6 para. 1 lit. b) GDPR.
Between UBT and the data subject, Art. 6 para. 1 lit. f) GDPR serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party, i.e. the legitimate interest of the controller or a third party.
This shall also apply to processing operations necessary for the implementation of pre-contractual measures.
- Categories of data to be processed
- Surname, first name
- Qualification data (academic degree / field of research)
- Company
- Address data
- Contact details (e-mail / telephone number)
- Rights of the Data Subject
If personal data of yours is processed, you are the data subject within the meaning of the GDPR, and you are entitled to the following rights vis-à-vis the party responsible.
In the event of such processing, you may request the following information from the party responsible:
- Confirmation as to whether personal data concerning you is being processed and information about this data and the circumstances of the processing in accordance with Art. 15 GDPR (expires after deletion of the data),
- Rectification in accordance with Art. 16 GDPR if the data is incorrect,
- erasure in accordance with Art. 17 GDPR if there is no justification for the processing and no (further) obligation to retain the data
- Right to restriction of processing in specific cases determined by law in accordance with Art. 18 GDPR and
- Right to data portability of your personal data in accordance with Art. 20 GDPR to you or a third party in a structured, commonly used and machine-readable format.
In addition, you have the right to withdraw your consent at any time with effect for the future, with the consequence that the processing of your personal data becomes inadmissible in accordance with your declaration of withdrawal. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.
You also have the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR.
For further information on data protection, please visit: https://www.uni-bayreuth.de/en/privacy-policy