Information on the processing of personal data pursuant to Art. 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR)
We hereby inform you on the following.
The determination on the purposes and means of processing your personal data is incumbent on the Berlin Open Lab. The Berlin Open Lab itself is controlling the processing of your personal data.
How to get in touch with us: Berlin Open Lab, Universität der Künste, Einsteinufer 43, 10587 Berlin, Germany; EMail:firstname.lastname@example.org
2. Data protection officer
For all data protection concerns, you can contact us via Berlin Open Lab, Universität der Künste, Einsteinufer 43, 10587 Berlin, Germany, or by e-mail: email@example.com
3. Visiting our websites
Visiting our websites is in principle possible without the indication of personal data. The processing of personal data may only be necessary if you make use of special functions offered on our websites. We will inform you about this below under point 4.
When you visit our websites, we do not collect any information that allow a conclusion to be drawn about an identified or identifiable person. Only the operating system, the browser type, the date and time of a website access, the IP address of the computer accessing our websites shortened by the last two digits, the duration of your website visit, the pages visited, the number of data transferred, the search term used and similar information (log files) when accessed via a search engine are recorded. This information is needed to make our website content available to our websites visitors and to optimize the functioning of our websites. Because your IP address has been collected anonymously, it is not possible to identify you or the user who visits our sites. It is not possible to assign the log files to a specific IP address.
In some of our websites links to the social media platforms Facebook, Twitter and Google Plus might be integrated. However, these buttons do not automatically transmit data to the respective operators of these platforms. Rather, we have integrated the so-called “double-click” model into these websites. After clicking on the button of the social media platform you have selected, you must expressly consent to the use of this platform with a second click. Only with the second click a data exchange takes place between our website and the operator of the social media platform. The decision as to whether any data in connection with your visit to our websites will be transmitted to the operator of the social media platform is in your sole responsibility. In this case, the Berlin Open Lab is no longer the controller for the processing of this data. If you do not wish data to be transmitted to the operator of the social media platform, you may not activate the respective button by a second click.
4. Lawfulness of processing personal data by Berlin Open Lab
Our websites present the activities of our lab comprehensively and offer numerous possibilities to get in touch with us. You can also get information about all services offered by the Berlin Open Lab while visiting our office personally or by letter or fax.
In the event that you make use of these possibilities, we will describe below the various purposes for which we process personal data.
Pursuant to Art. 6 para. 1 sentence 2 lit. e) GDPR, the processing of personal data is lawful if processing is necessary for the performance of a task carried out in the public interest.
The tasks of the Berlin Open Lab that are in the public interest are governed by the Berliner Hochschulgesetz (BerlHG).
We therefore consider the processing of personal data to be justified for exemplary activities and purposes (for further information please look here).
In the case of children taking advantage of the offers of the Berlin Open Lab, we will pay particular attention to their concerns and restrict the processing of personal data if necessary.
Art. 6 para. 1 s. 1 e) GDPR only justifies the processing of personal data for the performance of a task carried out in the public interest. Any existing intellectual property rights such as copyrights, ancillary copyrights, design rights, patents or the right to one’s own image shall remain unaffected by Art. 6 para. 1 s. 1 e) GDPR.
Pursuant to § 6 para. 1 sentence 1 no. 1 BerlHG in conjunction with the Studierendendatenverordnung of the State of Berlin (StudDatVO) of 9 November 2005 and § 3 BerlDSG, applicants for a study place and members of higher education institutions are obliged to make available the personal data required to perform the above-mentioned tasks of the Berlin Open Lab in the public interest and to tolerate their processing. Pursuant to Art. 13 Para. 2 lit. e) GDPR, we would like to point out that the Berlin Open Lab Berlin may otherwise refuse admission to a course of study or further education, its implementation and the acceptance of examinations.
As part of a scientific university conducting research pursuant to § 4 BerlHG, we consider it lawful pursuant to § 17 BerlDSG to process personal data, including special categories of personal data within the meaning of Article 9 para. 1 GDPR, for scientific or historical research purposes in the public interest, even without the consent of the person concerned, if the public interest in the implementation of the project substantially outweighs the legitimate interests of the person concerned and the purpose cannot be achieved in any other way. The type of processing, the publication of the data and other restrictions are regulated in § 17 BerlDSG.
Insofar as the University of the Art, in the name of the Berlin Open Lab, fulfils the tasks carried out in the public interest by concluding contracts under private law, such as in the field of adult education, the sale of tickets for events or the organisation of competitions, the processing of the personal data required for this purpose is lawful by Art. 6 para. 1 s. 1 b) GDPR to the extent that this is necessary for the fulfilment of the contract to which the person concerned is a party or for the implementation of pre-contractual measures which are taken at the request of the person concerned.
The provision of personal data is necessary for the conclusion and performance of the contract. The non-availability of the data required for the conclusion of the contract and the performance of the contract shall entitle the University of the Arts, in the name of the Berlin Open Lab, to refuse the conclusion of the contract and the performance of the contract.
If the Berlin Open Lab takes part in the private sector competition with certain activities, the Berlin Open Lab is considered a non-official authority according to § 2 para 6 BlnDSG. The following activities are not carried out in the performance of the public duties specified in § 4 BerlHG.
The processing of personal data in connection with these activities is justified by Art. 6 para. 1 sentence 1 lit. b) GDPR to the extent that it is necessary for the performance of the contract to which the data subject is a party or for the implementation of pre-contractual measures which are taken at the request of the data subject. We regard advertising measures in connection with the operation of these facilities as the exercise of a legitimate interest pursuant to Art. 6 para. 1 s. 1 f) GDPR.
The provision of personal data is necessary for the conclusion and performance of the contract. The non-availability of the data required for the conclusion of the contract and the performance of the contract entitles the Berlin Open Lab to refuse the conclusion of the contract and the performance of the contract.
Pursuant to § 17 BerlDSG, we consider it lawful to process personal data, including special categories of personal data within the meaning of Art. 9 para. 1 GDPR, for statistical purposes even without the consent of the data subject, if the public interest in the implementation of the project substantially outweighs the legitimate interests of the data subject and the purpose cannot be achieved in any other way. The type of processing, the publication of the data and other restrictions are regulated in § 17 BerlDSG.
The Berlin Open Lab does not process personal data in order to evaluate certain personal aspects relating to a natural person. Such procedures are not made the basis of legal decisions.
6. Disclosure to third parties
We do not pass on your personal data to third parties unless this is necessary to fulfil a contract, to implement pre-contractual measures, to protect our legitimate interest or due to statutory provisions. Your personal data will be processed exclusively within the European Union or another contracting state of the European Economic Area.
7. Storage and deletion
Your personal data will be stored as soon as it is collected. They will remain stored for such long as it is necessary to justify, implement and terminate your agreements concluded with us and to comply with our statutory archiving and storage obligations.
At any time you have the right to be informed by us, the Berlin Open Lab, about the following:
As to whether or not personal data concerning you are being processed, and, where that is the case, how to get access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from you, any available information as to their source;
(h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, you shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
9. Withdrawal, Objection
You have the right to withdraw your consent to the processing of your personal data at any time if the processing of your personal data is based on your consent (e.g. according to Art. 6 para. 1 lit a) or Art. 9 GDPR), but without affecting the legality of the processing carried out up to that point.
You have the right at any time to object to the processing of your data pursuant to Art. 6 para. 1 f) or e) GDPR for reasons arising from your particular situation. In this case, too, the lawfulness of the processing carried out up to that point remains unaffected. You must explain the reasons arising from your particular situation. We will then no longer process the data unless we can prove grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
10. Right of objection for direct advertising
If we process personal data for the purpose of direct advertising, you have the right at any time to object to the processing of your personal data for the purpose of such advertising.
11. Right of appeal
Should you be of the opinion that the processing of your personal data violates legal provisions, you have the right at any time to complain to the competent supervisory authority.