Information Obligation When Collecting
Personal Data in Accordance with Articles
12-14 GDPR
|
1. Data processing activity
|
|
The OA publication fund has been set up to systematically promote OA publications at the WI. The fund is aimed at publications from WI research projects (no funding is intended for publications by external persons) and covers those publications that could not be published in OA without central funding. Applications are processed by reviewing responses to a questionnaire on the funding of OA publications and formats by members of the institute via the publication fund. The application process is aggregated.
|
|
2. Name and contact details of the responsible organisation
|
3. Name and contact details of the Data Protection Officer
|
|
Weizenbaum-Institut e.V.
Hardenbergstraße 32
10623 Berlin
Germany
|
Eva Grübel-Hoffmann
External Data Protection Officer
datenschutz@weizenbaum-institut.de
|
|
4. Purpose and legal basis of the processing of personal data
|
|
Purpose: Processing and reviewing applications received for funding for OA publications by WI institute members whose costs cannot be borne decentrally by the research groups.
Legal basis: The legal basis for data processing is the legitimate interest pursued by the controller (6.1.f GDPR)
|
|
5. Recipients or categories of recipients of the collected personal data
|
|
Recipient(s) within the organisation: Research Manager for Open Research, student researcher
Processor(s): not applicable
Third parties: general public: use of data in aggregated form for reporting purposes (data cannot be traced back to individuals)
|
|
6. Origin and categories of processed personal data
|
|
To enable processing of the application and clarification of any queries with the applicant, the applicant’s surname (last name, first name), email address and research group/unit will be requested as part of the online questionnaire. In addition, subject affiliation, ORCiD and gender (possible without specification according to § 22 Abs. 3 PStG) are added to ensure a fair distribution of funds.
|
|
7. Transfer of personal data to a third country
|
|
Your personal data will not be transferred to a third country / international organisation.
|
|
8. Duration of the storage of personal data
|
|
The deletion period for personal data is 12 months after the end of the procedure. Otherwise, as described above under no. 5, it is only used in aggregated form for reporting purposes.
|
|
9. Data subjects’ rights
|
|
In accordance with the GDPR, every data subject has the right to:
- Information (according to Art. 15 GDPR)
- Rectification (according to Art. 16 GDPR)
- Erasure (according to Art. 17 GDPR)
- Restriction of processing (according to Art. 18 GDPR)
- Data portability (according to Art. 20 GDPR)
- Right to object (according to Art. 21 GDPR)
With regard to the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG (German Federal Data Protection Act) apply.
You also have a right of appeal to a data protection supervisory authority (Art.13 para. 2 lit. d in conjunction with Art. 14 para. 2 lit. e GDPR, Art. 77 GDPR in conjunction with § 19 BDSG).
The text of the GDPR can be found online at: https://gdpr-info.eu/. The text of the BDSG can be found at: https://www.gesetze-im-internet.de/englisch_bdsg/.
|
|
10. Data provision obligation
|
|
The application is voluntary, so data only needs to be provided if the review is carried out.
|
|
11. Automated decision making
|
|
Automated decision-making within the meaning of Art. 22 GDPR is not used.
|
