Below we inform you about how we process your data and what rights you are entitled to under the data protection regulations.

 

1.Name and contact details of the controller

 

European Capital of Culture Chemnitz 2025 gGmbH

Fabrikstraße 11

09111 Chemnitz

E-mail: datenschutz@chemnitz2025.de

 

2.Contact details of the data protection officer

 

Preusse & Co. public limited company

An der Markthalle 3

09111 Chemnitz

E-Mail: datenschutz(at)preusse-co-ag.de

 

3.Purposes of the processing of personal data and legal basis

 

We process the following data to carry out our projects with you:

 

Master data:

• Organisation name

• Salutation

• First name

• Surname

 

Contact details:

• Address

• E-mail addresses

• Telephone numbers

• Website

• Social media accounts

Project data

• Project status

• Project goals

• Target groups

• Venues

• Associated events and event dates

• Project partners and participants (names)

• Project name

 

We process your personal data for the following purposes in particular:

 

• for external evaluation by Chemnitz University of Technology (TU Chemnitz) - contact with the aim of disseminating information relating to the evaluation (sending surveys, invitations to interviews and focus group discussions and team coordination, notifications of further training or other offers in the field of evaluation), creation of pseudonymised profiles for the purpose of pre-selecting projects for certain methods of data collection

• for the assertion of legal claims and for defence in legal disputes

• for compliance with legal requirements

 

The processing of your personal data takes place on the basis of

 

• art. 6 para. 1 lit. b) GDPR, fulfilment of a contract or implementation of pre-contractual measures with you

• art. 6 para. 1 lit. c) GDPR, fulfilment of a legal obligation to which we are subject

• art. 6 para. 1 lit. f) GDPR, for the protection of our legitimate interests.

 

Our legitimate interest lies in the proper initiation, implementation and handling of the project relationship.

 

4.Recipients of personal data

 

We may transfer your personal data to

 

• public bodies that receive or must receive data due to legal regulations

• the TU Chemnitz

• Legal advisors if this is necessary for compliance with applicable law or for the assertion, exercise or defence of legal claims

• external service providers in their activities as processors (e.g. data destruction) in order to process data with their products and services

• external service companies in their activities as function providers who process data for us as function providers (e.g. courier services).

5. Storage duration of your personal data

 

Your personal data will be processed until the end of 2027, unless their (temporary) further processing is contractually necessary and for the fulfilment of the purposes listed under 3. for a predominantly legitimate interest.

 

In addition, we only process your personal data to the extent and insofar as we are obliged to do so due to mandatory legal, e.g. commercial or tax law storage and documentation obligations

 

6.Your rights

 

According to Art. 15 ff. GDPR, you have the right to information, rectification, erasure, restriction of processing or objection to the processing of your personal data as well as the right to data portability.

 

You also have the right to lodge a complaint with the competent data supervisory authority in accordance with Art. 77 GDPR.

7. Joint responsibility

 

Chemnitz University of Technology and we have jointly decided on the purposes and means of processing your personal data as part of the project: Evaluation of the European Capital of Culture Chemnitz2025.

 

7.1. what does "joint responsibility" mean?

 

Due to this collaboration, both contracting parties (Chemnitz University of Technology and we) are also jointly responsible for the protection of your personal data, so that there is joint responsibility within the meaning of Art. 26 GDPR.

The contracting parties are therefore obliged in particular to define in a transparent form in an agreement which of them fulfils which data protection obligations, in particular with regard to the exercise of your rights as a data subject, and who fulfils which information obligations (Art. 13, 14 GDPR). The essence of this agreement must be made available to you as the data subject, Art. 26 para. 2 sentence 2 GDPR.

 

7.2 Which processing activities are affected by joint controllership?

 

• Collection of personal data
• Documentation of the personal data

• Creation of profiles for the purpose of pre-selecting projects for certain data collection methods

• Notification of further education or other offers in the field of evaluation

• Forwarding of personal data to the TU Chemnitz

• Sending surveys and reminders

• Invitation to interviews and focus group discussions and coordination of appointments

 

7.3. which responsibilities exist within the framework of joint responsibility

 

Even if there is joint responsibility in the external relationship with you, the contracting parties are responsible for the fulfilment of data protection obligations internally as follows.

 

Chemnitz University of Technology is solely responsible for

• Sending out surveys and reminders

• Invitation to interviews and focus group discussions and coordination of appointments

 

We are solely responsible for

• Collection of personal data

• Documentation of the personal data

• Forwarding the personal data to the TU Chemnitz

 

Both parties are jointly responsible for

• Creation of profiles for the purpose of pre-selecting projects for certain data collection methods

• Notification of further education or other offers in the field of evaluation

 

7.4. to whom should I assert my rights as a data subject?

 

Regardless of what the contracting parties have agreed between themselves, as a data subject you can assert your rights under data protection law with and against each of the controllers. You must not suffer any disadvantages in exercising your rights as a result. In this case, you will generally receive the information from the controller against whom you have asserted your rights.

 

The contracting parties shall inform each other immediately and in full if you, as the data subject, exercise your rights under data protection law. At the same time, they must ensure that the other contracting party has all the necessary information at its disposal so that your rights as a data subject can be properly fulfilled.

 

The contracting parties are obliged to provide you as the data subject with the information required under Art. 13 and 14 GDPR in a precise, transparent, comprehensible and easily accessible form in clear and simple language. The information is generally provided free of charge.

 

To exercise your rights, please contact:

 

European Capital of Culture Chemnitz 2025 gGmbH

Fabrikstraße 11

09111 Chemnitz

E-mail: datenschutz@chemnitz2025.de

 

or to:

 

Chemnitz University of Technology

Project leader: Prof. Dr Jochen Mayerl

Thüringer Weg 9

09126 Chemnitz, Germany

E-mail: evaluationchemnitz2025(at)soziologie.tu-chemnitz.de

 

8.source of your personal data, if applicable

 

We may receive your personal data from third parties, e.g. from associations sponsored by us, and pass the data on to Chemnitz University of Technology.

 

9.Obligation to provide personal data

 

In order to carry out our projects with you (project relationship with you), you must provide the personal data required for this and for the fulfilment of the associated obligations. Without this data, we will generally have to reject or terminate the project relationship with you or will no longer be able to carry it out.

 

10.Automated decision-making

 

Automated decision-making does not take place.