Data protection / consent declaration for the processing of personal data for sending newsletters (Information obligations according to GDPR)

For which purposes should personal data be processed?

The data will be processed exclusively for sending a newsletter on the SMAR 2026.

Who is responsible for data processing and who can data subjects contact?

What is the legal basis for processing personal data?

The legal basis for the processing of personal data is Art. 6 para. 1 letter a) GDPR (consent), i.e. the use and consent to the associated processing of your personal data is voluntary.  

What personal data is processed?

The following data is processed for the purpose of distributing the newsletter:

• E-mail address
• Time the email was sent
• User ID

The user ID in the links is used exclusively to enable withdrawal of consent, i.e. to unsubscribe from the newsletter.

How long will personal data be stored?

Your email address will be processed until revoked. The legality of the processing based on the consent until the revocation is not affected.

Is personal data transmitted to recipient? Who has access to this data at TU Dresden? Is data collected by third parties?

The e-mail address is stored by an external provider who has been contractually verified and bound to confidentiality in accordance with article 28 GDPR. Unless otherwise stipulated by law or unless you have given your explicit consent, no personal data is transmitted to third parties.

What are the basic rights of data subjects?

1) Voluntariness and revocation according to Art. 7 para. 3 GDPR

The indication of personal data is voluntary. Consent to the processing of personal data may be revoked at any time in accordance with Art. 7 para. 3 GDPR with the consequence that the personal data of the data subject will not be further processed.

2) Right of information (Art. 15 GDPR)

Data subjects have the right to request information at any time about the data processed concerning them and the possible recipients of this data. They are entitled to a response within a period of one month after receipt of the request for information.  

3) Right to correction, deletion and limitation (Art. 16 – 18 GDPR)

Data subjects may at any time request TU Dresden to correct or delete their personal data or to limit processing.  

4) Right to data portability (Art. 20 GDPR)

Data subjects may request that the responsible party transmit their personal data to them in a machine-readable format. Alternatively, they may request the direct transfer of the personal data they have provided to another responsible party, insofar as this is possible.

5) Right of appeal (Art. 77 GDPR)

Data subjects may contact TU Dresden’s data protection officer at any time, as well as the competent supervisory authority for data protection in the event of a complaint according to Art. 77 GDPR.

The responsible supervisory authority for data protection is:  
Saxon Data Protection and Transparency Officer

Postfach 11 01 32
01330 Dresden
Email: post@sdtb.sachsen.de
Telephone: + 49 (0) 35185471 101
www.datenschutz.sachsen.de

In order to claim the rights, a notification in text form (letter, email or fax) to the responsible person is sufficient.