Why and on what legal basis does UWB process my personal data?

UWB processes personal data of visitors to its events (e.g. academic ceremonies) for the following purposes (for each purpose of processing we also indicate its legal basis):

taking recordings (especially photographs and video recordings) of the event in order to document it

•    the performance of a task in the public interest (Article 6(1)(e) GDPR) or the legitimate interest of UWB (Article 6(1)(f) GDPR)

•    your consent, if required (Article 6(1)(a) GDPR)

protection of the rights, legitimate interests and property of UWB, including ensuring the security of UWB premises and dealing with security incidents (e.g. surveillance camera systems are operated for this purpose)  

•    the legitimate interests of UWB (Article 6(1)(f) GDPR)

promotion of UWB (on the UWB website, social media (Facebook, Instagram, Twitter, etc.), in promotional materials)

•    the legitimate interests of UWB (Article 6(1)(f) GDPR) or your consent, if required (Article 6(1)(a) GDPR)

What personal data does UWB process about me?

We may process visual and audio recordings (e.g. camera recordings, photographs, video recordings) about visitors to our events.

How long does UWB keep my personal data?

We will only process your personal data for as long as is necessary for the purpose of processing. If your personal data is used for several different processing purposes at the same time, we will process it until the purpose with the longer processing period is no longer applicable. However, we will stop using it for the purpose with the shorter processing period once that period has expired.

UWB uses the following criteria to determine the period of processing of personal data:

• for the purpose of protecting the rights, legitimate interests and property of UWB, your personal data will be processed for the duration of the relevant legitimate interest of UWB. However, in the case of the initiation and duration of judicial, administrative or other proceedings in which the rights or obligations of UWB towards you will be addressed, the processing will not cease before the conclusion of such proceedings;
• personal data processed for the performance of a task in the public interest will be processed for the duration of the public interest. However, in the event of the commencement and continuation of legal, administrative or other proceedings involving the rights or obligations of UWB towards you, the processing will not cease before the conclusion of such proceedings;
• we will process personal data processed on the basis of your consent until you withdraw your consent, unless we set a shorter processing period.

In the case of archiving, the processing period is governed by the UWB Filing and Shredding Rules.

At the latest by the end of the calendar quarter following the end of the processing period, your personal data for which the purpose of processing has ceased will be irreversibly anonymised or securely destroyed.

To whom is my personal data provided?

UWB may transfer your personal data to the relevant public authorities to which UWB is obliged to transfer your personal data pursuant to generally binding legal regulations. These recipients will process your personal data as separate controllers independent of UWB.

If this is necessary to protect the rights, legitimate interests and property of UWB, we may transfer your personal data to, for example, judicial or administrative authorities, bailiffs, etc.

UWB is also entitled to transfer your personal data to persons who process personal data for UWB as its processors (e.g. accountants, tax or legal advisors, IT service providers). Upon your request, we will provide you with an up-to-date list of UWB processors who process your personal data. Please note that the list of the UWB processors may change and be updated over time.

We will only ever transfer your personal data to the extent necessary to protect your right to data protection and your privacy as much as possible.

Is my personal data transferred abroad?

In general, we do not transfer your personal data outside the European Economic Area (EEA). If one of the recipients of your personal data processes personal data in a country outside the EEA, it may be transferred to such third country. However, in such a case, we will ensure that your personal data is processed in compliance with the relevant safeguards (e.g. by entering into standard contractual clauses with the recipient of the personal data).

Please note that if we publish some of your personal data on our website (based on our legitimate interest or with your consent if required), persons outside the EEA may also have access to that personal data.

What are my rights in relation to processing and how can I exercise them?

For more information about your rights you have in relation to the processing of your personal data and information related to exercising them, please see the Your Rights tab.