Data protection information and detailed description of consent
As part of the Urban Interconnected Supply and Value Ecosystem (EDIHUrbanSave) in Hamburg, the project attaches great importance to compliance with data protection regulations and the protection of the confidentiality of your company/organization data.
In principle, no personal data is processed within the Future Tech survey. However, due to specific company constellations, it may be possible to draw indirect conclusions about natural persons. This data protection information therefore refers to Art. 13 GDPR.
In this data protection notice, we inform you about the processing of your company data and the rights to which you are entitled. The data protection information listed here serves to provide detailed clarification of your consent to the processing of your company data and is a supplement to the EDIH data protection declaration. This can be found at the following link: https://european-digital-innovation-hubs.ec.europa.eu/edih-privacy-statement
1. Purposes and legal basis
The data entered will be processed exclusively for the following purposes
Gaining an insight into the AI and digital technologies used by your company/organization in order to be able to design suitable approaches in the context of EDIH funding.
The legal basis for data processing is the express and voluntary consent hereby declared in accordance with Art. 6 para. 1 lit. a GDPR.
The CNECT.A.4. unit of the EDIH also points out that it collects, stores and publishes your personal data because this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body (Article 5(1)(a) Regulation 2018/1725). The processing operations are therefore necessary for the implementation of the EDIH work program. Further information can be found at: https://european-digital-innovation-hubs.ec.europa.eu/de/node/800.
Data to be processed
The following types of data are processed via the survey
- General information about the company/organization
- Size of the company
- Size of the company
- Number of employees
- Distribution of customers
- Type of communication with customers or suppliers
- Information on business processes
- Information on the use of artificial intelligence in the company
- Information on cybersecurity in the company
- Information on the use of high-performance computing
- Location and duration of storage
The processed data from the survey will be stored on the servers of the University of Hamburg for the duration of the project (3 years, with the option of an extension for a further 4 years). According to EDIH EU, the data will be stored for 5 years after the end of the project. The data will then be deleted. Further information can be found on the following website: https://european-digital-innovation-hubs.ec.europa.eu/de/node/800.
Protection of the processed data
The survey tool LimeSurvey is an open source software and is offered at the University of Hamburg as an independent product. The data from the Future Tech Checkup, which is collected by the LimeSurvey instances, is stored on the servers of the Regional Computing Center of the University of Hamburg. Further information can be found at the following link: https://www.rrz.uni-hamburg.de/services/software/alphabetisch/limesurvey/nutzerantrag.html#2064297.
Recipients of the data
The processed data from the survey is collected, stored and analyzed exclusively by HITeC.
Furthermore, the data will be passed on to the "European Digital Innovation Hubs Network" of the European Commission and will continue to be treated in compliance with the GDPR in accordance with its Privacy Statement. Further information can be found at the following link: https://european-digital-innovation-hubs.ec.europa.eu/de/node/800.
2. your rights
You have the following rights:
a. Voluntariness
You cannot be forced or pressured to give or maintain consent.
b. Right of withdrawal
You can withdraw your consent at any time with effect for the future without any formal requirements. Your data may no longer be processed after receipt of the declaration. It must be deleted immediately if there is no other legal basis for the processing. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
c. Right to information
In accordance with Art. 15 GDPR, you have a right to information from the controller.
d. Right to rectification
In accordance with Art. 16 GDPR, you can request the correction of incorrect data from the controller.
e. Erasure
You have a right to erasure of the processed data or a "right to be forgotten" in accordance with Art. 17 GDPR vis-à-vis the controller.
f. Restriction of the processing
You have the right to request the controller to restrict the processing of your data under the conditions of Art. 18 GDPR.
g. Right to data portability
You have the right to request the controller to transfer your data under the conditions of Art. 20 GDPR.
h. Right to lodge a complaint
You have the right to lodge a complaint against the processing of your data with a supervisory authority (Art. 77 GDPR).
3. persons
a. The controller responsible for the processing is
HITeC - Hamburg Informatics Technology Center e.V.
Represented by Lothar Hotz
Vogt-Kölln-Straße 30
22527 Hamburg
info@hitec-hamburg.de
b. Contact persons there for questions regarding processing are
Abir Bouraffa
Vogt-Kölln-Straße 30
22527 Hamburg
abir.bouraffa@uni-hamburg.de
Anja Mollah Haque
Vogt-Kölln-Strasse 30
22527 Hamburg
anja.silvia.mollah.haque@uni-hamburg.de
c. The data protection officer/project coordinator is
Stephanie von Riegen
Data Protection Officer/Project Coordinator at HITeC
Vogt-Kölln-Straße 30
22527 Hamburg
stephanie.vonriegen@hitec-hamburg.de
