Data processing in the context of booking vaccination appointments
1. Responsible authority
University of Konstanz
represented by the Rectorate
Universitaetsstrasse 10
78464 Konstanz GERMANY
Phone: +49 7531 88-0
2. Data protection officer
Heinz-Joachim Sommer
Datenschutz-Sommer
Sommertalweg 1
88709 Meersburg, GERMANY
Email: datenschutzbeauftragter@uni-konstanz.de
Website: https://www.uni-konstanz.de/en/data-protection/
3. General information
Please take note of the information on data protection at the bottom of this web page.
4. Legal basis
We process your data based on your consent as per Article 6 para. 1 sentence 1 lit. a) of the European General Data Protection Regulation (GDPR).
5. Purpose and scope of data processing
The following will be processed when you book an appointment: your IP address, first name, last name, email address and, if applicable, your phone number. These data are required to book an entry in the calendar and to coordinate the vaccination appointments.
6. Consequences of not providing data
If you do not consent to providing these data, you cannot book a vaccination appointment via the calendar.
7. Using cookies
When you visit a website, the browser will save a so-called “session cookie” to the end device in use after a one-time log-in to protected areas. The cookie will be deleted as soon as the browser is closed. The purpose here is to recognize multiple related requests from the same user, which preserves the user's authentification status while using the website. Blocking these cookies can impair access to and use of the website.
8. Recipients
Internal processing
The data will be processed in order to coordinate vaccination appointments within the university. In addition to staff who need the data to complete their work responsibilities (e.g. staff in the Communication, Information, Media Centre for the purpose of providing the technical service), internal recipients are also staff members helping with the vaccination programme.
Data transfer
The vaccination doctors will receive your name to be able to vaccinate you.
Data processing by the software provider
The data is stored on a University of Konstanz server. Should the provider of the calendar software have to carry out maintenance work, we cannot rule out that the provider gets access to the data mentioned above. The University of Konstanz and the provider have concluded a contract on data processing in line with the General Data Protection Regulation (GDPR). Thus, we can guarantee compliance with data protection regulations and data security.
Provider:
Astendo GmbH
Wittestr. 30c
13509 Berlin, Germany
9. Storage duration
Your data will be deleted on 18 August 2021, after the round of follow-up vaccinations has concluded.
10.Your rights
- In accordance with Article 15 GDPR, you have the right to request information from the University of Konstanz about any data it stores that is related to your person and/or to have incorrect data corrected as per Article 16 GDPR.
- You can withdraw your consent at any time as per Article 7 GDPR. The withdrawal of consent will not affect the lawfulness of data processing if consent had been provided before its withdrawal.
- Moreover, you also have the right to have your data deleted (Article 17 GDPR) or the processing of data limited (Article 18 GDPR).
- To better understand and exercise your rights, please contact our data protection officer via email: datenschutzbeauftragter@uni-konstanz.de.
- You also have the right to file a complaint with the regulating authority if you believe that the processing and use of your personal data is in violation of the law (Art. 77 GDPR). The responsible contact person at the regulating authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (state commissioner for data protection and the freedom of information in Baden-Württemberg) (https://www.baden-wuerttemberg.datenschutz.de).