0%
Caution: JavaScript execution is disabled in your browser or for this website. You may not be able to answer all questions in this survey. Please, verify your browser parameters.

Online-survey of Chemnitz University Library

Welcome to the online-survey of Chemnitz University Library!

Objectives ofthe users survey: to enhance digital and analog services of the library in compliance with the requirements of all user groups.

Data protection: The survey was elaborated in consultation with the data protection commissioner of Chemnitz University of Technology. We assure to you that the data collected are processed with the utmost care. For details regarding the processing of your data please visit our data protection regulations. Please observe to not enter individual-related data (e.g. name) in the blank text fields.

Duration: depending on the individual usage habitudes about 20 minutes for students, external users and non-scientific staff and 30 minutes for academic staff. It is not mandatory to fill in blank text fields. By ticking „no answer“ questions may be skipped.

Questions regarding the survey? Chemnitz University Library, Director Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Phone: +49 371 531-13180, service@bibliothek.tu-chemnitz.de

The online survey is aimed at all persons aged 18 and over.

Thank you very much for your participation and committment! The survey remains open until February 15, 2023.


 

Privacy policy

regarding the online survey "Survey of users of Chemnitz University Library".

For reasons of simplification, the generic masculine is generally used in the data protection declaration. However, all personal designations apply independently of this for all genders.


I. Name and contact details of the person responsible


Chemnitz University of Technology, represented by the Rector: Prof. Dr. Gerd Strohmeier, Straße der Nationen 62, 09111 Chemnitz, Germany, e-mail: rektor@tu-chemnitz.de, phone: +49 371 531-10000, fax: +49 371 531-10009, web: www.tu-chemnitz.de

If you have any questions regarding this data protection declaration or the data processing operations associated with it, or if you wish to make use of the rights granted to you, you are very welcome to contact us at any time:

Chemnitz University of Technology, Director of the University Library, Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Germany, Phone: +49 371 531-13100, Fax: +49 371 531-13109, angela.malz@bibliothek.tu-chemnitz.de, Web: https://www.tu-chemnitz.de/ub/

II. Contact details of the data protection officer


Gernot Kirchner, Data Protection Officer of Chemnitz University of Technology, Straße der Nationen 62, 09111 Chemnitz, Germany, e-mail: datenschutzbeauftragter@tu-chemnitz.de, phone: +49 371 531-12030, fax: +49 371 531-12039, web: www.tu-chemnitz.de/rektorat/dsb/

III. Data Processing in the Project "User Study of Chemnitz University Library

1 Description and scope of data processing

In order to carry out our project "User Survey of Chemnitz University Library", the following (categories of) personal data are collected and processed within the scope of the online survey:

  1. Your answers in the online survey, e.g. free text answers,

  2. Membership of a user group of the university library,

  3. affiliation to the TUC or to a department/organizational unit of the TUC,


Participation in the online survey is voluntary; in particular, there is no obligation on your part to provide information. If you do not wish to provide any information on the personal data requested, you do not have to answer the question in question or you can abstain (e.g. "do not specify", "abstain").

If information is provided in open response fields (free text fields) that leads to the unique identification of any person, this information will be removed in the course of the evaluation and the response will thus be anonymized. Your personal data will only be finally stored in our survey system and be available for further processing once you have submitted your processing/response to the online survey by clicking on "Submit" at the end of the survey. Any caching of the results of your online survey that may be offered serves only to make your work easier. We do not store or further process data that has been temporarily saved but not finally sent.


We ensure that the answers and the evaluation of the online survey do not allow any conclusions to be drawn about the identity of the respondents. In order to be able to ensure sufficient anonymity during the evaluation and further processing, for example, no further processing and evaluation of the survey results takes place if fewer than 3 persons have participated. The latter also applies to evaluations that refer to individual topic complexes or individual characteristics, so that the comparison group must contain at least 3 persons, so that no clear conclusion can be drawn about an identifiable natural person. If, in individual cases, despite the precautions taken, identification of a data subject cannot be ruled out, the data will not be evaluated or further processed.

This personal data is also stored in our system. This data is not stored together with other personal data of the data subjects. In addition, we process the aforementioned personal data as part of our "user study".

2. Legal basis for data processing

The legal basis for the above-mentioned data processing in the context of the online survey is basically Art. 6 para. 1 p. 1 lit. a) DSGVO, i.e. the voluntarily given consent of the data subject.

3. Purpose of the data processing

The project-related data processing takes place within the framework of a user study of the University Library for the purpose of assessing the quality of the existing service offer, for the further development of the service offer as well as for the formulation of a library strategy of the University Library. The personal data provided by the data subjects will primarily be used for allocation to the target group.

4. Recipients of the personal data

  1. University Library, Chemnitz University of Technology,

  2. University Computer Center, Chemnitz University of Technology,

  3. Order processor within the meaning of Art. 28 DSGVO, LimeSurvey, BPS Bildungsportal Sachsen GmbH.

Personal data will not be passed on to unnamed third parties, nor will it be transferred to another EU country or to a third country or to an international organization.

5. storage period (data deletion - storage limitation)

The personal data processed by us will only be stored in a form that allows the identification of the data subjects for as long as is necessary for the purposes for which they are processed. If the data processing takes place exclusively on the basis of a project-related consent within the meaning of Art. 6 (1) p. 1 lit. a) DSGVO, this point in time is regularly given with the complete termination of the project.

The deletion of the online survey results in the online survey system BPSSurvey will take place after the completion of the survey on 15.03.2023. This affects all directly collected data that are stored about the surveys conducted and can be retrieved again and again as unchanged raw survey data (backup).


Survey data/raw data exported from the online survey system for further evaluation and processing without the possibility of identifying affected natural persons will be deleted on December 31, 2024. The storage period is determined by the period required for the evaluation.

6. right of revocation

You have the right to revoke your declaration of consent under data protection law at any time, either in whole or separately, without giving reasons and without unreasonable disadvantages, with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation must be submitted in writing to Chemnitz University of Technology, University Library, Director Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Germany, e-mail: angela.malz@bibliothek.tu-chemnitz.de. Revocation of consent is as easy as giving consent.

7. legal/contractual requirements for the provision of personal data and consequences of non-provision

The provision of personal data in connection with participation in the online survey is not required by law or contract or necessary for the conclusion of a contract. Furthermore, you are not obliged to provide your personal data. The non-provision of your personal data (non-participation in the online survey) therefore regularly has no consequences/consequences for you.

IV. Provision of the website and creation of log files

1. description and scope of data processing

Each time our website (online survey) is called up, our server systems or server systems operated on our behalf (order processing, Art. 28 DSGVO) automatically record data and information from the computer system of the user/calling computer, i.e. also your computer.

Basically, this is the following data:

  • IP address of the calling computer,

  • Host name of the requested web server,

  • information about which document is being requested

  • encryption standard and algorithm used,

  • any form entries made*,

  • valid cookies*, if applicable.

The following data may also be transmitted, depending on the configuration of your browser:

  • Browser name and version as well as operating system of the user,

  • preferred language of the content,

  • possible data compression methods,

  • Website from which the user's system accessed the requested document (so-called referrer URL or "referrer" in the HTTP standard).

The aforementioned data (except for those marked with *) are also stored temporarily - i.e. only temporarily - in the log files of our systems. The following information is also recorded in the log files:

  • Authenticated user, if applicable (after logging into the Web Trust Center or via application-specific procedure),

  • Date and time of access,

  • query status, duration and amount of data transferred.

This data is not stored or merged with other personal data of the user (in particular data pursuant to Section III.). In particular, we do not store/process any IP addresses or log files in connection with the survey that allow the identity of the person concerned to be reconstructed, so that it would only be possible to pseudonymize your data due to the possibility of identification via the practically possible evaluation of traffic data (in particular IP addresses, log files of the web server) during the immediate execution of the survey or immediately afterwards, but this is of course prevented and not carried out by means of technical and organizational measures of the Chemnitz University of Technology. In particular, it is ensured by means of suitable protective measures (separability) that the office collecting the data at the Chemnitz University of Technology (see Section I.) cannot gain any access to IP addresses or log files via the online survey system used in order to be able to assign them to the survey results (access control). The survey is thus conducted in such a way that answers and evaluations do not allow any conclusions to be drawn about your identity.

2. Legal basis for data processing

The legal basis for the collection and temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f) DSGVO (protection of a legitimate interest). In addition, Art. 6 para. 1 p. 1 lit. c) DSGVO in conjunction with § 12 TTDSG (disturbances of telecommunications systems and misuse of telecommunications services) also permits data storage.

3. purpose of data processing

The temporary storage of, among other things, the IP address by the system is necessary to enable delivery of our website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of our website (online survey) for you. In addition, we use the data to optimize the web pages and to maintain the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context under any circumstances.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f) DSGVO. Interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail in this respect. Data storage for the purpose of defending against disruptions to the telecommunications system is also expressly permitted by Art. 6 (1) p. 1 lit. c) DSGVO in conjunction with Section 12 TTDSG.

4. recipients of personal data

  1. University Computer Center, Chemnitz University of Technology,

  2. Order processor within the meaning of Art. 28 DSGVO, LimeSurvey, BPS Bildungsportal Sachsen GmbH.

Personal data will not be passed on to unnamed third parties, nor will it be transferred to another EU country or to a third country or to an international organization.

5. Security of data processing

In order to ensure a level of protection appropriate to the risk involved in providing the website offering relating to the online survey, our web servers force transport encryption via HTTP Strict Transport Security (HSTS). You can recognize this by the "Hypertext Transfer Protocol Secure" transmission protocol used (in your address bar: https://) and, for example, by the lock symbol in your browser bar. Currently, TLS 1.2 is required as a minimum standard. By also supporting older encryption standards, we ensure that as many visitors as possible can use our website. Encryption algorithms that are considered insecure are and will be deactivated.

6. storage period (data deletion - storage limitation)

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. You end the session by closing your browser completely, i.e. not just closing the relevant tab.

In the case of storage of data in log files, deletion/anonymization takes place after half a year. Storage beyond this in non-anonymized form takes place, reduced to relevant data, only for the fulfillment of investigation requests. Furthermore, storage beyond this is possible. In this case, however, the IP addresses of the users are deleted or alienated/anonymized so that an assignment of the calling client is no longer possible under any circumstances.

7. Right of objection

In the event that personal data concerning you is processed on the basis of Art. 6 (1) p. 1 lit. e) (public interest or public authority) or lit. f) DSGVO (legitimate interest), you have the right to object at any time in accordance with Art. 21 DSGVO, for reasons arising from your particular situation (see also under Right of Objection, Item V. 7.). The objection must be submitted in writing to Chemnitz University of Technology, University Library, Director Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Germany, e-mail: angela.malz@bibliothek.tu-chemnitz.de, Chemnitz University of Technology.

However, the collection of data for the provision of the website and the storage of the data in log files is - as described above - absolutely necessary for the operation of the website of Chemnitz University of Technology. Therefore, if you exercise your right to object, but regardless of this you continue to access our website, there are compelling legitimate grounds for data processing that override the interests, rights and freedoms of the data subject - of you - and thus limit the possibility of objecting as a result, so that in accordance with Article 21 (1) sentence 2 DSGVO your personal data can continue to be processed.

8. legal/contractual provisions on the provision of personal data and consequences of non-provision.

The provision of personal data in connection with participation in the online survey is not required by law or contract or necessary for the conclusion of a contract. Furthermore, you are not obliged to provide your personal data. Thus, failure to provide your personal data (non-participation in the online survey) regularly has no consequences/consequences for you.

V. Rights of the data subject

To assert your rights against Chemnitz University of Technology or if you have any further questions regarding data protection, you can contact us at any time.

If, on the other hand, Chemnitz University of Technology as the responsible party can prove in connection with data processing in the context of an online survey that it is not (or no longer) in a position to identify the data subject, it shall merely inform the data subject of this (if possible). In these cases, the rights of the data subject outlined below (Art. 15 to 20 GDPR) shall not apply, unless the data subject provides additional information for the exercise of his or her rights that enables him or her to be identified.

In addition, it is pointed out that restrictions on the rights of the data subject exist in accordance with Sections 7-10 of the SächsDSDG. This affects, among other things, the right of deletion and the right to information as well as the duty to provide information to the data subjects.

1. right to information

You may request confirmation from the controller as to whether personal data concerning you is being processed by it. If such processing is taking place, you may request information from the controller about the following:

  • the purposes of processing;

  • the categories of personal data being processed;

  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;

  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;

  • the existence of a right to obtain the rectification or erasure of personal data concerning you, or to obtain the restriction of processing by the controller, or a right to object to such processing;

  • The existence of a right of appeal to a supervisory authority;

  • if the personal data are not collected from you, i.e. the data subject, any available information about the origin of the data;

  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

However, Chemnitz University of Technology, as the controller, naturally processes a large amount of information about data subjects, so it is required that you, as the data subject, specify which information or which processing operations your request for information relates to before you are provided with information when asserting your right to information, cf. p. 7 of the 63rd recital of the GDPR.

2. right of rectification

You have the right to request the controller to correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you as the data subject also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

3. right to erasure

a) Obligation to erase, Art. 17 DSGVO ("right to be forgotten").

You may request the controller to delete the personal data concerning you without undue delay. The controller is also obliged to erase this data immediately if one of the following reasons applies:

  • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

  • You revoke your consent on which the processing was based pursuant to Art. 6 (1) sentence 1 a) DSGVO or Art. 9 (2) a) DSGVO and there is no other legal basis for the processing.

  • You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

  • The personal data concerning you have been processed unlawfully.

  • The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

  • The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

Please note that in the event of anonymization of your data, a personal reference can no longer be established, i.e. the deletion of the anonymized data can in principle also not (no longer) be initiated by you, unless you provide additional information for the exercise of your rights that enables your identification.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, taking into account the available technologies and the cost of implementation, to inform data controllers that process the personal data that you, as the data subject, have requested from them - the further controller - to erase all links to or copies or replications of such personal data.

c) Exceptions to the right to erasure

The right to erasure does not exist to the extent that the processing is necessary

  • For the exercise of the right to freedom of expression and information;

  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;

  • for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) DSGVO, insofar as the aforementioned "right to be forgotten" is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or

  • for the assertion, exercise or defense of legal claims.

4. right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

  • the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

  • the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or

  • if you have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.

If the processing of personal data relating to you has been restricted in the sense described above, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

5. right to information

The controller is obliged to inform you to all recipients to whom your personal data have been disclosed of any rectification or erasure of the personal data or restriction of processing pursuant to Art. 16, 17(1) and Art. 18 DSGVO, unless this proves impossible or involves a disproportionate effort. The controller shall inform the data subject of these recipients if the data subject so requests.

6. right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format (e.g. PDF, CSV). You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

  • the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a) DSGVO or Art. 9 para. 2 lit. a) DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b) DSGVO and

  • the processing is carried out with the help of automated procedures.

In exercising this right, you have the right, in particular, to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability is without prejudice to Art. 17 DSGVO ("right to be forgotten"). Moreover, it does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) sentence 1 (e) (public interest or in the exercise of official authority) or (f) DSGVO (legitimate interests); this also applies to profiling based on these provisions. The objection must be submitted in writing to Chemnitz University of Technology, University Library, Director Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Germany, e-mail: angela.malz@bibliothek.tu-chemnitz.de.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

8. right to revoke the declaration of consent under data protection law.

You have the right to revoke your declaration of consent under data protection law at any time, either in whole or separately, without giving reasons and without unreasonable disadvantages, with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation must be submitted in writing to Chemnitz University of Technology, University Library, Director Angela Malz, Straße der Nationen 33, 09111 Chemnitz, Germany, e-mail: angela.malz@bibliothek.tu-chemnitz.de. Revocation of consent is as easy as giving consent.

9. Automated decision in individual cases including profiling.

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

This refers to a decision - which may include a measure - to evaluate personal aspects based solely on automated processing which produces legal effects concerning the data subject or similarly significantly affects him or her, such as the automatic rejection of an online credit application or online recruitment procedure without any human intervention. Profiling should be understood in this context as any type of automated processing of personal data which consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

The foregoing with respect to automated decision-making in individual cases does not apply if the decision is

  • is necessary for the conclusion or performance of a contract between you and the controller,

  • is permitted by legislation of the Union or the Member States to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or

  • is carried out with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the exceptional cases mentioned in section 1 and section 3 above, the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person on the part of the controller, to express your point of view and to contest the decision.

We do not use automated decision-making.

10. right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data relating to you violates applicable provisions of data protection law.

The competent supervisory authority in the Free State of Saxony is pursuant to Art. 51 DSGVO in conjunction with. §§ 14 ff. SächsDSDG: Saxon Data Protection and Transparency Commissioner, Dr. Juliane Hundert, Devrientstraße 5, 01067 Dresden, Internet: www.saechsdsb.de, e-mail: saechsdsb@slt.sachsen.de, telephone: 0351/85471-101, fax: 0351/85471-109.

The supervisory authority to which the complaint was submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

11. up-to-dateness of this privacy policy

This Privacy Policy is currently valid and has the status of January 3, 2023.