Declaration of consent and privacy notice on the processing of personal data in the context of the DLR project ProCo and the EU Joint Undertaking Project TRANS4M-R
-
- I. Declaration of consent to process personal data
The German Aerospace Center (DLR) takes the protection of your personal data very seriously. The intended processing of your personal data for the purpose of participating in this survey as well as the collection of your contact information for the purposes of contacting you in case of further questions requires your prior given consent as the legal basis.
I consent that DLR is entitled to process the described personal data only for the above-mentioned purposes.
- Survey regarding the movements of freight wagons (no questions regarding personal data)
- Collection of contact information for the purposes of deleting a corresponding dataset in line with art. 17 of the GDPR (optional) as well as for potentially establishing contact for further questions or comments (optional)
My consent is given freely. I am entitled to refuse it without stating any reasons and without having to expect any disadvantages as a result. I can also revoke this consent at any time in text form (e.g. by email) with effect for the future. After receipt of the withdrawal, my data may not be further processed. The withdrawal of my consent does not affect the lawfulness of the processing up to that point.
In order to enable you to make a transparent decision, we would like to inform you about how DLR processes your personal data with the following privacy notice.
This survey is only open to persons who are at least 16 years of age.
-
- Privacy notice
In accordance with the EU General Data Protection Regulation (GDPR) applicable from 25 May 2018, this privacy notice informs you about the processing activities of your personal data by DLR and about your data subject rights. These notices may be updated as necessary and will be made available to you.
- Controller and Data Protection Officer
The person responsible within the meaning of the GDPR is the
German Aerospace Center (DLR)
Linder Höhe, 51147 Cologne
Phone: +49 2203 601-0, web: https://www.dlr.de
You can contact the DLR Data Protection Officer at:
DLR Data Protection Officer, Linder Höhe, 51147 Cologne,
Email: datenschutz@dlr.de
- Purpose of the processing activities
The purpose of the processing is to collect and organize information regarding the status quo of specific movements of railway freight wagons and subsequently derive the functional requirements which various stakeholders might place upon a potential self-propelled freight wagon. The option exists to provide contact information for the purpose identification of your dataset in case you wish to have it deleted before the end of the projects (see point 6 below). Additionally, a further option is available to consent to participate in further discussion. If this option is not selected, the contact information provided will only be used for the purposes of deleting specific datasets in line with art. 17 of the GDPR.
If no contact information is provided, the survey is completely anonymous.
- Data categories
The following personal data are processed within the scope of the processing activity:
-
- Email address
- Family name
- Given name
- Legal basis of the processing activities
If the processing is based on a declaration of consent, the legal basis for the processing is Art. 6 (1) (a) GDPR.
- Categories of recipients
Personal data is regularly disclosed internally only to the departments that have been entrusted with the processing. In this connection, it shall always be assessed whether the transfer is necessary to that effect. Your data will only be passed on if confidentiality is maintained and only to the extent permitted by a legal basis.
- Data retention period
The personal data will only be processed as long as necessary. All personal data will be permanently deleted at the latest 3 months after the end of the projects, planned for 2026. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject.
- Data subjects’ rights
You have the following rights vis-à-vis DLR with regard to the personal data concerning you. In order to exercise these rights, please contact the office indicated in section 1. Under the conditions and safeguards set out in Article 89 (1) GDPR, there may be exceptions to data subjects' rights in the case of research projects in accordance with Article 89 (2), (3) GDPR.
- Right of access - Art. 15 GDPR
The right of access grants the data subject comprehensive insight into the data concerning him or her and into other important criteria, such as the purposes of the processing or the period for which the data shall be stored. The derogations of this right laid down in Sect. 34 BDSG are applicable.
- Right of rectification - Art. 16 GDPR
The right to rectification implies the possibility for the data subject to have inaccurate personal data concerning him or her rectified.
- Right to erasure - Art. 17 GDPR
The right to erasure entails the possibility for the data subjects to have data erased at the controller. This is, however, only possible if the data concerning him or her are no longer necessary, if they have been unlawfully processed, or a corresponding consent has been withdrawn. The derogations laid down in Sect. 35 BDSG are applicable.
- Right to restriction of processing - Art. 18 GDPR
The right to restriction of processing includes the possibility for the data subject to prevent for the time being any further processing of personal data concerning him or her. A restriction mainly occurs at the stage of examining other exercises of rights by the data subject.
- Right to data portability - Art. 20 GDPR
The right to data portability implies the right for the data subject to receive from the controller the personal data concerning him or her in a commonly used, machine-readable format in order to have them, if necessary, transferred to another controller. In accordance with Art. 20 para. 3 sentence 2 of the GDPR, that right is not available if the data processing serves the purpose of performing public tasks.
- Right to object - Art. 21 GDPR
The right to object includes the possibility for data subjects to object, in a particular situation, to the further processing of their personal data as far as this processing is justified by the performance of public tasks or of public and private interests. The derogations laid down in Sect. 36 BDSG are applicable.
Data subjects have the option to withdrawal their data protection consent at any time with effect for the future.
- Complaint to a supervisory authority - Art. 77 GDPR
Every data subject has the right to lodge a complaint with a supervisory authority. As a rule, the supervisory authority of your usual place of residence or workplace or the registered office of the person responsible is available for this purpose.
- Provision of personal data
There is no obligation to provide personal data. Where these data are not provided either completely or in part, the processing is not possible or is only possible to a limited extent. This shall not apply to such data that we process within the scope of consent.
- Automated decision making
Automated decision-making does not take place.