Information obligations under GDPR (Datenschutz-Grundverordnung - DSGVO)

Data Protection Declaration of the AI School

The protection of your personal data is very important to us. IOM is controller of the personal data described within the meaning of the General Data Protection Regulation (GDPR) and is hereby complying with its relevant information obligations. We ask you to take note of the following notification relating to the administrative and technical processing in connection with the AI School.

I. Inputting contact data

Controller of data processing described below is the Leibniz Institute of Surface Engineering  (IOM), Permoserstraße 15, 04318 Leipzig,

The data protection officer is Anja Spittler, DEKRA Assurance Services GmbH, De-Smit-Str. 18, 07545 Gera, Germany;;

II. Background of processing / indication of the purpose for which the personal data is to be processed / legal basis of processing / categories of recipients of the personal data

1. IOM operates a website ( in order to make it possible to register for the AI School. Users may register by inputting their personal data. The data are in that case entered into an entry mask and processed by IOM.

IOM in that case collects the following personal data from you as the data subject in order to make it possible for you to register for the AI School:

  • First and last name
  • Address
  • Company or organisation
  • Email address
  • Other personal information you provide voluntarily

Your internet browser, when accessing the IOM website for technical reasons, automatically transmits data to the IOM website (e.g. date and time of access, URL of the referring website, your IP address). Such data are stored separately from the other data you enter in the course of the registration.

2. The legal basis for the personal data collected in connection with the contractual agreement with the data subject is the requirement of processing for execution of registration and participation in AI School.

There is no statutory obligation to provide personal data, but, in case of failure to provide it, contract closing or participation in the AI School cannot occur.

3. Recipients of the personal data are the organisational units of IOM necessary for corresponding processing, in particular the AI School organizing team and the department of financial accounting. It is maintained that any further forwarding to third parties will only occur if this is statutorily required or allowed.

If any eventual court and/or regulatory authority disputes should ensue during or after the termination of the legal relationship, then the data required for appropriate enforcement will be transmitted to legal representatives, courts or public authorities.

III. Indication of the criteria for determination of the retention period

In case of any contract closing or participation in the AI School, the personal data will be processed by IOM for the duration of statutory retention as well as up through the end of the time-bars for potential legal claims. Subsequently, the data will be erased unless there are other justified IOM interests warranting further storage.

IV. Information on the rights of the data subject

Under GDPR you have the following rights:

  • Right to information
  • Right to rectification and erasure
  • Right to limitation of processing
  • Right to object
  • Right to data portability

V. Right to appeal to the supervisory authority

In addition, you can appeal against any data processing not allowed in your opinion to the German Data Protection Authority in Saxony (Sächsischer Datenschutzbeauftragter, Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany).