OBLIGATION TO INFORM INDIVIDUALS REGARDING THE COLLECTION OF PERSONAL DATA IN THE CONTEXT OF BLOOD DONATION (GDPR)
DEAR BLOOD DONOR,
As part of your blood donation at the Institute of Transfusion Medicine – Transfusion Center of the University Medical Center Mainz, it is necessary to collect and process data relating to you (personal data), in particular health data. In order for you to know exactly what happens to these data, we have compiled the following information for you:
Responsible individual for the processing of personal data
UNIVERSITÄTSMEDIZIN der Johannes Gutenberg-Universität Mainz
Langenbeckstraße 1
55131 Mainz
Phone: +49 6131-17-0
Represented by the Medical Director and Chairman of the Board,
Univ.-Prof. Dr. Ralf Kiesslich
Contact details of the Data Protection Officer
University Medical Center of Johannes Gutenberg University Mainz
Data Protection Officer
Langenbeckstraße 1
55131 Mainz
Phone: +49 6131-17-0
Email: datenschutz@unimedizin-mainz.de
What personal data do we use and for what purpose?
In the donor questionnaire you filled in prior to donation, you were informed about the donation of blood and blood components. The Institute of Transfusion Medicine – Transfusion Center collects and processes the personal data which were mentioned in the questionnaire and which are necessary for blood donation and the subsequent use of the donated material. This includes, in addition to data on donor health, your contact details for scheduling appointments, issuing donor letters, and communicating test results.
Legal basis for processing your data
The legal basis for processing the aforementioned personal data is your consent in accordance with Art. 6(1)(a) and Art. 9(2)(a) of the General Data Protection Regulation (GDPR).
To whom do we disclose your data?
Your personal data will only be processed within the University Medical Center Mainz (including the Institute of Transfusion Medicine – Transfusion Center, clinical departments, and laboratories).
In the case of serious adverse reactions or serious incidents, your data will be disclosed to regulatory authorities as required under Section 16 of the Transfusion Act) or Section 9 of the Infection Protection Act (gem. § 9 Infektionsschutzgesetz).
How long will your data be stored?
The legal basis for the duration of data storage can be found, among others, in Section 14 of the Transfusion Act (gem. § 14 Transfusionsgesetz). According to this, all records and information required for the use or traceability of blood products must be retained for 30 years and then deleted or anonymized.
How can you withdraw your consent?
If the processing of your data is based on consent that you have given to the University Medical Center Mainz, you have the right to withdraw this consent at any time. You may submit this declaration in any form or present yourself in person. No reasons need to be provided. Your withdrawal becomes effective from the time it is received by us. It does not have retroactive effect, meaning that the processing of your data up to that point remains lawful.
Contact for this purpose:
UNIVERSITÄTSMEDIZIN
der Johannes-Gutenberg-Universität Mainz
Institut für Transfusionsmedizin – Transfusionszentrale
Augustusplatz 4
D-55131 Mainz, Germany
Phone: +49 6131-17-3216
Email: Blutspende-Info@unimedizin-mainz.de
Web: www.unimedizin-mainz.de/transfusionszentrale
What rights do you have?
You have so-called data subject rights, i.e. rights that you can exercise as a data subject. You can assert these rights against the University Medical Center Mainz – Institute of Transfusion Medicine – Transfusion Center:
Right of access, Art. 15 GDPR
You have the right to obtain information about the personal data stored about you.
Right of rectification, Art. 16 GDPR
If you find that incorrect data about you is being processed, you may request correction. Incomplete data must be completed, taking into account the purpose of processing.
Right to have data erased, Art. 17 GDPR
You have the right to request the deletion of your data if certain grounds for deletion exist. This is particularly the case if the data are no longer necessary for the purposes for which they were originally collected or processed.
Right to have processing of data restricted, Art. 18 GDPR
You have the right to request restriction of the processing of your data. This means that your data will not be deleted but will be marked in order to restrict further processing or use.
Right to object, Art. 21 GDPR
You generally have the right to object, including to lawful data processing carried out in the public interest, in the exercise of official authority, or on the basis of a legitimate interest.
Right of data portability, Art. 20 GDPR
You may request to receive a copy of your personal data in a commonly used and machine-readable format.
Where can you place a complaint?
Without impairment of your right to seek judicial assistance, you have the right to place a complaint with a supervisory authority of your choice if you believe that the processing of your data is not lawful under data protection law. This follows from Art. 77 GDPR.
The supervisory authority for the University Medical Center Mainz for such cases may be contacted at:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Phone: +49 6131-8920-0
Fax: +49 6131-8920-299
Download privacy police(PDF 108,3 KB).