OBLIGATION TO PROVIDE INFORMATION ON THE COLLECTION OF PERSONAL DATA IN THE CONTEXT OF BLOOD DONATION (GDPR)
DEAR BLOOD DONOR,
As part of your blood donation at the Institute of Transfusion Medicine - Transfusion Center of the University Medical Center Mainz, it is necessary to collect and process personal data related to you, particularly health data. To ensure full transparency about what happens to your data, we have compiled the following information for you:
Controller Responsible for the Processing of Personal Data
UNIVERSITY MEDICAL CENTER of the Johannes Gutenberg University Mainz
Langenbeckstraße 1
55131 Mainz
Phone: +49 6131-170
Represented by the Medical Director and Chairman of the Board,
Univ.-Prof. Dr. Ralf Kiesslich
Contact Details of the Data Protection Officer
UNIVERSITY MEDICAL CENTER of the Johannes Gutenberg University Mainz
Data Protection Officer
Langenbeckstraße 1
55131 Mainz
Phone: +49 6131-170
Email: datenschutz@unimedizin-mainz.de
WHY DO WE PROCESS YOUR PERSONAL DATA?
During the medical consultation, we have informed you about the specifics of blood and blood component donation. The Institute of Transfusion Medicine - Transfusion Center collects and processes the personal data mentioned in the consultation, which are necessary for the blood donation and subsequent processing of the donated material. Only medically relevant data required for the collection, processing, administration, and testing of donated blood, as specified in the consent form, as well as data related to donor health, are recorded and processed.
LEGAL BASIS FOR PROCESSING YOUR DATA
The processing of the aforementioned personal data is based on your consent in accordance with Article 6(1)(a) and Article 9(2)(a) of the General Data Protection Regulation (GDPR).
WHO RECEIVES YOUR DATA?
Personal data is processed exclusively within the University Medical Center Mainz (including the Institute of Transfusion Medicine - Transfusion Center, clinical departments, and laboratories).
In the event of serious adverse reactions or severe incidents, your data may be disclosed to supervisory authorities as required by Section 16 of the Transfusion Act (gem. § 16 Transfusionsgesetz) or Section 9 of the Infection Protection Act (gem. § 9 Infektionsschutzgesetz).
HOW LONG WILL YOUR DATA BE STORED?
The legal basis for data retention is found in Section 14 of the Transfusion Act (gem. § 14 Transfusionsgesetz). According to this law, all records and information necessary for the use and traceability of blood products must be kept for 30 years and then either deleted or anonymized.
HOW CAN YOU WITHDRAW YOUR CONSENT?
If the processing of your data is based on consent that you have given to the University Medical Center Mainz, you have the right to withdraw your consent at any time. You can do so in any form (written, electronic, or in person) without needing to provide reasons.
The withdrawal will only take effect from the moment it is received and does not have retroactive effect, meaning that data processing conducted up to that point remains lawful.
Contact for withdrawal of consent:
UNIVERSITY MEDICAL CENTER
Johannes Gutenberg University Mainz
Institute of Transfusion Medicine - Transfusion Center
Augustusplatz 4
D-55131 Mainz, Germany
Phone: +49 6131 17 3216
Email: Blutspende-Info@unimedizin-mainz.de
Website: www.unimedizin-mainz.de/transfusionszentrale
WHAT RIGHTS DO YOU HAVE?
As a data subject, you have various rights that you can exercise against the University Medical Center Mainz - Institute of Transfusion Medicine - Transfusion Center:
Right to Access (Article 15 GDPR)
You have the right to obtain information about the personal data stored about you.
Right to Rectification (Article 16 GDPR)
If you find that incorrect data about you is being processed, you can request a correction. Incomplete data must also be completed in accordance with the purpose of the processing.
Right to Erasure (Article 17 GDPR)
You have the right to request the deletion of your data when specific grounds for deletion exist, particularly if the data is no longer needed for the purpose for which it was originally collected or processed.
Right to Restriction of Processing (Article 18 GDPR)
You have the right to request that the processing of your data be restricted. This means that while your data will not be deleted, it will be marked to limit further processing or use.
Right to Object (Article 21 GDPR)
You have a general right to object to the processing of your data, even when the processing is lawful and based on public interest, the exercise of official authority, or the legitimate interests of an entity.
Right to Data Portability (Article 20 GDPR)
You can request a copy of your personal data in a common and machine-readable format.
WHERE CAN YOU FILE A COMPLAINT?
You have the right to file a complaint with a supervisory authority of your choice if you believe that the processing of your data is not in compliance with data protection laws. This right is established in Article 77 GDPR.
The supervisory authority responsible for the University Medical Center Mainz can be reached at:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Phone: +49 6131-208 2449
Fax: +49 6131-208 2497
Complaints to the supervisory authority can be submitted informally.
Download privacy police (PDF 71,0 KB).