§ 28 ThürDSG
Processing of personal data by research institutions
(1)(Articles 6, 9 and 89 of Regulation (EU) 2016/679)
(2)Personal data collected or stored for the purposes of scientific or historical research may only be processed for these purposes.
(3)The transmission of personal data to recipients to which this Act or Regulation (EU) 2016/679 does not apply shall be permissible only where they contractually undertake not to process the transmitted data for other purposes and to comply with the provisions of paragraphs 3 and 4.
(4)The personal data shall, as soon as the research purpose permits, be modified in such a way that individual details about personal or factual circumstances can no longer be attributed, or can only be attributed with a disproportionate expenditure of time, cost and labour, to an identified or identifiable natural person (anonymisation). Until then, the characteristics by means of which individual details can be attributed to an identified or identifiable person shall be stored separately. They may only be combined with the individual details insofar as the research purpose requires this.
(5)Bodies conducting scientific or historical research may publish personal data only where the data subject has given consent or insofar as this is indispensable for the presentation of research results on events of contemporary history.
(6)The rights to access, rectification, restriction of processing and objection pursuant to Regulation (EU) 2016/679 and this Act shall not exist insofar as and for as long as the exercise of these rights would render impossible or seriously impair the achievement of the scientific or historical research interest. zur Einzelansicht § 28