DUTY TO PROVIDE INFORMATION PURSUANT TO ART. 13 + 14 GDPR
Table of contents
(1) Description of the processing activity
The data protection information is provided in connection with the processing of your personal data for the registration and implementation of our events and webinars. Without your data, it is unfortunately not possible for us to process your registration. This obligation to provide information applies to both online and face-to-face events.(2) Name and contact details of the person responsible
ISR Information Products AG
Hintern Brüdern 23
38100 Braunschweig
Phone: +49 (0) 531 1208-0
E-mail: info@isr.de
(3) Contact details of the company data protection officer
ISR Information Products AG
– Data Protection Coordinator –
Am Mittelhafen 14
48155 Münster
Phone: +49 (0) 251 9 24 34-0
E-mail: datenschutz@isr.de
(4) Purposes and legal bases of processing
Your data will be processed in order to receive your registration for events and to organize and carry out the event.
4.1 Face-to-face event
Your data for registration for the event will be processed on the basis of Article 6(1)(b) GDPR.
We would like to point out that photographs and/or films will be taken at the event. The photos will be used for the purpose of documenting the event and as part of our reporting (print, online, social networks, etc.). If you do not wish to be photographed, please avoid the areas in which photographs and film recordings are made and/or speak to the photographer directly so that your request can be taken into account.
If personal data is collected without the processing being necessary for the fulfillment of the contract, the processing is based on consent in accordance with Article 6 (1) (a) in conjunction with. Article 7 GDPR.
The publication of personal data on the Internet or in local, regional or national print media is carried out to protect legitimate interests (see Article 6 (1) (f) GDPR). The legitimate interest lies in reporting and event follow-up. In this context, personal data including pictures of the participants are published, for example as part of the reporting on the event.
4.2 Online event / webinars
We use Microsoft Teams or Zoom for online events. Your personal data is processed in the form of video or audio as well as your login data. You can decide for yourself whether the camera and microphone are switched on or off. You also have the option of sharing content. If you participate in the chat function, we will process your personal data contained in the chat texts and the other participants will also be aware of this content.
If a recording is made, the participants will be notified of this in advance. After the meeting has been held, the organizer receives an attendance report with information on the duration of the meeting and the names and emails of the participants.
Your data is processed on the basis of Article 6(1)(b) GDPR.
4.3 Recording of an online event / webinar
If a recording is made, we have obtained your consent in advance. In this regard, the data is processed on the basis of Article 6 (1) (b) GDPR.
(5) Recipients or categories of recipients of the personal data
Your personal data will be transmitted to the ISR employees responsible for the organization and implementation of the event,
Co-organizer,
Speakers,
external service providers engaged for the organization and implementation of the event,
Security authorities with corresponding requirements,
internal service providers for admission control, which also includes video surveillance,
Social media, press if applicable
and to our service providers for their technical support.
If you use Microsoft Teams or Zoom, your personal data will be transmitted to the service provider. For details on data processing, please refer to the following privacy policies:
https://privacy.microsoft.com/de-de/privacystatement
https://explore.zoom.us/de/privacy/
https://isr.de/datenschutzerklaerung/
(6) Transfer of personal data to a third country
6.1 Face-to-face event
For face-to-face events, it is generally not planned to transfer your personal data to a third country or to an international organization.
6.2 6.2 Online event
When using internet services (Teams, Zoom), personal data may also be processed in the USA. The transfer is based on standard data protection clauses (SCC) as suitable guarantees.
Your data is provided via a web application on the Internet. The confidentiality, integrity (inviolability), authenticity (genuineness) and availability of personal data cannot therefore be guaranteed. Your data can also be accessed via the web application in third countries that do not have data protection regulations comparable to those of the Federal Republic of Germany.
(7) Duration of storage of personal data
Retention periods result from legal regulations; the data will be deleted after a maximum of three years after the end of the event.
The exception is a legal obligation to archive/store data in relation to all documents from tax law, even if they contain personal data. The storage period is then a maximum of ten years.
Automatic deletion of chat messages from the team sessions is currently not possible. However, the author has the option of deleting their own posts. Microsoft does not currently provide the option of deleting attendance reports.
(8) Rights of data subjects
According to the EU General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to receive information about the personal data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of the processing and object to the processing (Art. 17, 18 and 21 GDPR). However, we will then no longer be able to communicate with you as a participant in the event.
If you have consented to data processing and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
Furthermore, the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please contact the person responsible for data protection in accordance with section 3.