Information obligation pursuant to Articles 13 and 14 of the GDPR
CONTENTS
(1) Description of the processing activity
The privacy policy applies to the processing of your personal data for the registration and implementation of our events and webinars. Without your data, we are unfortunately unable to process your registration.
This duty to provide information applies to both online and in-person events.
(2) Name and contact details of the responsible parties
ISR Information Products AG
Hintern Brüdern 23
38100 Braunschweig
Phone: +49 (0) 531 1208-0
Email: info@isr.de
(3) Contact details of the company data protection officer
ISR Information Products AG
– Data Protection Coordinator –
Am Mittelhafen 14
48155 Münster
Phone: +49 (0) 251 9 24 34-0
Email: datenschutz@isr.de
(4) Purposes and legal bases of processing
Your data will be processed in order to accept your registration for events and to organize and carry out the event.
4.1 Face-to-face event
Your data for registering for the event will be processed on the basis of Article 6(1)(b) GDPR.
We would like to point out that photographs and/or videos will be taken at the event. The photos will be used for the purpose of documenting the event and in our reporting (print, online, social networks, etc.). If you do not wish to be photographed, please avoid the areas where photos and videos are being taken and/or speak to the photographer directly so that your request can be taken into account.
If personal data is collected without the processing being necessary for the performance of the contract, the processing is based on consent in accordance with Article 6(1)(a) in conjunction with Article 7 GDPR.
The publication of personal data on the Internet or in local, regional, or national print media is carried out to safeguard legitimate interests (cf. Article 6(1)(f) GDPR). The legitimate interest lies in reporting and event follow-up. In this context, personal data, including images of participants, are published, for example, in the context of reporting on the event.
4.2 Online events / Webinars
We use Microsoft Teams or Zoom for online events. Your personal data in the form of video or audio as well as your login details will be processed. You can decide for yourself whether to turn your camera and microphone on or off. You also have the option of sharing content. If you participate in the chat function, we will process your personal data contained in the chat texts, and the other participants will also be aware of this content.
If a recording is made, participants will be notified in advance. After the meeting, the organizer will receive an attendance report with information about the duration of the meeting and the names and email addresses of the participants.
Your data will be processed on the basis of Article 6(1)(b) GDPR.
4.3 Recording of an online event/webinar
If recording takes place, we will have obtained your consent in advance. In this regard, the data will be processed on the basis of Article 6(1)(b) GDPR.
(5) Recipients or categories of recipients of the personal data
Your personal data will be transferred to ISR employees responsible for organizing and running the event, co-organizers, speakers,
external service providers involved in organizing and running the event,
security authorities in accordance with relevant requirements,
internal service providers for admission control, which also includes video surveillance,
social media, press
and our service providers for technical support, where applicable.
When using Microsoft Teams or Zoom, your personal data will be transferred to the service provider. For details on data processing, please refer to the following privacy policies:
https://privacy.microsoft.com/de-de/privacystatement
https://explore.zoom.us/de/privacy/
https://isr.de/datenschutzerklaerung/
(6) Transfer of personal data to a third country
6.1 Face-to-face event
For in-person events, there are generally no plans to transfer your personal data to a third country or to an international organization.
6.2 Online event
We use Microsoft Teams or Zoom for online events. Your personal data in the form of video or audio as well as your login details will be processed. You can decide for yourself whether to turn your camera and microphone on or off. You also have the option of sharing content. If you participate in the chat function, we will process your personal data contained in the chat texts, and the other participants will also be aware of this content.
If a recording is made, participants will be notified in advance. After the meeting, the organizer will receive an attendance report with information about the duration of the meeting and the names and email addresses of the participants.
Your data will be processed on the basis of Article 6(1)(b) GDPR.
(7) Duration of storage of personal data
Retention periods are based on legal regulations; data will be deleted no later than three years after the end of the event.
An exception to this is a legal obligation to archive/store data in relation to all documents under tax law, even if they contain personal data. In this case, the maximum storage period is ten years.
It is currently not possible to automatically delete chat messages from team meetings. However, the author has the option to delete their own posts. Microsoft does not currently offer the option to delete attendance reports.
(8) Rights of data subjects
According to the EU General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to request its correction (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18, and 21 GDPR). However, we will then no longer be able to communicate with you as a participant in the event.
If you have consented to data processing and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
Furthermore, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR and the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
To exercise your rights, please contact the person responsible for data protection in accordance with section 3.