Information on the Processing of Personal Data

The information below provides you with an overview of the processing of your data (hereinafter "data") by the Arvato Systems Group as well as your data protection rights.

The respective company of the Arvato Systems Group with which you have a business relationship is responsible for processing your personal data and addressee of your rights as a data subject. The Arvato Systems Group acts under the joint responsibility of all companies solely for the purpose of conducting marketing activities and pre-contractual measures. We process personal data in accordance with the provisions of the European Data Protection Regulation (hereinafter "GDPR") and the Federal Data Protection Act (hereinafter "BDSG").

You can contact our data protection officer via the postal address of the respective legal entity noting "Attn: Data Protection Department" or via the e-mail address: datenschutz@arvato-systems.de, phone: +49-5241-80 70785.

We process the following categories of personal data:

• Contact information, in particular first and last name, if applicable title, address, if applicable telephone number, e-mail address
• Information about the company or institution you work for
• Details of your professional position
• Appointment requests and notes within an online appointment booking, if applicable
• Photo and video recordings made by you at the event, if applicable

The purposes for the processing of personal data accord with the statutory conditions for their permitted usage at the time of their collection. We use your personal data to contact you, to register you, to organize events and for advertising purposes. In advance of some events, you have the option of booking an appointment via our website. The processing of your data in the context of an event is based on Art. 6 para. 1 lit. f GDPR. The legitimate interests lie in customer care and customer acquisition.

In addition, our events are regularly recorded with images and sound, some of which are published on our homepage, in our social media channels or as part of external and internal reporting. In addition to the photo and video recordings, metadata such as the location and time of the recording and location are automatically stored in the digital cameras. The legal basis for the preparation and storage of photo and video recordings is Art. 6 (1) lit. f) GDPR based on our legitimate interest in reporting on the event. If local legislation requires consent, you have the right, for reasons arising from your particular situation, to object to the creation and storage of your photo and video recordings with future effect by sending an e-mail with your objection to info@arvato-systems.de.

The provision of your data is neither required by law nor by contract. However, if you wish to participate in our events or receive invitations to them, you must provide us with your data. Without your data, we will usually not be able to send you invitations to our events or allow you to participate in our events. 

We use service providers (contract processors) who are bound by instructions and who only have access to your data to the extent and for the period necessary for the provision of the services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same data protection standard as the European Union. However, such a level of data protection can be guaranteed with a suitable guarantee. When selecting service providers, Arvato Systems takes the necessary steps to contractually ensure an equivalent level of data protection. 

Data we process will be deleted in accordance with Articles 17 and 18 GDPR as soon as they are no longer required for their intended purpose unless their deletion is not permitted pursuant to legal retention requirements. If data are not deleted due to being required for other legally permissible purposes, the data are held in restriction and may not be processed for other purposes.

You have the right to request access to your personal data, which are currently stored by us. Where these data are incorrect or not up to date, you have the right to request rectification. In addition, you can request erasure and/or restriction of your data where the criteria are set out in Art. 17 and 18 of the GDPR are met. Where our processing of data provided by you is based on your consent or is subject of a contract, you may request a copy of these data in a structured, common, and machine-readable format (right to data portability).

You have the right to object to the processing of your data, Art. 21 GDPR.

If you have given us consent to process your personal data for specific purposes, you have the right to withdraw this consent at any time with effect for the future.

If you wish to exercise your rights or have general questions regarding data protection within the Arvato Systems Group, you may contact us at any time via the above contact details. You also have the option of contacting a data protection authority and filing a complaint.

Your collected data is not utilised for automated decision making or profiling.

In the course of further development of Arvato Systems services, changes to this privacy policy may become necessary. We, therefore, recommend that you read this privacy policy again from time to time.