Data privacy information for business contacts
As a controller for the processing of your personal data within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR), we hereby provide you with information on the collection and processing of your personal data in the context of events.
Information pursuant to Art. 13 GDPR
| Name and contact details of the controller (Art. 13 para. 1 lit. a) | The following company is responsible for the processing of your personal data: OEDIV Oetker Daten- und Informationsverarbeitung KG E-Mail: data-privacy@@oediv..de |
| Contact details of the data protection officer (Art. 13 para. 1 lit. b) | You can reach our data protection officer at the following address: Oetker Digital GmbH |
| Categories of data processed | We process the following categories of personal data:
|
| The purposes for which the personal data is to be processed, as well as the legal basis for the processing (Art. 13 para. 1 lit. c) | We collect and process your personal data in order to establish business contacts, provide information and develop potential business relationships. This includes in particular the provision of further information on our products and services, individual consultations and the initiation and implementation of contractual relationships. If you have given us your consent by scanning the QR code, we will also use your data for advertising purposes to inform you about our products, services and events. The processing of your data is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to maintain business contacts and provide you with relevant information. If you give your consent to contact you and to use your data for advertising purposes, the processing will also be carried out on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. |
| Recipients or categories of recipients of the personal data (Art. 13 para. 1 lit. e) | Your personal data will only be passed on within our company to those entities that need it to fulfil the above-mentioned purposes. In addition, Microsoft receives your personal data as a processor, as our CRM system is hosted in the Microsoft Cloud. Hosting takes place within the EU. A data processing agreement (DPA) has been concluded with Microsoft in accordance with Art. 28 GDPR in order to ensure the protection of your data. Beyond this, data will only be passed on to third parties if this is necessary to fulfil the stated purposes or if we are legally obliged to do so. |
| Duration for which the personal data will be stored or, if this is not possible, criteria for determining the storage period (Art. 13 para. 2 lit. a) | Personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected or as soon as it declares its revocation/objection to us and provided that the deletion does not conflict with any retention obligations to which we are legally bound. |
| Rights of data subjects (Art. 13 para. 2 lit. b) | You can request information about whether we are processing your personal data. If this is the case, you have a right to information about this personal data as well as to other information related to the processing (Art. 15 GDPR). In the event that personal data about you is not (or no longer) accurate or incomplete, you can request that this data be corrected and, if necessary, completed (Art. 16 GDPR). If the legal requirements are met, you can request the deletion or restriction of processing, make use of the right to data portability and object to the processing (Art. 16, 17, 18, 20, 21 GDPR). Please note that the rights of data subjects may be limited or excluded in certain cases (Art. 23 GDPR). If the processing of your data is based on your consent, you can revoke it at any time with effect for the future. Please contact us if you would like to assert a right as a data subject. |
| Right of appeal (Art. 13 para. 2 lit. d) | Pursuant to Art. 77 (1) GDPR, any data subject may lodge a complaint with the competent supervisory authority if he or she believes that his or her rights have been violated in the processing of his or her personal data, without prejudice to further legal remedies. You can contact the responsible supervisory authority at: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf |
| Necessity of providing personal data and possible consequences of not providing it (Art. 13 para. 2 lit. e) | The provision of personal data is voluntary. However, if you do not provide us with the personal data, this will mean that no contact can be made. |