Information on data protection for BIO Deutschland e.V. events

With this attachment, we inform you as a participant of our event about the processing of your personal data through photos and video recordings. We also inform you about the claims and rights to which you are entitled under data protection regulations. We hereby fulfill our information obligations under Art. 13, 14 of the General Data Protection Regulation (GDPR).

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is the:

BIO Deutschland e. V.
Schützenstraße 6a
10117 Berlin
www.biodeutschland.org

2. Contact details of the data protection officer

You can reach our data protection officer as follows:

DataCo GmbH
Dachauer Str. 63
80335 München
Deutschland
089 452459-900
www.dataguard.de

3. Which sources and data categories are processed for the event?

We process personal data that we receive from you through your participation in BIO Deutschland e. V. events. We process the following:

  • photos
  • Participant data (gender, academic title, first name, surname, company affiliation, e-mail address)

Depending on the event, the following data may also be collected as required:

  • Telephone number
  • Job title
  • Press card
  • Videos
  • Payment details
  • Date of birth
  • Eating habits/intolerances
4. What is the purpose of processing your data for the event?

We process your personal data for the following purposes:

  • For the organization of events
  • Registration for the event and its implementation as an event (possibility to ask questions, feedback loops to improve the event).
  • For internal reporting purposes
  • For advertising purposes for our company on social and professional networks

In addition, the photographs and/or film recordings will be published in the association's media for marketing purposes after the event:

  • On the websites (biodeutschland.org, biotechnologietage.de)
  • In social or professional networks (LinkedIn, X, meta platforms)
  • Print publications (yearbook, sponsor brochures, flyers)
  • For internal training purposes
  • Presentations (industry presentations at conferences and other meetings)
  • Under certain circumstances, publication on the website and on social or professional networks may result in further use by third parties or complete deletion.

The photos are stored, processed and published for the purpose of documenting the event and as part of our public relations work. These purposes constitute a legitimate interest for us within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR. If you do not wish to be photographed, please contact the photographer directly so that your request can be taken into account.

We do not intend to process your personal data for any other purpose.

5. On what legal basis is the processing of personal data based?

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis. Consent that has been given can be withdrawn at any time with effect for the future. To do so, you can contact us at info@biodeutschland.org or by post at Bio Deutschland e. V. Schützenstraße 6a in 10117 Berlin. If this use is not based on consent, the processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

6. How long will your personal data be stored?

We do not store your personal data for longer than is necessary for the purpose for which it was collected. This means that data is destroyed or deleted from our systems as soon as it is no longer required. We take appropriate measures to ensure that your personal data is only processed under the following conditions:

  1. for the duration that the data is used to provide you with a service
  2. as required by applicable law, contract or in light of our legal obligations
  3. only for as long as necessary for the purpose for which the data was collected or longer if required by contract, applicable law, using appropriate safeguards.

If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - retention is still necessary.

7. To whom is your personal data passed on?

If we use a service provider (e.g. an event manager) as a processor, we remain responsible for the protection of your data. All processors are obliged to treat your data confidentially and to process it only in the context of providing the service.

The data is passed on to the following recipients:

  • Processor
  • photographer

Furthermore, the data will be published on the Internet on our website and on social or professional networks. Under certain circumstances, further use by third parties or complete deletion cannot be ruled out.

8. Will your data be transferred to a third country or an international organization?
  • Meta
  • LinkedIn
  • Microsoft
  • Youtube
  • Vimeo
  • X
  • Zoom
  • Stripe Payments Europe

We provide information on our website and offer users the opportunity to communicate.

The company website is used for applications, information/PR, marketing, and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:

  • LinkedIn: https://www.linkedin.com/legal/privacy-policy
  • Microsoft: https://privacy.microsoft.com/de-de/privacystatement
  • Meta https://www.facebook.com/privacy/policy https://www.meta.com/de-de/help/quest/articles/accounts/privacy-information-and-settings/meta-privacy-policies/
  • Youtube https://policies.google.com/privacy?gl=DE&hl=en
  • Vimeo https://vimeo.com/privacy
  • X https://twitter.com/de/privacy
  • Zoom https://explore.zoom.us/de/privacy/
  • Stripe Payments Europe https://stripe.com/en-de/privacy

We have entered into agreements with all service providers to whom we transfer your data that require them to protect your data. Where your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" standard of data protection according to the European Commission, or by using another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have in place with our service providers by sending an email to the email address provided in this Privacy Policy.

If you perform an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public.

a. For what purpose will my data be processed?

The purpose of our company website is to inform users about our services. Every user is free to publish personal data through activities. The publication of photo and video material of our events on professional networks is used for marketing purposes and to recruit potential employees.

b. How long will my data be stored?

We store your activities and personal data published via our company website until you withdraw your consent. In addition, we comply with the statutory retention periods.

c. Are there possibilities for objection and removal?

You can object to the processing of your personal data that we collect in the context of your use of our company website at any time and assert your rights as a data subject as set out in section 10 of this privacy policy. To do so, send us an informal email to info@biodeutschland.org.

You can find further information on this from LinkedIn at: https://de.linkedin.com/legal/l/dpa

Further information on objection and removal options can be found here:

  • LinkedIn: https://www.linkedin.com/legal/privacy-policy
  • Microsoft: https://privacy.microsoft.com/de-de/privacystatement
  • Meta https://www.facebook.com/privacy/policy https://www.meta.com/de-de/help/quest/articles/accounts/privacy-information-and-settings/meta-privacy-policies/
  • YouTube https://policies.google.com/privacy?gl=DE&hl=en
  • Vimeo https://vimeo.com/privacy
  • X https://twitter.com/de/privacy
  • Zoom https://explore.zoom.us/de/privacy/
  • Stripe Payments Europe https://stripe.com/en-de/privacy
9. What data protection rights do I have?

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. You also have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected.

To exercise your rights, you can contact us using the contact details provided in section 1.

10. Can I object to the processing of my personal data?

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.