The EU General Data Protection Regulation (hereinafter referred to as "GDPR") obliges us to take appropriate measures when processing data, but also to inform you. You will therefore find the following in our data protection information:The EU General Data Protection Regulation (hereinafter referred to as "GDPR") obliges us to take appropriate measures when processing data, but also to inform you. You will therefore find the following in our data protection information:

A. Our contact details                                                                                                                                                                                                                                                    
Responsible party for data protection law:                                                                                                                                                                                                                       

tcworld GmbH
Heilbronner Street 86
70191 Stuttgart
Germany
Phone: +49 711 65704-0
Email: infodontospamme@gowaway.tekom.org                                                                                                                                                                                                                                                   

Further information can be found at https://www.tekom.de/impressum

You can reach our data protection officer at the email address datenschutz@tekom.de or at our postal address to the attention of the "Data Protection Officer".

B. Details on the processing of your data

The data we collect and process from you is determined by the respective context and, for example, by the respective form that we use for data collection. We also process the data that you provide to us (name, email address, postal address, telephone number, fax number, etc.).

1. Registration and user account

To register for the tcworld conference, use the access data from your 'my tekom' user account. If you do not yet have a user account, you can create one. We will collect the following personal data from you:

• Firstname
• Last name
• Email address.

The legal basis for processing is Art. 6(1)(b) GDPR, because we assume that you will register for an event sooner or later. If the activated user account remains unused after 6 months, we will delete the data and thus also your account.

We use the so-called double opt-in procedure to create the user account. This means that we will send you a confirmation email to the email address provided after you have entered your personal data. This contains a link which you must follow and create a password. If you do not do this within 7 days, your personal data provided for activation will be deleted.

Further information on the use of your user account and data protection with regard to the use of the conference portal (e.g. cookies, social media plug-ins) can be found here.

2. Registration for the conference/ticket purchase

The following personal data is collected as part of the registration for the conference:                                                                                                                                               

• First name, last name
• Company (if available)
• Billing address (also email address)
• VAT
• Industry
• Position (optional).                                                                                                                                                                                                                                             

Collecting this data is for the purpose of contract fulfillment. The legal basis for data processing is Art. 6(1)(b) GDPR.

Insofar as the data collected is not required for the fulfillment of the contract (industry, position), the collection is based on our legitimate interest in accordance with Art. 6 (1)(f) GDPR.

3. NetworkingLounge: Scope and visibility of your profile/functions

In the NetworkingLounge, you can contact other attendees (contact request), send messages, and chat with each other. You can view all other attendees, search for specific people, or search for people with specific interests.

When you register for the conference, a profile is automatically created for you. You will be directed to this profile immediately after your first login to the conference platform.

The following personal data is taken from your registration for your profile:                                                            

• First name, last name
• Email address
• City
• Country
• Company
• Industry
• Position                                                                                                                                                                

You have the option of adding the following information to your profile:                                                                                                                                                                

• Photo
• Job
• Status
• Interests (Offer/Search)
• Social media contacts                                                                                                                                                       

Meeting and exchanging ideas is one of the most important elements of our events. The legal basis for our data processing is Art. 6 (1)(b) GDPR, insofar as we contractually owe you participation in this exchange, and otherwise our legitimate interest pursuant to Art. 6 (1)(f) GDPR, in order to enable attendees to exchange ideas and get to know each other in a comprehensive and simple manner.

Your profile is visible to other attendees, sponsors and speakers.

Other attendees, sponsors and speakers can see your details in the NetworkingLounge and search for your name. You can send and receive contact requests. If the contact request is accepted by the recipient, you can exchange messages, chat, and view each other's complete profile. Without a confirmed contact request, you have the option of leaving a short message, but you cannot chat. The chats are SSL-encrypted and can only be viewed by the people chatting with each other.

You have the option of saving your profile for future events. The NetworkingLounge will be connected to 'my tekom' as an additional member service. The profile will therefore remain available for tekom members.                                                                                                                                                                                                                                 

4. Showrooms and exhibitor presentations

In the showrooms, you can watch the recordings, download exhibitors' documents, view exhibitors' job advertisements, leave messages for the exhibitors' consultants, and make appointments.

You can use a contact form to leave messages for the exhibitors' consultants or to arrange appointments. By sending the message, you agree that the personal data you provide, such as your email address, will be used by the exhibitor under its own responsibility.                                                                                                                                                                        

5. Conference
5.a. Conference (for attendees on site)

Almost all conference sessions will be recorded and made available to all conference attendees on the conference website for three months.

Therefore, you may be seen and/or heard in the recordings.

The legal basis for data processing is Art. 6 (1)(f) GDPR for you as an on-site attendee. We base our legitimate interest on the fact that by offering online participation, we can open up a wider group of attendees and thus make the event more interesting for all attendees (including sponsors, exhibitors, etc.). In addition, the recordings also enable you to view them after the event.

For the processing of your data in the context of recording, please refer to section 5.b. below.                                                                                                       

5.b. Conference (for online attendees)                                                                                                                                                                                      

We use ZOOM as our conference technology.

Recordings will be available to exhibitors and conference attendees for 3 months after the event, after which they will be deleted.

If you participate online in sessions (such as specialist presentations, workshops, tutorials or panel discussions), we will forward the following personal data to the conference service provider:

• Salutation
• First name
• Last name
• Email address

Various types of data are processed when you use ZOOM. The scope of the data also depends on the data details and data entries you make when participating. Depending on the format of the sessions, participants may be able to take part in live discussions and the names of the participants may be visible.

You may have the option of using the chat, question or survey functions. In this respect, the text entries you make are processed in order to display and, if necessary, log them.

Under certain circumstances, the moderator may give you the option of sharing your screen so that your screen content is also displayed to the other participants, the moderator and the speakers. In this case, you can switch off or mute the webcam, microphone and screen sharing yourself at any time.

Almost all conference sessions will be recorded and made available to all conference attendees on the conference website for three months.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR – Fulfillment of contractual obligation – Event participation. For the archiving of recordings, we rely on Art. 6 para. 1 sentence 1 lit. f GDPR – Legitimate interest as a professional association.

If the format allows you to share your picture and actively participate in discussions or in a chat that is visible to everyone, you will be informed of this verbally and in the chat at the start of the live event.

If you do not agree to your image or contributions being recorded, please leave the meeting and watch the recording later.

If there is no indication at the beginning of a session, the format is either designed so that your name and the question chat are not visible, or the event is not recorded (as is the case with workshops and meetups).                                                                                                                                                                                                                                            

6. Satisfaction survey and newsletter/advertising

Your satisfaction is important to us. That is why we give you the opportunity to take part in a satisfaction survey after the event. In addition, we assume that you are interested in receiving publication notices by email in connection with the lectures you attended and information on similar events. The legal basis for this is Art. 6 (1)(f) GDPR and Section 7 (3) UWG. You can notify us at any time if you no longer wish to receive this information.                                                                                                                                     

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In many cases, service providers and service partners support our specialist departments in fulfilling their tasks, e.g. processing visitor registration, handling the trade fair logistics system, sending newsletters, sending emails, processing payments, processing orders, credit checks, web hosting, data maintenance and analysis. All service providers and service partners have been carefully selected and the necessary data protection contracts have been concluded with all service providers and service partners. Personal data is processed by our service providers and service partners in compliance with the relevant data protection regulations in order to provide support and information to customers and interested parties and to process the services offered.

Your data will be transmitted to exhibitors in the following cases:

• If you use a voucher for your conference/trade fair visit, you accept that the data you provide during visitor registration will be transmitted to the exhibitor who invites you to a free or discounted visit. This may aid in settling the tickets between the exhibitor and tcworld GmbH, checking the vouchers redeemed, and enabling exhibitors to contact their visitors.
• If you participate in lead tracking. Participation in lead tracking takes place when you allow an exhibitor to scan the barcode on your ticket for the event during your visit. Similar to handing over a business card, by scanning the barcode the exhibitor receives the contact details you provided during visitor registration (company name, salutation, title, last name, first name, company, street, zip code, city, email, industry information if applicable and other details you provided), regardless of whether the exhibitor is from Germany, the EU or other third countries. Your participation in lead tracking is voluntary and does not take place without your further involvement.           

The following also applies to all data processing described:                                                                                                                                                                   

7. Data processing
The data is processed on servers rented by us in Germany. We have concluded a contract data processing agreement with the provider for this purpose.

8. Disclosure of your data

We will pass on your data to subcontractors or commissioned service providers to the extent necessary and appropriate if this is necessary or required for the execution of the contract (e.g. planning and execution of the event).

We only pass on your data to our tax consultant if it is the subject of an invoice (first name, last name, company name, postal address) and if a transaction relevant to tax law (e.g. conclusion of a contract) takes place, and to our bank if payments are made by or to you.

In some cases, external service providers (mailing service providers for the dispatch of advertising materials, agencies for the creation of advertising and information materials, service providers for Internet hosting and software providers) support our specialist departments in the performance of their tasks. We have concluded the necessary data protection contracts with all of these service providers and have taken the necessary measures.                                                                                                                               

Otherwise, no data will be passed on to third parties. An exception exists if there is a legal obligation to pass on data.                                                                                        

9. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

We store all data collected in this context until the end of the contract and when no more claims can be asserted from the contract or the initiation of the contract, i.e. until the statute of limitations has expired. The general limitation period according to § 195 BGB is 3 years. However, certain claims, such as claims for damages, only become time-barred after 30 years. If there is justified reason to assume that this is relevant in individual cases (e.g. imminent claims against us), we will store the personal data for this period. The aforementioned limitation periods begin at the end of the year (i.e. on December 31) in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence.

We would like to point out that we are also subject to statutory retention obligations for tax and accounting reasons. These oblige us to retain certain data, which may also include personal data, for a period of 6 to 10 years as proof of our bookkeeping. These retention periods take precedence over the aforementioned deletion obligations. The retention periods also begin at the end of the relevant year, i.e. on December 31.

10. Possibility of objection and removal

You have the option of requesting the deletion of your data at any time. This is always accompanied by a termination of the contract, i.e. you can no longer make use of our services or we are released from our obligation to perform if you request deletion. Your request for deletion does not affect our entitlement to the agreed fee or reimbursement of costs, unless our entitlement is excluded by law (e.g. justified withdrawal).

Insofar as we rely on legitimate interest, you have the right to object to the processing of your personal data by us at any time for reasons arising from your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or email (see A.).

C. Your rights as a data subject

If your personal data is processed, you are the "data subject" and you have the following rights with respect to us as the controller (you can find our contact details above under A.):

1. Right to information

You have the right to obtain confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or email (see A. above).

2. Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right – taking into account the above-mentioned purposes of processing – to request the completion of incomplete personal data, including by means of a supplementary declaration. You can contact us by post or by email for this purpose (see A. above).

3. Right to erasure

You have the right to demand the immediate erasure of personal data concerning you if one of the requirements of Art. 17 GDPR is met. You can contact us by post or email (see A. above). We have described the legal consequences under B. in the processing operations.

4. Right to object to processing based on legitimate interest

Insofar as we process your data on the basis of Art. 6 (1)(f) GDPR (i.e. due to our legitimate interest), you have the right to object to the processing of your personal data by us at any time for reasons arising from your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or email to do this. A technical procedure that you use, e.g. clear technical information that your web browser sends us ("do-not-track" message), is also considered an objection in this sense.

5. Right of revocation if consent has been given

You have the right to withdraw your consent to the collection and use of personal data at any time with effect for the future. To do so, you can contact us by post or email (see A. above). This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

6. Right to restriction of processing

You have the right to demand that we restrict processing if one of the requirements of Art. 18 GDPR is met. To do so, you can contact us by post or email (see A. above).

7. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

8. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another controller without hindrance from us, where the requirements of Art. 20 GDPR are met. You can contact us by post or email for this purpose (see A. above).

9. Automated decision-making including profiling                                                                                                                                               

We do not use automated decision-making.

10. Right to lodge a complaint with a supervisory authority                                                                                                                                                   

Without prejudice to any other rights, you have the right to lodge a complaint with a data protection supervisory authority at any time, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider the processing of personal data relating to you an infringement of data protection law.