Privacy Policy

As of 1 July 2026

Privacy Policy for Attendees 


You can register for events on this website. 


The following explains which data is collected as part of the registration for an event and during participation in an event, and for which purposes this data is processed. 


If you have any questions regarding an event and, in particular, regarding the processing of your personal data in connection with the registration and participation in an event (including the exercise of your data subject rights), you can contact the respective Organizer directly. 


1. CONTROLLER 


The controller within the meaning of data protection law is the Organizer named during the event registration. The contact details of the Organizer can also be found during the registration process. 


If the Organizer is legally required to appoint a data protection officer or has voluntarily appointed one, you can contact them using the contact details provided by the Organizer. 


doo GmbH is engaged as a technical service provider for the technical provision of the website, the registration process and attendee management. doo GmbH generally processes personal data on behalf of and in accordance with the instructions of the Organizer pursuant to Art. 28 GDPR. 


2. REGISTRATION FOR AN EVENT 


If you register to attend in an event, the Organizer will generally process the data you provide during registration in order to enable your attendance in the event, in particular to send you a registration confirmation, where applicable for identification at event entry, and where applicable for the processing of payment transactions in the case of paid events. The categories of data processed include master data (name, company, position), contact data (email, telephone number), event-related data (booked sessions, participation times, interactions), communication data (messages within the platform) and technical data (IP address, log files). 


The legal basis for this is Art. 6 (1) lit. b) GDPR; the processing of your data is necessary for the performance of the contract regarding your participation in the event. 


If the Organizer collects additional data that is not strictly necessary for the performance of the contract with you, such data collection serves the optimization of the event or your event experience, for example to adapt and optimize the event according to the interests of the attendees and the target group, as well as for the preparation, evaluation and analysis of the event. 


The legal basis for this processing is Art. 6 (1) lit. f) GDPR, the overriding legitimate interest of the Organizer in the optimization, evaluation and analysis of the event. 


If, as part of the registration process, you also give your explicit consent for the processing of certain data for specific purposes, the legal basis for this processing is your consent, which may be revoked at any time, pursuant to Art. 6 (1) lit. a) GDPR. 


3. PAYMENT INFORMATION 


If you register for a paid event, your data and payment information will be processed for the purpose of carrying out the payment either by NovalNet AG in Germany as the payment service provider or by a payment service provider selected by the Organizer. The payment service provider acts as the controller for such payment data and payment information. 


If the Organizer has outsourced payment processing, the processing is carried out with the involvement of the payment service provider used and, where applicable, other parties involved in the payment processing. 


The legal basis is Art. 6 (1) lit. b) GDPR and Art. 6 (1) lit. f) GDPR for security checks. 


Detailed information on data processing and data protection at NovalNet AG can be found here: https://www.novalnet.de/datenschutz. 


4. CONTACT 


If you contact the Organizer by email, telephone or via a contact form in order to ask questions about the event or request information, the information you provide will be processed and stored for the purpose of handling the respective enquiry. The information requested in the course of such contact is required in order to process your enquiry, address you correctly and provide you with a response. 


As far as your enquiry relates to the conclusion or performance of a contract, the processing is carried out for the performance of pre-contractual measures or for the performance of a contract (Art. 6 (1) lit. b) GDPR). Otherwise, the processing is based on the legitimate interest in the proper handling of enquiries and efficient communication with attendees and prospective attendees (Art. 6 (1) lit. f) GDPR). This interest includes, in particular, responding to enquiries, clarifying organizational matters and ensuring the smooth running of the event. 


5. ATTENDANCE AT AN EVENT 


When attending an event, data may be collected and processed. During admission control, the data relating to the person of the ticket holder stored on the ticket may be collected and processed. Where applicable, data relating to the time of entry and, where applicable, the time of leaving the event may also be stored. 


The legal basis for this is Art. 6 (1) lit. b) GDPR; the processing of your data is necessary for the performance of the contract regarding your attendance at the event. 


If, in the context of attending the event, you provide your data, in particular by reading an RFID tag or scanning the QR code on your name badge at an exhibition stand, this data will be transmitted by the Organizer to the respective operator of the exhibition stand at which you provided your data. In this case, the further processing and use of your data lies with the operator of the exhibition stand as the controller. 


5.1 PHOTOGRAPHY 


Photo and video recordings may be made during the event. These photo and video recordings may show attendees and make them identifiable. These photo and video recordings may be used for public relations purposes and for documenting the event. The publication of such recordings may take place both offline (print) and online, in particular on the Organizer's website or on the Organizer's pages on various social media platforms (e.g. fan pages on Facebook). 


The legal basis for this processing is Art. 6 (1) lit. f) GDPR, the overriding legitimate interest of the Organizer in documenting the event and using photo and video recordings of the event for public relations purposes. You will be informed separately on site about such recordings. 

 

5.2 FEEDBACK AFTER AN EVENT 


After attending an event, you may be contacted by email in order to obtain your feedback on the event. You may object to such contact at any time by contacting the respective Organizer using the contact details provided for the Organizer. If you provide your feedback on the event via the website, the information you provide will be used exclusively for the evaluation of the event and the optimization of future events. 


The legal basis for contacting you to request your feedback is Art. 6 (1) lit. f) GDPR or Art. 6 (1) lit. a) GDPR, if explicit consent has been obtained from you in individual cases. The overriding legitimate interest of the Organizer is the evaluation of the event and the optimization of future events. 


6. INVITATIONS TO FURTHER EVENTS 


If you have registered for an event, the Organizer may use the email address provided during registration to send you invitations to similar events organized by the Organizer by email, provided that you have not objected to such use. You may object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic tariffs by using the unsubscribe link contained in every email or by contacting the respective Organizer using the contact details provided for the Organizer. 


The Organizer has a legitimate interest in informing existing attendees about comparable offers and maintaining existing business relationships. In doing so, it is ensured that communication is limited to similar events and that you are given the opportunity to object to such use at any time. The legal basis is Art. 6 (1) lit. f) GDPR in conjunction with Section 7 (3) German Act Against Unfair Competition (UWG). 


7. DATA RETENTION 


Your personal data will only be processed for the period necessary to achieve the purpose of the processing and for the subsequent follow-up of the event. Once the purpose no longer applies, the data will be deleted or anonymized, unless further statutory retention obligations apply. 


8. TRANSFER TO THIRD COUNTRIES 


To the extent that personal data is transferred to countries outside the European Union or the European Economic Area, this will only take place in compliance with the statutory requirements and on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses. In addition, transfers to the United States are based on the EU-U.S. Data Privacy Framework, provided that the recipient is certified under this framework. Furthermore, additional measures may be implemented where necessary to ensure an adequate level of data protection. 


9. YOUR RIGHTS 


You have the right to request information at any time about the personal data stored about you. You also have the right to rectification of inaccurate data, deletion of your data or restriction of processing, provided that no statutory retention obligations prevent this. You may object to the processing of your data based on legitimate interests and assert your right to data portability. 


If you have given consent to the processing of your data, you may withdraw such consent at any time with effect for the future. 


Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.


To exercise these rights, you may contact the Organizer or, where applicable, its data protection officer at any time without formal requirements.