Privacy policy in the context of event registration
The registration for the shuttle bus to ScieCon Berlin 2024 is an offer of the btS – Life Sciences Studierendeninitiative e.V. (hereinafter referred to as "we"/"us") and falls under the legal provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act New (Bundesdatenschutzgesetz Neu, BDSG-neu) as well as other data protection regulations.
With the following information, we provide you with an overview of the processing of your personal data in the context of event registration and the rights to which you are entitled under data protection law.
1. Who is responsible for data processing and who can you contact?
The responsible party for data processing is:
btS – Life Sciences Studierendeninitiative e.V.
Jacobsenweg 61
13509 Berlin
Phone.: +49 (0)30 26492126
Email: bundesvorstand@bts-ev.de
Homepage: www.bts-ev.de
Represented by the Executive Board of btS – Life Sciences Studierendeninitiative e.V.
If you have any questions about data processing, please feel free to contact our internal data protection coordinators (Email: datenschutz@bts-ev.de).
Processing your inquiry is our top priority, so we will get back to you promptly.
2. Contact details of the data protection officer
If you have any questions or wish to exercise your rights as a data subject, please contact our data protection officer:
Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@datenschutzexperte.de
3. What sources and data do we use?
We process personal data that we receive from you in the course of the registration for the shuttlebus to the ScieCon Berlin 2024.
Relevant personal data are in particular your surname, first name and your e-mail address
4. For what purposes and on what legal basis do we process your data?
We process your personal data in compliance with the EU Data Protection Regulation (GDPR) and the new Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). The processing of your personal data enables us to allow your participation in the event.
a. Based on your consent (Art.6 para. 1 s. 1 lit. a GDPR).
The processing of your personal data is based on the consent you have given us. Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. The legal basis for these processing operations is Art. 6 para. 1 s. 1 lit. a GDPR.
b. In the context of balancing interests (Art. 6 para. 1 s. 1 lit. f GDPR).
Furthermore, we process your personal data in order to protect our legitimate interests or those of third parties. This may be necessary in particular:
* to provide the web applications by means of which you register for our events,
The legal basis for these processing operations is Art. 6 para. 1 s. 1 lit. f GDPR.
5. Who receives your data?
Recipients of your data are persons who work for the association and must process your data as required. In addition, so-called processors according to Art. 28 DSGVO may receive your data in the course of providing a service, such as hosting service providers. No other transfer of your personal data to third parties will take place.
6. How long will your data be stored?
Your data collected in the course of event registration will only be processed for as long as it is necessary for the implementation of the event. Deletion of your personal data takes place regularly immediately after the event.
7. Will your data be transferred to a third country or to an international organization?
Data transfer to countries outside the EU or EEA (so-called third countries) does not take place, with the following exception:
Through the use of Office 365 and related applications, a partial transfer of personal data to the USA takes place as part of the support and hosting services of the "Microsoft Corporation". The contractual processing agreement with Microsoft includes EU standard contractual clauses which, according to Art. 46 para. 2 lit. c GDPR, are appropriate safeguards for the transfer of data to third countries.
8. What data protection rights do you have?
You have the right:
* in accordance with Art. 7 para. 3 GDPR to revoke your consent once given to us at any time. This has the consequence that we will in the future no longer continue the data processing based on this consent,
* in accordance with Art. 15 GDPR, to request information about your personal data processed by us,
* in accordance with Art. 16 GDPR, to request without undue delay the rectification of inaccurate or incomplete personal data held by us,
* in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims,
* in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR,
* in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
You can revoke your consent to the processing of your personal data within the scope of event registration at any time with effect for the future. A revocation of the event registration can be made as follows. You can assert your revocation and your rights by informal text communication to us.
An informal e-mail to datenschutz@bts-ev.de is sufficient for this purpose.
9. Is there an obligation for you to provide data?
You are not obliged to provide your data for the aforementioned purposes. However, refusal to provide your personal data may mean that you cannot participate in the event.
10. To what extent is there automated decision-making (including profiling)?
As a matter of principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR.
11. To what extent is your personal data used for profiling (scoring)?
We do not process your personal data with the aim of evaluating certain personal aspects (profiling).
12. Right of complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you violates the General Data Protection Regulation. As a rule, you can contact the supervisory authority of your place of residence or workplace for this purpose.
The supervisory authority responsible for us is:
Berliner Beauftragte für den Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59-61
10555 Berlin
E-mail: mailbox@datenschutz-berlin.de
Phone.: +49 (0)30 13 88 90
Fax: +49 (0)30 21 55 05 0
13. Right to object
If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 s. 1 lit. f GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation in accordance with Art. 21 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your rights and freedoms, or the processing is for the establishment, exercise, or defence of legal claims. You can assert this right by informal notification in text form to us.
