business factors processes personal data submitted during the registration, preparation and execution of an event, always in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Data Protection Act (BDSG). Furthermore, personal data can be legitimately obtained and processed from publicly available sources. Relevant personal data is personal data (name, address and other contact data) but also information on thematic focuses of the work environment, areas of interest or comparable data of the participant, which is available as part of the preparation of business factors. Personal data is processed (art. 4 no. 2 of the GDPR) for the provision of event services as well as all activities required for the operation and administration. The departments within business factors, which require the data to fulfill our contractual obligations, are the departments, which obtain access to said data. Processors we engage who are obliged to comply with data protection regulations can also receive data for these purposes. These are companies such as suppliers for event services, printing industry, logistics, sales and marketing. Personal data is processed and stored for the duration of the business relationship, which for instance includes the initiation and processing of a contract but also repeated establishment of contact. Every data subject has a right of access pursuant to art. 15 of the GDPR, the right to rectification pursuant to art. 16 of the GDPR, the right to erasure pursuant to art. 17 of the GDPR, the right to restriction of processing pursuant to art. 18 of the GDPR and the right to data portability pursuant to art. 20 of the GDPR. The restrictions pursuant to §§ 34 and 35 of the new German Data Protection Act (BDSG-new) apply to the right of access and right to erasure. Furthermore, there is the right to lodge a complaint with a responsible supervisory authority (art. 77 of the GDPR in conjunction with § 19 of the German Data Protection Act – BDSG). In the context of our business relationship, only personal data required for the establishment, execution and termination of participation or for participants to establish contact among each other need to be made available during and after an event. business factors does not use automated decision-making pursuant to art. 22 of the GDPR, to establish or execute participation.

Our data protection officer can be reached at business factors Deutschland GmbH, data protection officer, Lützowufer. 10, 10785 Berlin, [email protected].

Information on the right to object according to Art. 21 GDPR is available at https://www.businessfactors.de/en/privacy-policy.

business factors has the right to use image and / or sound recordings made by itself or by third parties during a business factors event for advertising and public relations purposes. If a participant wants to be made unrecognizable (pixelation of the face), this must be communicated to business factors at the latest two weeks after becoming aware of it.