Send email Copy Email Address

Data protection information at events Art.13 GDPR

This data protection notice informs you about the processing of your personal data (hereinafter: data) at CISPA events. We are required by law to provide you with this information . Data protection and the handling of personal data is very important to us, so we always pay attention to the proper processing of your data. If you have any questions about your data and its processing, please do not hesitate to contact us.

Controller

The Controller for data processing within the meaning of the GDPR and other data protection regulations is:

CISPA - Helmholtz Center for Information Security gGmbH
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Tel.: + 49681 87083 1001
Fax: + 49 681 87083 8801

E-Mail: info@cispa.de

Managing Directors:
CISPA is represented by the Managing Directors Prof. Dr. Dr. h. c. Michael Backes and Dr. Kevin Streit.

Data protection officer:
You can contact our data protection officer at: dsb@cispa.de If you have any questions about data protection, you can also contact our corporate data protection & information security department: datenschutz@cispa.de

Purposes and legal basis of the processing

We process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We process data about you if it is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR). For example, if you are provided with catering during an event, we are obligated to document the catering and keep records of the individuals who were served.

Photo and Video Recordings
At some of our events, photo and video recordings will be made. These recordings serve our public relations work in accordance with our mission and our goal to inform the public about our work and about information security in general. The photo and video recordings taken during the event may be published for this purpose in the press, on the internet, on social media, or in one of our publications. The focus is on situational and group photos, and there is an editorial review process for the images.

We consider the following as legitimate interests within the meaning of the legal basis Art. 6 para. 1 lit. f GDPR: Public relations and science communication (transparency obligations towards the public, presentation of research results, showcasing competence and impact for society and the region, fulfilling our public mission or funding requirements), reputation and trust building (authentic visual content supports credibility, highlights unique characteristics, competition for researchers, third-party funding, partners, and staff), and internal communication and team building (highlighting project successes, new employees, diversity initiatives, strengthening identification and sense of community).

If you do not wish to be photographed or filmed, please do not hesitate to inform the photographer on site. You can also contact us at any time: pr@cispa.de.

For certain data processing, we require your express consent within the meaning of Art. 6 par. 1 lit. a GDPR (e.g. use of images and personal data in certain cases). For this purpose, you can voluntarily sign corresponding declarations of consent. Consent given can be withdrawn at any time with effect for the future.

We may also process your photos and videos on the basis of a contract concluded with you for the use of your recordings. In this case, the legal basis for the processing is Art. 6 par. 1 lit. b GDPR.

If registration is required for the event, you will provide us with the corresponding data. This data processing serves the event organization in particular and is necessary in the sense of Art. 6 par. 1 lit. b GDPR for the fulfillment of the participant contract.

Data categories

The following personal data may be processed for the above-mentioned purposes, among others:

  • Master data (e.g. name, address, organization, functions)
  • Contact details (e.g. address, telephone number, e-mail address)
  • Photo and video recording

Storage

The data we process about you will be erased as soon as you withdraw your consent, object to the processing, it is no longer required for the actual purposes and there are no legal retention periods to the contrary.

Data sharing

Your personal data will not be passed on to third parties. Should we pass on your personal data to third parties, we will do so on a legal basis.

Data subject rights

You have the following rights with respect to the processing of your data by CISPA:

  •  You have the right to request confirmation as to whether data is being processed and the right to be informed about this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.
  • In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the rectification of incorrect data.
  • In accordance with Art. 17 of the GDPR, you have the right to demand that data concerning you be erased without delay, or alternatively, in accordance with Art. 18 of the GDPR, to demand a restriction of processing of the data.
  • You have the right to request in order to receive the data concerning you that you have provided to us, in accordance with Article 20 of the GDPR, and to request its transfer to other Controllers.
  • You have the right to withdraw your consent according to Art. 7 par. 3 GDPR with effect for the future.
  • Right to object: You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR (See below).
  • In accordance with Art. 77 of the GDPR, you can complain to the supervisory authority responsible for data protection. As a rule, you can contact the supervisory authority of your place of residence or the Independent Data Protection Center Saarland:

Saarland Independent Data Protection Center
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Phone: (0681) 94781-0
Fax: (0681) 94781-29
E-Mail: poststelle@datenschutz.saarland.de

Right of objection

If your data is processed on the basis of legitimate interests pursuant to Art. 6 par. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation.

If you wish to exercise your data protection rights, you can do so by e-mail at datenschutz@cispa.de or directly by contacting our data protection officer at dsb@cispa.de.

Actuality and change of this privacy policy

This data protection notice is currently valid and has the status June 2022. Due to changes in legal or regulatory requirements, it may be necessary to amend this data protection notice.