Data protection information at events Art.13 GDPR

Controller

The Controller for data processing within the meaning of the GDPR and other data protection regulations is:

CISPA - Helmholtz Center for Information Security gGmbH
Stuhlsatzenhaus 5
66123 Saarbrücken
Germany
Tel.: + 49681 87083 1001
Fax: + 49 681 87083 8801

E-Mail: front-office@cispa.de

Managing Directors:
CISPA is represented by the Managing Directors Prof. Dr. Dr. h. c. Michael Backes and Dr. Kevin Streit.

Data protection officer:
You can contact our data protection officer at: dsb@cispa.de If you have any questions about data protection, you can also contact our corporate data protection & information security department: datenschutz@cispa.de

Purposes and legal basis of the processing

We process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

In addition, we process your personal data if this is necessary
for the fulfillment of legal obligations (Art. 6 par.
1 lit. c GDPR). If, for example, you are entertained as part of an event, we are obliged to provide a hospitality receipt and therefore to keep documentation on the persons we have entertained.

Photographs and video recordings are made at some of our events. These recordings serve our public relations work as part of our mission and our goal of informing the public about our work and information security in general. The photographs and video recordings made at the event may be published for this purpose in the press, on the Internet, in social media or in one of our publications. We consider public relations work in terms of the background of CISPA's objectives to inform the public about its work and about information security as a legitimate interest within the meaning of the legal basis Art. 6 par. 1 lit. f GDPR.

If you do not wish to be photographed, please do not hesitate to inform the photographer on site.

For certain data processing, we require your express consent within the meaning of Art. 6 par. 1 lit. a GDPR (e.g. use of images and personal data in certain cases). For this purpose, you can voluntarily sign corresponding declarations of consent. Consent given can be withdrawn at any time with effect for the future.

We may also process your photos and videos on the basis of a contract concluded with you for the use of your recordings. In this case, the legal basis for the processing is Art. 6 par. 1 lit. b GDPR.

If registration is required for the event, you will provide us with the corresponding data. This data processing serves the event organization in particular and is necessary in the sense of Art. 6 par. 1 lit. b GDPR for the fulfillment of the participant contract.

Data categories

The following personal data may be processed for the above-mentioned purposes, among others:

• Master data (e.g. name, address, organization, functions)
• Contact details (e.g. address, telephone number, e-mail address)
• Photo and video recording

Storage

The data we process about you will be erased as soon as you withdraw your consent, object to the processing, it is no longer required for the actual purposes and there are no legal retention periods to the contrary.

Data sharing

Your personal data will not be passed on to third parties. Should we pass on your personal data to third parties, we will do so on a legal basis.

Data subject rights

You have the following rights with respect to the processing of your data by CISPA:

•  You have the right to request confirmation as to whether data is being processed and the right to be informed about this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.
• In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the rectification of incorrect data.
• In accordance with Art. 17 of the GDPR, you have the right to demand that data concerning you be erased without delay, or alternatively, in accordance with Art. 18 of the GDPR, to demand a restriction of processing of the data.
• You have the right to request in order to receive the data concerning you that you have provided to us, in accordance with Article 20 of the GDPR, and to request its transfer to other Controllers.
• You have the right to withdraw your consent according to Art. 7 par. 3 GDPR with effect for the future.
• Right to object: You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR (See below).
• In accordance with Art. 77 of the GDPR, you can complain to the supervisory authority responsible for data protection. As a rule, you can contact the supervisory authority of your place of residence or the Independent Data Protection Center Saarland:

Saarland Independent Data Protection Center
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Phone: (0681) 94781-0
Fax: (0681) 94781-29
E-Mail: poststelle@datenschutz.saarland.de

Right of objection

If your data is processed on the basis of legitimate interests pursuant to Art. 6 par. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation.

If you wish to exercise your data protection rights, you can do so by e-mail at datenschutz@cispa.de or directly by contacting our data protection officer at dsb@cispa.de.

Actuality and change of this privacy policy

This data protection notice is currently valid and has the status June 2022. Due to changes in legal or regulatory requirements, it may be necessary to amend this data protection notice.