The name and contact details of the controller are provided on the information sign at the front (posted directly at the event).
You can contact our data protection officer by post with the note "data protection officer" or by e-mail at datenschutz(at)quantum.ag, subject line "data protection".
2. Processing of personal data at events
a. Personal data
During our events, photographs and video recordings are made by photographers and marketing service providers commissioned by us. The following personal data of yours are processed in the course of this:
- Photo data (time stamp, location, image data)
- Video data (time stamp, location, image data)
A sign situated at the front provides you with the essential information about the recordings. The data collected are not used for automated decision-making or profiling. The data processing is not required or prescribed by law or contract. You are not obliged to provide your personal data. If you do not agree to photographs or video recordings of you, please contact the photographer directly so that they know you do not wish to be recorded.
b. Purpose and legal basis of processing
We process the data within the framework of weighing interests pursuant to Art. 6(1) s. 1 lit. f) GDPR for the following purposes:
- Documentation of the event
- Public relations (press, marketing, branding)
c. Recipients or categories of recipients
The recordings are processed exclusively by authorised internal persons. Other processors are service providers who are used within the framework of commissioned processing to carry out the photo and video recordings in accordance with instructions. These include photographers and marketing agencies.
The recordings are published for public relations purposes in press releases, newspaper articles and relevant trade journals as well as online on our website and on relevant business portals such as Xing or LinkedIn and social media channels.
The recordings can then be accessed worldwide on the internet, found by search engines and linked to other information, from which personality profiles about you can be created. Copying and further distribution by third parties can generally not be excluded.
d. Storage period and, if applicable, criteria for determining the storage period
The storage period of the individual images is determined individually depending on the event, limited to the minimum and deleted once the purpose is no longer applicable. In the event of an objection, the images will be removed as far as possible. Specialised online archiving services store the images in various other locations. Definitive deletion cannot be guaranteed. For further information, please contact the data protection contact above.
3. Your rights as a data subject
If your personal data are processed, you have the following rights as a data subject within the meaning of the GDPR, which you can assert at the above contact address:
Art. 15 GDPR: Right to information of the data subject. You have the right to obtain information from us about what personal data we process about you.
Art. 16 GDPR: If the data concerning you are incorrect or incomplete, you may request that incorrect information be corrected or that incomplete information be completed.
Art. 17 GDPR: Under the conditions of Art. 17 GDPR, you can request the erasure of your personal data. Your right to erasure depends, among other things, on whether the data relating to you are still required by us to fulfil our legal duties.
Art. 18 GDPR: You can request the restriction of the processing of personal data concerning you.
Art. 21 GDPR: You may object to the processing of data relating to you at any time on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert or defend legal claims.
Art. 77 GDPR (Right to lodge a complaint with a supervisory authority): If you consider that the processing of personal data relating to you is unlawful, you may lodge a complaint with a data protection supervisory authority competent for your place of residence or work or for the place of the alleged infringement.