Privacy policy – Resilience Expo 

 

Information on data protection 

Responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR): 

Consortium for the conception, organization, implementation and documentation of the Resilience Expo event, consisting of VDI Technologiezentrum GmbH, Prognos AG, Rebel Deutschland GmbH, Climaticon GmbH 

As represented by 

VDI Technologiezentrum GmbH,  

VDI-Platz 1, 40468 Düsseldorf, Deutschland
E-mail: vditz@vdi.de
Tel.: +49 211 6214 – 401
+49 211 6214 – 484 

Data Protection Officer of VDI Technologiezentrum GmbH: 

Nicolas Kurze
TÜV SÜD Akademie GmbH
Westendstraße 160
80339 München 
E-mail: datenschutz-tz@vdi.de  

  

Storage period 

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply. 

 

General information on the legal basis for data processing on this website 

If you have consented to data processing, we will process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. We also process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. If the data processing is carried out in the course of the fulfilment of a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6 para. 1 lit. e GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy. 

You can exercise the following rights at any time by contacting our data protection officer using the contact details provided: 

  • information about the personal data we have stored and how it is processed 
  • correction of incorrect personal data 
  • deletion of personal data we have stored 
  • restriction of data processing if we are not yet allowed to delete your data due to legal obligations 
  • objection to the processing of your data at our company 
  • data transmission, provided that you have consented to the data processing or have concluded a contract with us 

If you have given us your consent, you can revoke it at any time with immediate effect. 

The Resilience Expo consortium takes the protection of your personal data very seriously. We want you to know what data we collect, when we collect it and how we use it. We have taken technical and organisational measures to ensure that data protection regulations are observed both by us and by external service providers. 

As we continue to develop our website and implement new technologies to improve our service to you, it may be necessary to make changes to this privacy policy. We therefore recommend that you read this privacy policy again regularly. 

 

Purposes of data processing by the responsible body and third parties 

We process your personal data solely for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We will only pass on your personal data to third parties if 

  • you have given your express consent to do so 
  • the data processing is necessary for the fulfilment of a contract with you 
  • the data processing is necessary to fulfil a legal obligation 
  • the data processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an prevailing and protection-worthy interest in the non-disclosure of your data. 

 

Newsletter 

To send you our newsletter, we need to collect and process your personal data. We differentiate between mandatory information that is necessary to send you the newsletter, like your e-mail address, and voluntary information that is useful for processing and implementing the contractual relationship. The entries are labelled accordingly. We process mandatory information to fulfil your request in accordance with Art. 6 para. 1 lit. b GDPR. For voluntary information, we require your consent in accordance with Art. 6 para. 1 lit. a GDPR. You consent to this by voluntarily providing the relevant data. In general, we use a so-called double opt-in procedure for newsletter subscriptions to guarantee that you are indeed the newsletter subscriber.  

Your data will be deleted as soon as we no longer need it for the fulfilment and processing of the contractual relationship. 

We use the MailingWork tool from the service provider Mailingwork GmbH to send you our newsletter and to process your data. We have entered into an order agreement with them to protect your data. You can find the service provider's privacy policy at https://mailingwork.de/datenschutzerklaerung . 

As the party concerned, you have the right to object to the further delivery of the newsletter at any time, with immediate effect. In addition, you can request information about the personal data we have stored about you at any time. You also have the right to have your personal data corrected, blocked or deleted in accordance with the provisions of data protection law. Your data will be deleted as soon as we no longer need it for the fulfilment and processing of the contractual relationship. 
 

Interest in an event 

To inform you about upcoming events, we need to collect and process your personal data. We differentiate between mandatory information that is necessary to send you information about the event, like your e-mail address, and voluntary information that is useful for processing and implementing the contractual relationship. The entries are labelled accordingly. We process mandatory information to fulfil your request in accordance with Art. 6 para. 1 lit. b GDPR. For voluntary information, we require your consent in accordance with Art. 6 para. 1 lit. a GDPR. You consent to this by voluntarily providing the relevant data. In general, we use a so-called double opt-in procedure for sending information about events to guarantee that you are indeed the interested party.  

The purpose of the data processing is to fulfil your request and send you further information about your area of interest, to inform you about events and, if necessary, to ask you to take part in surveys.  

We use the MailingWork tool from the service provider Mailingwork GmbH to process your data. We have entered into an order agreement with them to protect your data. You can find the service provider's privacy policy at https://mailingwork.de/datenschutzerklaerung . 

As the party concerned, you have the right to object to further mailing of information at any time, with immediate effect. In addition, you can request information about the personal data we have stored about you at any time. You also have the right to have your personal data corrected, blocked or deleted in accordance with the provisions of data protection law. Your data will be deleted as soon as we no longer need it for the fulfilment and processing of the contractual relationship. 

 

Photo and / or video recordings at events 

It is likely that film recordings, sound recordings and photographs will be taken at publicly advertised events. By attending the event, you consent to their subsequent use. The recordings are processed on the basis of the controller's legitimate interest in visually documenting the event it has organised and reporting positively on it to a wider public (Art. 6 (1) (f) GDPR). You have the right to disclosure, rectification, deletion, restriction, objection and data transfer. You also have the right to lodge a complaint with the data protection officer. 

 

Data recipients and use by third parties 

The recipient of the data of participants and interested parties is first and foremost we ourselves. 

We commission third parties with the fulfilment of various tasks and the associated processing of data. In this context, we also transmit some or all of the data of participants in online events and interested parties to these third parties. Alternatively, the third party collects or uses the data through the conference software that they provide. 

 

Use of script libraries (Google Web Fonts) 

We use script libraries and font libraries on this website, e.g. Google Web Fonts (https://www.google.com/webfonts/ ), in order to correctly display our content in a graphically appealing manner across all browsers. Google web fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font. 

Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although it is currently unclear whether and for what purposes – that operators of such libraries collect data. 

The privacy policy of the library operator Google can be found here: httpss://www.google.com/policies/privacy/ 

 

MailingWorks & ExpoPlatform

Exhibitor platform (exhibitor profiles)

As part of the event, we use an exhibitor platform on which companies/institutions (hereinafter "exhibitors") can create their own profiles and provide information about participation in the event.

In particular, the following personal data are processed:

  • Contact details of the contact persons (e.g. name, business email address, business telephone number, role/position)
  • Company-related information (e.g. company name, address, industry/sector, logo, description of products/services offered)
  • Content of the exhibitor profile (e.g. product and service descriptions, links to websites or social media presences)

Depending on the platform configuration, the content of the exhibitor profiles may be viewed by registered participants of the event and, where applicable, by other authorized user groups. Personal contact details of contact persons are published only to the extent this is required and intended for the purpose of making contact in connection with the event.

The legal bases for processing are:

  • Article 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures, e.g. exhibitor participation/organization)
  • Article 6(1)(f) GDPR (legitimate interest in holding/organizing the event; balancing of interests in favor of an orderly trade-fair/event organization)
  • Where consent is required for certain publications/options: Article 6(1)(a) GDPR.

Where certain details are designed as mandatory fields, they are essential in order to create or manage an exhibitor profile. Without these details, the profile may not be able to be set up.

For this purpose, your personal data are stored in a form that we provide via our service provider MailingWork (Mailingwork GmbH, Schönherrstraße 8, 09113 Chemnitz). You can find the service provider's privacy policy at httpss://mailingwork.de/datenschutzerklaerung.
 

Transfer of data to ExpoPlatform in the context of creating exhibitor profiles

For the purpose of organizing and conducting the event "Resilience Expo", your data are passed on to our service provider ExpoPlatform (28 Chesterton Road, Cambridge, CB4 3AZ). You can read ExpoPlatform's privacy policy at https://expoplatform.com/privacy-policy/.
 

Registration forms for events via ExpoPlatform (registration of participants / exhibitors)

We offer you the option to register online for our events. Your personal data are stored for this purpose in a form. In particular, your name data (last name, first name, salutation, title), contact data (email address), and employment data (company, position) are processed.

The legal basis for processing is Article 6(1)(b) GDPR (registration/participation; implementation of pre-contractual measures or contractual relationship).

For technical operation we use ExpoPlatform, a service provided by ExpoPlatform Ltd., 28 Chesterton Road, Cambridge, CB4 3AZ, United Kingdom. There is an adequacy decision by the European Commission for the United Kingdom (data transfers are therefore generally permitted without additional safeguards).

The data processed as part of registration are generally stored only as long as required for the preparation, execution and follow-up of the event. If, in an individual case, longer storage is necessary (e.g., statutory retention obligations), we store the data accordingly longer. Data that may be subject to retention obligations are otherwise blocked for further processing and deleted after expiry of the retention period.

If the registration/application cannot be fully handled via ExpoPlatform in good time, or if other issues arise that prevent registration, we will, at your request, provide a form via MailingWork and then transmit the data collected via it to ExpoPlatform in order to continue the management of exhibitors and/or participants there. MailingWork is a service of Positive Group Chemnitz GmbH, Schönherrstraße 8, 09113 Chemnitz. The data transmitted to ExpoPlatform in this way will be deleted, after transfer into the event systems, according to the same criteria.
 

Participant profiles in the event app

As part of the event, we use an event app in which participants can create their own profiles. These profiles are used in particular for networking and matching between participants and, where applicable, exhibitors and speakers.

Processed data (depending on your use) include, among other things, your master data (e.g. last name, first name), contact data (e.g. email address and, if applicable, business telephone number), professional information (e.g. company/institution, position/role, industry/sector), profile information (e.g. interests, focus topics, tags, short profile description), as well as your interaction data (e.g. chat messages, contact requests, appointment scheduling within the app), and any other information you choose to share.

Processing is carried out for the purpose of creating and displaying participant profiles as requested by the user, enabling networking and professional exchange, carrying out matching functions (e.g. suggesting suitable contacts based on interests/profile information), supporting the initiation of contacts and communication within the event, and organizing and conducting the event (e.g. scheduling, session planning). An evaluation of your person within the meaning of profiling does not take place.

The legal bases for processing are Article 6(1)(b) GDPR insofar as use of the app is necessary for participation/organization (e.g. ticket/registration plus basic access), Article 6(1)(f) GDPR insofar as we have a legitimate interest in enabling functional event networking, and your consent on the basis of Article 6(1)(a) GDPR insofar as optional functions require this. Any consent given may be withdrawn at any time with effect for the future.

Depending on the app settings, the profile information you store in the event app is visible to other registered participants of the event and, where applicable, to exhibitors and speakers. Chat messages and direct contact requests are visible only to the persons involved.

The use of certain profile details and networking/matching functions is voluntary. In the event app you can decide which information you enter in your profile and to what extent it is visible to others, insofar as the app provides corresponding settings. The participant profiles and the data processed in the event app are generally stored for the duration of the preparation, execution and immediate follow-up of the event. After the event, the data are deleted or anonymized. For technical operation we also use ExpoPlatform here.
 

 

Changes to our privacy policy 

We reserve the right to modify this privacy policy to ensure it complies with current legal requirements or to reflect changes to our services, e.g. when introducing new services. The new privacy policy will then apply to your next visit. The most recent version of the privacy policy will always be available on this website.