- Who are we? Who is responsible for data protection, the so-called controller, at our company?
- What happens when the web sessions website is visited at the portal hosted by IndustryArena as the provider?
- Registering for web sessions and user data
- What happens when you register for web sessions and use the internal area?
- Use of Facebook-Plugins
- Use of Google Analytics
- Use of Matomo
- Use of Google Adsense and other Adserver Software
- Use of Google Maps
- Embedding of YouTube Videos
- Use of Twitter
- Use of Aumago Cookies
- Use of Stopforumspam
- Erasing and quarantining personal data
- Rights of the User (Data Subject)
- Legal Bases for Processing Personal Data
- Reservation of Right to Alteration of this Privacy Statement
Hello and thank you for your interest in our website. Alone for the sake of legibility, the following makes no distinction between the genders and the various forms of address. All references to persons apply to all genders, whether male, female, or other. In addition to these and other matters, we take very seriously the rights accorded to you for privacy, data protection, and informational self-determination. Which is why we would like to inform you of the following:
Who are we? Who is responsible for data protection, the so-called controller, at our company?
(1) As defined under the EU General Data Protection Regulation (GDPR), other data protection laws in the EU member nations, and other data protection provisions, the controller is:
Tel.: +49 2173 8933200
(2) Data protection officer Our Data Protection Officer can be reached at email@example.com.
(1) “Personal data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
(2) “Special categories of personal data” are any information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
(3) Applying to all other cases are the (additional) definitions under Art. 4 GDPR.
What happens when the web sessions website is visited at the portal hosted by IndustryArena as the provider?
(1) For technical reasons, the provider of this website automatically collects and stores server log data (log files) transmitted by your browser. We do not assign the data stored on the server to any natural person. The data collected here can include:
• The browser type, version used, and configured language
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites directing the user’s system to our website (so-called referrers)
• Websites the user’s system calls from our website
We receive these data in the form of cookies directly from your browser.
(2) Data are processed for the purpose of providing our website’s contents, safeguarding the operations of our IT systems, and optimising our website. In the process, the data collected in log files are always stored separately from other personal data pertaining to users. Please understand that these log files are vital for the security and protection of this website.
(1) The provider of the website and the software installed on the server make use of so-called cookies. Cookies are packages of data that the web browser stores on the user’s computer system. Cookies can be transmitted to a website when it is visited and so help to assign the visiting user. Cookies simplify users’ access to the website by enhancing functionality, e.g. whether a password must be entered. Cookies contain solely your login details and generally are incapable of causing damage to your computer. You can configure the storage duration for your cookies in your browser preferences and delete them at any time. Cookies are needed by the underlying technology to verify you as a logged-on user. Accordingly, we point out that by deactivating cookies you may not be able to use all of our website’s functions to the full extent.
(2) Personalised cookie configurations can be set at https://en.industryarena.com/consent.
Registering for web sessions and user data
(1) Attendance at web sessions first requires registration, which is free of charge. This collects the following data:
o Title [mandatory]
o First name / last name [mandatory]
o Participant’s country
o Company [mandatory]
o Professional function within the company
o Phone number
o E-mail address [mandatory]
o Password (for access)
In other words, when communication takes place during the web sessions, the data you entered while registering are processed.
(2) These data serve to personify, identify, and verify (applicable title and anti-abuse measure), to enable contact suitable to the occasion during the web session, and to provide statistical investigations. These registration data must be processed if we are to maintain our justified interests and provide our offers and services.
(3) Only you know the reasons for registering; the response to this constitutes the purpose of our processing.
(4) We also provide an option permitting the provider to retain the named web session registration data for future sessions and to contact you by e-mail for informational purposes.
(5) If you do not consent to the storage under (4), your registration data are erased automatically after a period of four weeks in compliance with Art. 17 GDPR. After this period, future web sessions would then require re-registration.
(6) We also require the data you enter when registering to contact you following a request or other cause. In addition, specifically the details on your professional function and role permit us to gain an overview of the structure presented by our participants. As a result, we can configure our information and participant offers based on your and our partners’ interests.
What happens when you register for web sessions and use the internal area?
When you register for the internal area, we collect the data that you enter during the registration procedure. For the details we refer to our transparency statement for attendants.
Use of Facebook-Plugins
(1) We have integrated plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, on our sites. You can recognize the Facebook plugins by the Facebook logo or the “like” button on our page. You may find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins. The use of the Facebook plugin serves to increase our reach in the social network Facebook by gaining further "likes" (legitimate interests).
(2) When you access our sites, a direct connection will be established between your browser and the Facebook server via the plugin. By doing so, Facebook will obtain the information that you have visited our website with your IP address. If you click the Facebook “like” button while you are logged into your Facebook account, you may link the contents of our websites to your Facebook profile. As a consequence, Facebook can allocate the visit of our websites to your user account. We point out that we as the operator of the websites do not have any knowledge of the content of the data transmitted as well as their use by Facebook. Please find more information in this respect in the privacy statement of Facebook under https://www.facebook.com/policy.php
(3) If you do not want Facebook to allocate your visit to our websites to your Facebook user account, please log out from your Facebook user account.
Use of Google Analytics
(1) This website is being analyzed using cookies via Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow for an analysis of your use of the website. The information generated by the cookie on the use of this website are usually transferred to a Google server in the USA and stored there. If the IP anonymization on this website is activated, however, your IP address will first be truncated by Google within the Member States of the European Union or in other countries which are signatories to the Agreement on the European Economic Area. The analysis of this website enables us to make the offer more attractive to you and to optimize our offer (legitimate interests).
(2) Only in exceptional cases, the full IP address is transferred to a Google server in the USA and truncated there. Google will use this information on our behalf in order to evaluate the use of the website, to compile reports on the site activities and to provide further services to us associated with the use of the site and the internet. The IP address that is transferred by your browser in the context of Google Analytics will not be combined with other data of Google.
(3) You may adjust your browser software to prevent the installation of the cookies; however, please note that in this case, you will probably not be able to use all functions of this website in full. In addition, you can avoid that the data produced by the cookies in relation to your using the website (including your IP address) are stored and processed by Google by downloading and installing the browser plugin that is available under the following link (https://tools.google.com/dlpage/gaoptout?hl=en).
Use of Matomo
(2) We use Matomo to analyse how our website is used and to continuously improve individual functions and offers, as well as the user experience. By conducting a statistical analysis of user behaviour, we are able to improve our offering and make it more interesting to you as a user. Herein also lies our legitimate interest in processing the aforementioned data.
(3) You can prevent this analysis from taking place by deleting existing cookies and deactivating the storing of cookies in your browser’s settings menu. We would like to point out that should you choose to do so, it is possible that not all functions on this website will be usable to their full extent.
Use of Google Adsense and other Adserver Software
(1) This website uses Google AdSense, a service for the integration of ads of Google Inc. (“Google”). Google AdSense uses so-called “Cookies”, text files that will be stored on your computer and allow for an analyses of your use of the website. Google AdSense also uses so-called web beacons (invisible graphics). With these web beacons, information such as the traffic of visitors on these websites can be analyzed.
(2) The information on the use of this website (including your IP address) produced by cookies and web beacons and delivery of advertising formats will be transferred to a Google server in the USA and stored there. Google may pass on this information to contract partners of Google. Google states that they will not, however, combine your IP address with other of your stored data.
(3) Moreover, Google AdSense uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in websites in order to allow for a log file recording and a log file analysis, as a result of which a statistical evaluation can be carried out. On the basis of the embedded tracking pixel, a partner of Google can see if and when a website was opened by a data subject and which links were clicked by the data subject. Amongst others, tracking pixels serve to evaluate the traffic of visitors of a website (legitimate interests).
(4) Via Google AdSense, personal data and information, which also include the IP address and are necessary to collect and invoice the ads shown, are transmitted to a contract partner in the USA, stored and processed there. Google’s contract partner may possibly transfer these personal data collected via the technical procedure to third parties.
(5) You can avoid the installation of the cookies by selecting the respective settings in your browser software; however, we point out that in this case, you might not be able to use all functions of this website in full. The functioning of Google-AdSense is explained in more detail under this link https://www.google.com/intl/en/adsense/start.
(6) Moreover, this website uses the Revive-AdServer, a service for incorporating ads. Revive-AdServer uses so-called “cookies”, text files that will be stored on your computer and that allow for an analysis of your use of the website. Revive-AdServer also uses tracking pixels. With these, information on the traffic of visitors will be collected and analysed (legitimate interests). The data on the use of this website and delivery of advertising formats produced by cookies and tracking pixels will be transferred to a server of Revive-AdServer and stored there. These information may be passed on to partners, however, they will not be combined with your IP address. You may prevent avoid that cookies are stored by selecting the appropriate settings on your browser software.
Use of Google Maps
(1) On this website, we use Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. The legal basis for the use of Google Maps is Art. 6 (1) (f) GDPR.
(2) By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under section 3 of this declaration will be transmitted. This is regardless of whether Google provides a user account that you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Embedding of YouTube Videos
(1) We have embedded YouTube videos on our website that are stored at http://www.YouTube.com and may be played directly from our website. [These are all embedded in “extended data protection mode”, i.e. no data relating to you as the user will be transferred to YouTube if you do not play the videos. Only once you play the videos, the data stated in lit. 2 will be transferred. We do not have any influence on this data transfer.] The legal basis for the embedding of YouTube videos is Art. 6 (1) (f) GDPR.
(2) As a result of your visiting the website, YouTube will receive the information that you have visited the respective sub-page of our website. Moreover, the data stated in lit. 3 of this statement will be transferred. This is irrespective of whether YouTube provides a user account with which you are logged-in or whether there is no user account. If you are logged into Google, your data will be directly allocated to your account. If you do not wish to be allocated with your YouTube profile, you have to logout before you activate the button. YouTube stores your data as user profiles and uses them for marketing purposes, market research and/or the tailored design of their website. In particular, such an analysis is carried out (even for users who are not logged-in) in order to provide tailored advertising and in order to inform other users of the social networks about your activities on our website. You have the right to object to the creation of these user profiles; please contact YouTube in order to exercise this right.
(3) Please find more information on the purpose and extent of the data collection and their processing by YouTube in the YouTube (Google) privacy statement. You may also receive additional information there on your rights and options to adjust settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subjected to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
Use of Twitter
(1) Functions of the Twitter service are integrated into our websites. These functions are offered by Twitter Inc., Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. The use of these functions serves to increase our reach to Twitter (legitimate interests).
(2) If you visit our website which contains such a plugin, a direct connection will be established between your browser and the Twitter server. By doing so, Twitter will receive the information that you visited our website with your IP address. If you press the Twitter button while you are logged into your Twitter account, you may link the contents of our website to your Twitter profile. As a result, Twitter can allocate the visit of our websites to your user account. We point out that we as the provider of the websites do not have any knowledge on the content of the data that are transmitted as well as their use by Twitter.
(3) If you do not want Twitter to allocate the visit to our websites, please log out of your Twitter user account.
(4) Please find more information in this respect in the Twitter privacy statement under https://twitter.com/privacy. You may change your Twitter privacy settings in the account settings under https://twitter.com/account/settings.
Use of Aumago Cookies
(1) We cooperate with Aumago GmbH (“Aumago”), Berlin, a target audience mar keter. Aumago uses so-called cookies, a text file that is stored in the browser of the computer and collects/contains anonymous user data for the purpose of usebased online advertising (online behavioural targeting “OBA”), such as the type of the website visited, categories visited and/or product sites and/or via which browser and end device this was done. This serves to optimize our marketing strategies (legitimate interests).
(2) No direct personal data will be recorded. Consequently, the user data cannot be directly associated with the real identity of the user. The cookies are either Aumago Cookies or Cookies of service providers Aumago uses. The user may either delete the Cookies directly in the browser at any time or manage their Cookies preferences under http://www.youronlinechoices.com/uk/your-ad-choices. On the basis of this anonymous analysis of the user’s surfing behavior, Aumago segments these information from the cookies according to industries, e.g. browser “1” contains the Cookie “Industry A” on website “X”, and allows for more tailored online advertising from the interests assumed thereof. On behalf of IndustryArena GmbH, Aumago will use these anonymous, non-personal information in order to market them in the context of more aimed online advertising.
Use of Stopforumspam
(1) To prevent abuse (e.g. spam) or to safeguard our legitimate interest, the following personal data, which you enter when filling in contact and comment forms, is transferred to the US-based www.stopforumspam.com service, where it is also stored: the user’s IP address, stated name and stated e-mail address.
(2) For more information about how the Stopforumspam processes data, please visit https://www.stopforumspam.com/gdpr.
Erasing and quarantining personal data
(1) We process and store the personal data of the data subject only for as long as these are needed to fulfil their storage purpose. The data may also be stored when required by European Union or national legislation or other regulations to which the controller is subject.
(2) As soon as the storage purpose no longer applies or the retention period under the named regulations expires, the personal data are quarantined or erased automatically.
(3) Details can be found in the section “Registering for web sessions and user data” nos. (4) + (5).
Rights of the User (Data Subject)
If your personal data are being processed, you are a data subject within the meaning of the GDPR. You are entitled to the following rights vis-à-vis us as the controller:
(1) Right to Information
You may request from us a confirmation as to whether we process your personal data. If there is such processing, you may request information from the controller on the following:
(1) the purposes for which the personal data are being processed; (2) the categories of personal data that are being processed; (3) the recipient or the categories of recipients to whom your personal data were disclosed or will yet be disclosed, if any; (4) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; (5) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability; (6) the right to lodge a complaint with a supervisory authority; (7) all available information on the source from which the personal data originate, if the personal data are not collected from the data subject; (8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether your personal data will be transferred to a third country or an international organization. In this context, you may request to be informed on the suitable safeguards pursuant to Art. 46 GDPR in connection with the transfer.
(2) Right to Rectification
You have the right to rectification and/or completion towards us, provided that your personal data that are processed are incorrect or incomplete. We have to make the rectification without undue delay.
(3) Right to Restriction of Processing
On the following condition, you may request restriction of processing of your personal data:
(1) if you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
(2) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) if we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims;
(4) if you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.
Where processing has been restricted, such personal data shall - with the exception of storage - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing pursuant to the abovementioned requirements, we will inform you before the restriction of processing is lifted.
(4) Right to Erasure
You shall have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:
(1) the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (2) you withdraw consent on which the processing is based according to Art. 6 (1a) or Art. 9 (2a) GDPR, and there is no other legal ground for the processing; (3) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for such processing, or you object to the processing pursuant to Art. 21 (2); (4) the personal data concerning you have been unlawfully processed; (5) the personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject; (6) the personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
Where we have made the personal data concerning you public and are obliged to erase the personal data pursuant to Art. 17 (1) GDPR or pursuant to lit. 18.4.1 above, taking account of available technology and the cost of implementation, we shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
There is no right to erasure to the extent that processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for the establishment, exercise or defense of legal claims.
(5) Right to Notification
If you have exercised the right to rectification, erasure or restriction of processing vis-à-vis us, we are obliged to inform each recipient to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. We shall inform you about those recipients if you request it.
(6) Right to Data Portability
You have the right to receive the personal data concerning you that you provided to us in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from us, where
(1) the processing is based on consent pursuant to Article 6 (1a) GDPR or Article 9 (2a) GDPR or on a contract pursuant to Article 6 (1b) GDPR; and (2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(7) Right to Object
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning him or her which is based on Article 6 (1e) or (1f), including profiling based on those provisions.
We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
(Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
(8) Right to Withdrawal of Consent You have the right to withdraw your declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
(9) Automated Decision in the Individual Case including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for entering into, or performance of, a contract between you and us, (2) is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or (3) is based on your explicit consent.
However, these decisions shall not be based on special categories of personal data referred to in Article 9 (1) GDPR, unless point (a) or (g) of Article 9 (2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in section 18.9.1 1. number 1 and 3 (see Art. 22 (2) a. and c. GDPR), we will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
(10) Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of the personal data relating to you infringes the General Data Protection Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Legal Bases for Processing Personal Data
(1) Insofar as we obtain the consent of the data subject to the processing of his or her personal data, Article 6 (1) a GDPR shall serve as the legal basis.
(2) Article 6 (1b) GDPR shall serve as the legal basis for processing which is necessary for the performance of a contract to which you are party. This shall also apply to processing that is required prior to entering into a contract.
(3) Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are subject, Article 6 (1c) GDPR shall serve as the legal basis.
(4) If processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6 (1d) GDPR shall serve as the legal basis.
(5) If processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, Article 6 (1f) GDPR shall serve as the legal basis for such processing. Our legitimate interest is the offering of our services.
Reservation of Right to Alteration of this Privacy Statement
This web sessions privacy statement is effective as of May 2020.
As a result of the further development of our website or individual parts of the website, the change of our services and offers, or due to a changed legal basis, it might become necessary to change the privacy statement. We will make reference to any changes made.