General data protection declaration for participants of events

Categories of data, purpose of processing and legal basis

As part of the organization and processing of internal and external events, EDRO processes the following categories of personal data from participants in particular:

• The personal data you provided when registering for an event, such as in particular your name, professional and private contact information, employer, allergies/intolerances you provided voluntarily;
• Information collected from publicly available sources (e.g. publicly available websites);
• Film and photo recordings: As part of events, film and photo recordings are regularly made to document the event, which can be published in reports about the event in the media and in EDRO publications.

• other personal data that is made available as part of participation in events or arises as a result of your participation (e.g. time data on event attendance) including any text documents created and archived with the aid of automation (e.g. correspondence);

The legal basis for data processing is Article 6 Paragraph 1 lit a (your consent) or Article 6 Paragraph 1 lit f (legitimate interests of the person responsible: organization and processing of internal and external events) of the General Data Protection Regulation (GDPR). Special categories of personal data (e.g. allergies, etc.) are processed exclusively on the basis of your consent.

The processing of personal data is necessary to achieve the above-mentioned purposes. If the mentioned personal data is not provided or not provided to the required extent or if EDRO cannot collect it, participation may not take place.

Right to information, correction, deletion or restriction of your personal data, right of objection, right to data portability and revocation of a given consent

• In accordance with Article 15 GDPR, you have the right to request confirmation as to whether personal data is being processed by the person responsible and the right to information about this data. This right does not exist in the case of Section 34 (1) BDSG.
• In accordance with Article 16 GDPR, you have the right to immediately request the correction of incorrect data concerning you and/or the completion of incomplete personal data.
• In accordance with Article 17 GDPR, you have the right to have your personal data deleted. This right does not exist in the case of Section 35 (1) BDSG; in its place then comes the right to restriction of processing.
• According to Art. 18 you have the right to restriction of processing. This right is supplemented by § 35 Para. 2 BDSG.

• According to Art. 20 GDPR you have the right to data transfer.
• In accordance with Article 21 GDPR, you have the right to object to data processing.
• Ultimately, you have the opportunity to lodge a complaint with the supervisory authority.
• If your data is processed on the basis of your consent, you have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent up to the point of revocation.