Data Privacy Notice

This data protection information informs you about the processing of your personal data that we process in connection with your participation in the online event “KONUX Tech Talks for Women” (hereinafter: “Event”). Your personal data will be processed in compliance with the applicable data protection regulations.

“Personal data” means any information relating to an identified or identifiable natural person (‘the data subject’); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person; 1. name and contact details of the controller and the company data protection officer.

1. Responsible Body and Data Protection Officer

The controller within the meaning of Art. 4 No. 7 GDPR is:

KONUX GmbH Flößergasse 2 81369 Munich/ Germany

Phone: +49 89 18955010 Email: [email protected] Website: www.konux.com

The Data Protection Officer of KONUX is

Robert Niedermeier Data Business Services GmbH & Co. KG Noerdliche Muenchner Str. 47 82031 Gruenwald/Munich

Email: [email protected]

You can contact our Data Protection Officer directly at any time with questions about data protection law or your data subject rights.

2. Processing of personal data and purposes of processing

As part of the event registration process, we collect the following mandatory information:

Name, first name and e-mail address.

The mandatory data is processed in order to be able to identify you as a participant in the Event, to check the plausibility of the data entered and to reserve the place to participate, as only limited participation is possible.

The data processing is carried out upon your registration and is necessary according to Art. 6 para. 1 p. 1 lit. (f) GDPR for the stated purposes for the participation and implementation of the event.

For the registration and implementation of the Event, we use technical service providers by way of contract processing, which processes the data according to our instructions.

The following information is visible to other participants who are not organizers during the conference: your name and your chat contributions.

We do not record whether you participated attentively in the event (e.g. whether you activated windows other than the Event window during the Event).

The technical service provider is Zoom Video Communications, Inc. (hereinafter “Zoom”) which acts as a processor for us. The data storage takes place at Zoom, namely in data centers in the US. The transfer takes place using a contractual transfer instrument of the EU Commission.

Zoom collects certain diagnostic and service data in the course of providing the service and uses this data autonomously for its own purposes. To the extent that Zoom processes personal data in connection with its own legitimate business operations, Zoom is an independent controller within the meaning of the GDPR for these processing operations. For details on processing by Zoom, please visit https://explore.zoom.us/privacy.

You may participate in an online event based on Zoom without having your own Zoom account. If you use your own Zoom account to participate, supplementary data may be processed in accordance with the terms of your Zoom account.

Your personal data is also transferred to us over the email tool Gmail of the service provider Google Ireland Limited, which acts as a processor for us. The data storage takes place at Google, namely in data centers in the EU. The transfer takes place using a contractual transfer instrument of the EU Commission.

We delete the personal data we have collected no later than 7 days after the event has taken place.

3. Transfer of data to third parties

A transfer of your personal data to third parties does not take place.

4. Rights of the data subject

Insofar as you are the affected person according to Art. 4 No. 1 GDPR, you have the following rights regarding the processing of your personal data under the GDPR. The EU regulation text that these rights are based on can be found here.

Right to Confirmation and Information

Under the preconditions of Art. 15 GDPR you have the right to request a confirmation as to whether personal data of you are being processed and at any time, free of charge, to receive information from the controller regarding the personal data stored about you and a copy of these data.

Right to Rectification

Under the conditions of Art. 16 GDPR you have the right to demand the immediate correction of incorrect personal data concerning you. In addition, you have the right, under consideration of the purposes of the processing, to demand the completion of incomplete personal data, also by means of a supplementary declaration.

Right of Deletion

Under the preconditions of Art. 17 GDPR, you have the right to demand that personal data concerning you be deleted without delay, provided that one of the reasons stated in Art. 17 GDPR exists and the processing is not required.

Right to Restriction of Processing

Under the conditions of Art. 18 GDPR, you have the right to demand the restriction of processing if one of the conditions set out in Art. 18 GDPR exists.

Right to Data Portability

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data you have provided us in a structured, common and machine-readable format, and you have the right to transfer this data to another person without hindrance provided that the further requirements of Article 20 GDPR are met.

Right to Revoke Consent

You have the right to withdraw your consent to the processing of personal data at any time with future effect. The revocation should be directed to the above contact details.

Right of Objection

Under the conditions of Art. 21 GDPR you have the right to object at any time to the processing of your personal data. If the conditions for an effective contradiction exist, we may no longer process them.

Right of Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is violating the requirements of the GDPR.