Privacy Policy

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is the organizer:

Oskar Killinger Stiftung gUG

Am Sandtorkai 48

20457 Hamburg

Germany

Tel.: 0403198-0

Email: stop.sudep@oskarkillinger.org

Website: www.sudep.de

For event registration, the conference software provider Converia GmbH has been commissioned as a data processor:

Converia GmbH

Kaufstr. 2-4

99423 Weimar

Type of processing:

Hosting and operation of the conference management software Converia

Maintenance and support

The privacy policy of Converia can be found at: Privacy Policy | Converia

General Information on Data Processing

  1. Scope of the Processing of Personal Data

We generally process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.

  1. Legal Basis for the Processing of Personal Data

Where we obtain the consent of the data subject for processing operations of personal data, Art. 6(1)(a) GDPR serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Where processing of personal data is necessary for compliance with a legal obligation to which our organization is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of legitimate interests pursued by our organization or a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis.

  1. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.

Information on Data Processing by a Processor

This website uses the conference management software Converia, which is provided by Converia GmbH. Converia GmbH hosts the software and provides additional services such as maintenance and support. Therefore, Converia GmbH may come into contact with personal data stored in the software and is therefore considered a data processor.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Converia GmbH.

Provision of the Website and Creation of Log Files

  1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data are collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's internet service provider
  • The user's IP address
  • Date and time of access
  1. Legal Basis for Data Processing

The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR.

  1. Purpose of Data Processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, the data serve to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

  1. Duration of Storage

The data are deleted as soon as they are no longer required for the purpose of their collection.

In the case of data collection for the provision of the website, this is the case when the respective session has ended.

In the case of storage in log files, this is the case after a maximum of ten days. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or anonymized so that assignment of the accessing client is no longer possible.

  1. Possibility of Objection and Removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of Cookies

  1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows unique identification of the browser when the website is accessed again.

We categorize cookies as follows:

Necessary cookies (Type 1)

These cookies are essential for websites and their functions to operate properly. Without these cookies, services such as participant registration cannot be provided.

Functional cookies (Type 2)

These cookies enable websites to provide enhanced functionality and personalization.

Performance cookies (Type 3)

These cookies collect information about how users use websites.

Third-party cookies (Type 4)

These cookies are set by third parties.

  1. Legal Basis for Data Processing

The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR.

  1. Purpose of Data Processing

We use the following cookies:

  • PHPSESSID – session identification
  • Converia_SID – frontend user identification
  1. Duration of Storage and Control Options

Cookies are stored on the user's computer. Users can control cookies via browser settings. Disabling cookies may limit functionality.

Registration & Use of the Conference Management Software

  1. Description and Scope of Data Processing

Users can register by entering personal data.

Required fields must be completed correctly; otherwise registration is rejected.

Users must actively confirm the privacy policy before submission.

Typical use:

Registration as participant

Collected data:

Login data

Address data

Email address

Shopping cart data

Activity information

Certification data

  1. Legal Basis for Data Processing

Art. 6(1)(a) and (b) GDPR

  1. Purpose of Data Processing

Contract execution and pre-contractual measures

  1. Duration of Storage

Data are deleted when no longer necessary.

Usually within 2 years after last login.

  1. Objection and Removal

Users may modify or delete data at any time.

Deletion may be restricted by legal obligations.

Rights of the Data Subject

If personal data are processed, you are a data subject within the meaning of the GDPR and have the following rights:

Right of access (Art. 15 GDPR)

Right to rectification (Art. 16 GDPR)

Right to restriction of processing (Art. 18 GDPR)

Right to erasure (Art. 17 GDPR)

Right to notification (Art. 19 GDPR)

Right to data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR)

Right to withdraw consent (Art. 7(3) GDPR)

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)