Data protection information in accordance with Art. 13, 14 EU General Data Protection Regulation (GDPR)
This data protection information is aimed at all users who participate in this virtual event (PowerCo Meet Up) of PowerCo SE (Industriestraße Nord, 38239 Salzgitter, registered in the commercial register of the Braunschweig Local Court under HRB 2097737).
In this privacy policy of PowerCo SE, we inform you about the processing of personal data in connection with your participation in the virtual event mentioned. It describes how the personal data will be processed. "Personal data" in this document refers to data as defined in Art. 4 No. 1 GDPR. There may be separate data protection notices for special cases of data processing.
Responsible party
The controller within the meaning of Art. 4 (7) of the EU General Data Protection Regulation (GDPR) for the processing of your personal data is
PowerCo SE
Industriestrasse Nord
38239 Salzgitter, Germany
registered in the commercial register of the Braunschweig Local Court under HRB 2097737 legally represented by its Executive Board Frank Blome (Chairman), Soonho Ahn, Sebastian Krapoth, Kai Müller, Jörg Teichmann, Sebastian Wolf
Data Protection Officer
The data protection officer pursuant to Art. 37 GDPR is
Volkswagen Aktiengesellschaft
Group Digital Risks and Privacy
Oliver Draf
Data Protection Officer of PowerCo SE
Berliner Ring 2, 38440 Wolfsburg, Germany
Email: dataprivacy@volkswagen.de
Purposes of processing and legal basis for processing
We process the data of participants in the named virtual event, who may be (potential) exhibitors, (potential) visitors, media representatives, speakers, ticket holders, partners or others. We collect the data as part of your online registration and profile creation and partly automatically using various technologies.
For the purpose of participating in the event, you will be given access to a virtual platform via which the aforementioned participants can introduce themselves and, if applicable, your company (profile), visit the event virtually, follow presentations and talks live or afterwards (participation) and meet and network (communication and networking).
To register for the event, you must register online. If there are separate tickets for the event, you as the ticket holder will find further information on this in the separate data protection declarations in the corresponding ticket store.
The following data is processed to create the virtual profile (business card): Salutation, title, name, position and name of the company/organization, contact details, status (exhibitor, visitor, trade visitor, media representative), photo (optional), professional interests and preferences (optional), social media accounts such as Xing and Linked In (optional) and calendar ID (optional). The following data is processed to create the exhibitor profile: Exhibitor name and category, address, stored URL, exhibitor description, business area, products and business cards and contact person.
The following data is processed for participation in virtual events, including live streaming: Name, company/organization, rooms visited, sessions and interactions that took place within the virtual rooms as well as date, time and duration of participation.
The following data is processed for communication and networking purposes: Name, role and name of the company/organization of conversation or chat participants, content, timestamp and progress of the chat as well as date and time of agreed appointments, name of the conversation partner, type of appointment, notes on appointment entries, availability and the calendar ID.
For navigation on and for the security of the platform and for analysis purposes and for statistical evaluation to optimize future online presences, certain data is collected automatically through the use of certain technologies. For this purpose, so-called cookies (small files) are stored on the user's end device, saved in the web browser and read out.
We use the following cookies on the virtual platform:
Name | Own/third party provide | Stored data | purpose | Type of cookie/technology | Storage duration |
XSRF-Token | own | csrf | Security - verification of the transmission | Functionally or technically necessary | 2h |
expo_x_session | own | Cache session data, unique identification of the user | Security - Settings | Functionally or technically necessary | 2h |
remember_web_XX | own | Reminder token whether user is already logged in | Security - Settings | Functionally or technically necessary | 5 years/ unlimited |
_pk_id.6.4 964 | Eigen (Matomo /Piwik – selfhosted) | User ID | Analysis - Visitor statistics | 1 year | |
_pk_ses.6.4 964 | Eigen (Matomo /Piwik – selfhosted) | Session | Analysis - Visitor statistics | 1h |
If you carry out the registration for another person (third party) or their data (e.g. business cards of your employees as exhibitors), please ensure that you are authorized to provide the data and that you have sufficiently informed the persons concerned about the processing of their data as described in this privacy policy.
Purposes of processing and legal basis for processing
We process the personal data in accordance with section 2 to carry out and enable your participation in the event (legal basis: Art. 6 (1) (f) GDPR). The aforementioned essential cookies serve the navigation and security of the platform.
Profile
Personal data is processed in order to create a profile or virtual business card at the event, to gain new contacts and to network with other participants at the same event and/or to be able to present additional products and services as an exhibitor.
Livestreaming and participation in virtual events
We process personal data for the organization and implementation of virtual events, livestreams and on-demand videos.
Communication and networking
We process personal data to enable participants to chat and communicate with other participants, set up and organize meetings, take notes, participate in meetings in virtual rooms or stream meetings via the platform, as well as to arrange and conduct appointments and video calls between different participants
Analysis and evaluation for optimization
We also process personal data, including through the aforementioned technologies used, for our legitimate interest in analyzing participation in the named event and use of the platform and for statistical evaluation to optimize future online presences (legal basis: Art. 6 (1) (f) GDPR). You can actively consent to the use of cookies that are not technically necessary for the function and security of our website or platform via the cookie consent tool. The legal basis for this consent-based cookie-based processing is your consent (Art. 6 (1) (a) GDPR).
Rights of data subjects/your rights under data protection law
You have the following rights vis-à-vis PowerCo SE under the applicable data protection law with regard to the personal data concerning you.
Right to information: You can request information at any time as to whether and what personal data about you is stored. The provision of information by us is free of charge for you.
The right to information does not exist or only exists to a limited extent if and insofar as the information would disclose confidential information, e.g. information that is subject to professional secrecy.
Right to rectification: If your personal data stored by us is incorrect or incomplete, you have the right to request the correction of this data at any time.
Right to erasure: You have the right to request that we erase your personal data if and to the extent that the data is no longer required for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from our IT systems and databases.
There is no right to erasure if
- the data may not be deleted due to a legal obligation or must be processed due to a legal obligation
- the data processing is necessary for the establishment, exercise or defense of legal claims.
Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.
Right to data portability: You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transmitted to another controller. This right only exists if
- you have provided us with the data on the basis of your consent or on the basis of a contract concluded with you
- the processing is carried out by automated means.
Right to object to processing: If your data is processed by us on the basis of Art. 6 para. 1 lit. f) GDPR, you can object to the processing by us at any time.
You can assert all of the data subject rights described above against PowerCo SE if you address your specific request to the following contact details:
PowerCo SE
Legal / Data Protection
Industriestrasse Nord
38239 Salzgitter, Germany
or
Data Protection Officer of PowerCo SE
Volkswagen Aktiengesellschaft
Group Digital Risks and Privacy
z. For the attention of Oliver Draf
Berliner Ring 2, 38440 Wolfsburg, Germany
Email: dataprivacy@volkswagen.de
Right to lodge a complaint with a data protection supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
Duration of data storage
For the storage duration of the data collected using the technologies mentioned in the section "Purposes of processing and legal basis for processing", see above under section "Purposes of processing and legal basis for processing". Participants can delete their profile data at any time. The personal data specified in the section "Purposes of processing and legal basis for processing" will be deleted at the latest after the specified period has expired. The period depends on the planned duration of use of the event, but usually ends at the end of the current calendar year. An individual date can be set at the customer's request.
In addition, stored personal data may be deleted earlier as soon as it is no longer required for the purpose for which it was processed. If the processing is based on consent or on a legitimate interest, the data concerned will no longer be processed for the associated purpose after receipt of the withdrawal of consent or objection to the processing and may be deleted, unless there are legal exceptions. Irrespective of this, personal data subject to retention obligations under commercial or tax law will only be deleted after the statutory periods have expired.
In individual cases, the statutory retention period may be extended beyond this if, for example, the information is required for the assertion, exercise or defense of legal claims even after the retention period has expired.