Data protection information in accordance with Art.
13, 14 EU General Data Protection Regulation (GDPR)
This data protection
information is aimed at all users who participate in this virtual event
(PowerCo Meet Up) of PowerCo SE (Industriestraße Nord, 38239 Salzgitter,
registered in the commercial register of the Braunschweig Local Court under HRB
2097737).
In this privacy policy
of PowerCo SE, we inform you about the processing of personal data in
connection with your participation in the virtual event mentioned. It describes
how the personal data will be processed. "Personal data" in this
document refers to data as defined in Art. 4 No. 1 GDPR. There may be separate
data protection notices for special cases of data processing.
Responsible party
The controller within the meaning of Art. 4 (7) of the EU General Data
Protection Regulation (GDPR) for the processing of your personal data is
PowerCo SE
Industriestrasse Nord
38239 Salzgitter, Germany
registered in the commercial register of the Braunschweig Local Court under
HRB 2097737 legally represented by its Executive Board Frank Blome (Chairman),
Soonho Ahn, Sebastian Krapoth, Kai Müller, Jörg Teichmann, Sebastian Wolf
Data Protection Officer
The data protection officer pursuant to Art. 37 GDPR
is
Volkswagen Aktiengesellschaft
Group Digital Risks and Privacy
Oliver Draf
Data Protection Officer of PowerCo SE
Berliner Ring 2, 38440 Wolfsburg, Germany
Email: dataprivacy@volkswagen.de
Purposes of processing and legal basis for processing
We process the data of participants in the named
virtual event, who may be (potential) exhibitors, (potential) visitors, media
representatives, speakers, ticket holders, partners or others. We collect the
data as part of your online registration and profile creation and partly
automatically using various technologies.
For the purpose of participating in the event, you
will be given access to a virtual platform via which the aforementioned
participants can introduce themselves and, if applicable, your company
(profile), visit the event virtually, follow presentations and talks live or
afterwards (participation) and meet and network (communication and networking).
To register for the event, you must register online.
If there are separate tickets for the event, you as the ticket holder will find
further information on this in the separate data protection declarations in the
corresponding ticket store.
The following data is
processed to create the virtual profile (business card): Salutation, title,
name, position and name of the company/organization, contact details, status
(exhibitor, visitor, trade visitor, media representative), photo (optional),
professional interests and preferences (optional), social media accounts such
as Xing and Linked In (optional) and calendar ID (optional). The following data
is processed to create the exhibitor profile: Exhibitor name and category,
address, stored URL, exhibitor description, business area, products and
business cards and contact person.
The following data is
processed for participation in virtual events, including live streaming: Name,
company/organization, rooms visited, sessions and interactions that took place
within the virtual rooms as well as date, time and duration of participation.
The following data is
processed for communication and networking purposes: Name, role and name of the
company/organization of conversation or chat participants, content, timestamp
and progress of the chat as well as date and time of agreed appointments, name
of the conversation partner, type of appointment, notes on appointment entries,
availability and the calendar ID.
For navigation on and
for the security of the platform and for analysis purposes and for statistical
evaluation to optimize future online presences, certain data is collected
automatically through the use of certain technologies. For this purpose,
so-called cookies (small files) are stored on the user's end device, saved in
the web browser and read out.
We use the following
cookies on the virtual platform:
|
Name |
Own/third party provide |
Stored data |
purpose |
Type of cookie/technology |
Storage duration |
|
XSRF-Token |
own |
csrf |
Security - verification of the transmission |
Functionally or technically
necessary |
2h |
|
expo_x_session |
own |
Cache session data, unique identification of the user |
Security - Settings |
Functionally or technically
necessary |
2h |
|
remember_web_XX |
own |
Reminder token whether user is already logged in |
Security - Settings |
Functionally or technically
necessary |
5 years/ unlimited |
|
_pk_id.6.4 964 |
Eigen (Matomo /Piwik –
selfhosted) |
User ID |
Analysis
- Visitor statistics |
1 year |
|
|
_pk_ses.6.4 964 |
Eigen (Matomo /Piwik –
selfhosted) |
Session |
Analysis
- Visitor statistics |
1h |
If you carry out the registration for another person
(third party) or their data (e.g. business cards of your employees as
exhibitors), please ensure that you are authorized to provide the data and that
you have sufficiently informed the persons concerned about the processing of
their data as described in this privacy policy.
Purposes of processing and legal basis for processing
We process the personal data in accordance with
section 2 to carry out and enable your participation in the event (legal basis:
Art. 6 (1) (f) GDPR). The aforementioned essential cookies serve the navigation
and security of the platform.
Profile
Personal data is processed in order to create a profile or virtual business
card at the event, to gain new contacts and to network with other participants
at the same event and/or to be able to present additional products and services
as an exhibitor.
Livestreaming and participation in virtual events
We process personal data for the organization and implementation of virtual
events, livestreams and on-demand videos.
Communication and networking
We process personal data to enable participants to chat and communicate with
other participants, set up and organize meetings, take notes, participate in
meetings in virtual rooms or stream meetings via the platform, as well as to
arrange and conduct appointments and video calls between different participants
Analysis and
evaluation for optimization
We also process personal data, including through the aforementioned
technologies used, for our legitimate interest in analyzing participation in
the named event and use of the platform and for statistical evaluation to
optimize future online presences (legal basis: Art. 6 (1) (f) GDPR). You can
actively consent to the use of cookies that are not technically necessary for
the function and security of our website or platform via the cookie consent
tool. The legal basis for this consent-based cookie-based processing is your
consent (Art. 6 (1) (a) GDPR).
Rights of data subjects/your rights under data
protection law
You have the following rights vis-à-vis PowerCo SE
under the applicable data protection law with regard to the personal data
concerning you.
Right to information: You can request information at any time as to whether and what
personal data about you is stored. The provision of information by us is free
of charge for you.
The right to information does not exist or only exists
to a limited extent if and insofar as the information would disclose confidential
information, e.g. information that is subject to professional secrecy.
Right to rectification: If your personal data stored by us is incorrect or incomplete, you
have the right to request the correction of this data at any time.
Right to erasure: You have the right to request that we erase your personal data if and
to the extent that the data is no longer required for the purposes for which it
was collected or, if the processing is based on your consent, you have
withdrawn your consent. In this case, we must stop processing your personal
data and remove it from our IT systems and databases.
There is no right to erasure if
- the data may not be deleted due to a legal
obligation or must be processed due to a legal obligation
- the data processing is necessary for the
establishment, exercise or defense of legal claims.
Right to restriction of processing: You have the right to request the restriction of the processing of
your personal data.
Right to data portability: You have the right to receive the data you have provided to us in a
structured, commonly used and machine-readable format and the right to have
this data transmitted to another controller. This right only exists if
- you have provided us with the data on the basis of
your consent or on the basis of a contract concluded with you
- the processing is carried out by automated means.
Right to object to processing: If your data is processed by us on the basis of Art. 6 para. 1 lit. f)
GDPR, you can object to the processing by us at any time.
You can assert all of the data subject rights
described above against PowerCo SE if you address your specific request to the
following contact details:
PowerCo SE
Legal / Data Protection
Industriestrasse Nord
38239 Salzgitter, Germany
or
Data Protection Officer of PowerCo SE
Volkswagen Aktiengesellschaft
Group Digital Risks and Privacy
z. For the attention of Oliver Draf
Berliner Ring 2, 38440 Wolfsburg, Germany
Email: dataprivacy@volkswagen.de
Right to lodge a complaint with a data protection
supervisory authority
In accordance with Art. 77 GDPR, you have the right to
lodge a complaint with a data protection supervisory authority if you believe
that the processing of your personal data violates data protection law.
Duration of data storage
For the storage duration of the data collected using
the technologies mentioned in the section "Purposes of processing and
legal basis for processing", see above under section "Purposes of
processing and legal basis for processing". Participants can delete their
profile data at any time. The personal data specified in the section
"Purposes of processing and legal basis for processing" will be
deleted at the latest after the specified period has expired. The period
depends on the planned duration of use of the event, but usually ends at the
end of the current calendar year. An individual date can be set at the
customer's request.
In addition, stored
personal data may be deleted earlier as soon as it is no longer required for
the purpose for which it was processed. If the processing is based on consent
or on a legitimate interest, the data concerned will no longer be processed for
the associated purpose after receipt of the withdrawal of consent or objection
to the processing and may be deleted, unless there are legal exceptions.
Irrespective of this, personal data subject to retention obligations under
commercial or tax law will only be deleted after the statutory periods have
expired.
In individual cases,
the statutory retention period may be extended beyond this if, for example, the
information is required for the assertion, exercise or defense of legal claims
even after the retention period has expired.