PRIVACY

A. GENERAL INFORMATION
‍
In the following, we inform you about when and how we, WongDoody GmbH, are processing your personal data. Personal data is all data with which you can be personally identified.WongDoody GmbH is part of the Infosys Limited group of companies. We are acting as a digital experience, marketing and commerce agency jointly under the trademark “WongDoody” with our WongDoody sister companies in other territories. This Data Privacy Statement applies only to the processing of personal data in connection with this WongDoody Living Labs event page. For general information regarding the processing of personal data by us, please refer to www.wongdoody.com/de-privacy.  

‍1. The controller in charge within the meaning of the General Data Protection Regulation (GDPR) for data processing is WongDoody GmbH
Eberhardstr. 69-71
70173 Stuttgart, Deutschland
Tel.: +49 711-248491 60,
E-mail: info@odt.net The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

‍2. The controller has designated a data protection officer for this website. He can be reached as follows: Dipl.-Ing. (BA) Matthias WalliserAltenwaldstr. 8 72768 Reutlingen Phone: +49 7121 69 702 26  
Email: datenschutz@odt.net
‍

B. Data Collection when Visiting this Website

1. When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary

for us to display the website to you:
• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis ofour legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.  

2. This website uses SSL for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.  

3. Cookies
‍In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the duration of the storage in the overview of the cookie settings of your web browser.  

If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.  

You can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.
‍

C. Contacting us

‍1. When you contact us (e.g. via the contact form or e-mail), personal data is collected. Whichdata is collected when using the contact form can be seen from the contact form.  

2. Purpose and Legal Basis for ProcessingThis data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.  

The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.  

‍3. ConsentIf
you have given your consent for certain purposes, the purposes result from the respective content of this consent. The data processing is then based on Article 6(1)(a) DSGVO. In cases where you have to provide data for this purpose, we expressly point this out. Without providing the data, we may not be able to fulfill your request covered by the consent. You can revoke your consent at any time without the lawfulness of the processing carried out on the basis of the consent up to the revocation being affected by this revocation.

4. Recipients of Personal Data
‍Within WongDoody, only the persons who need to have access for the purposes mentioned under Section 2. above, will have access.
External recipients: We only pass on your personal data to external recipients outside of WongDoody if this is necessary for the processing or performance of your request, if another legal permission or obligation exists, or if we have your consent for this.External recipients can be:

• Order processors
Xxternal service providers that we use to provide services, e.g. in the areas of technical infrastructure and maintenance. These processors are carefully selected by us and regularly audited to ensure that the security and confidentiality of your personal data is maintained. The service providers may only use the data for the purposes specified by us.

• Public authorities
Authorities and government institutions, such as public prosecutors, courts or tax authorities, to which we must transfer personal data for legally compelling reasons. The transfer is then made on the basis of Article 6(1)(c) DSGVO.

5. Automated Decision Making and ProfilingWe do not use automated decision-making or profiling for the processing of general communication.


D. Event Booking via Eventbrite
‍
We use Eventbrite as the booking system for participation in our events. Eventbrite is an event platform operated by Eventbrite Inc. (“Eventbrite”). If you wish to make a booking on our website and click the corresponding button or link, you will be redirected to Eventbrite’s website.

When you make a booking via Eventbrite, Eventbrite collects and processes the following personal data, which we also gain access to:
• Name
• Email address
• Billing address (if applicable)
• Payment details (if applicable)
• Date of birth
• Information about booked and attended events

In addition, Eventbrite automatically collects data, including device and browser information (e.g., your IP address), characteristics of your access device and/or browser, statistical data on your activities on the platform, and details about how you access the services.

As the event organizer, we receive the personal data you provide during the booking process from Eventbrite. This allows us to manage and authenticate you as a participant at the event and provide you with information before and after the event to ensure that you can fully benefit from the offered services.

Data processing for paid events is based on Art. 6(1)(b) of the GDPR. This means that you provide us with the data as part of the contractual relationship between you and us.Additionally, data processing is based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR. The processing of your personal data through the use of Eventbrite's service ensures the orderly execution of events, particularly for participant authentication and information, as well as for the identification of interest-based offerings. We have taken possible conflicting rights and interests of yours into consideration.

According to its own statements, Eventbrite processes the above-mentioned data on behalf of event organizers (e.g., for sending confirmation emails, handling payments, etc.) and to support organizers in event planning. However, it cannot be ruled out that Eventbrite also processes the data for its own purposes. Further details about Eventbrite’s role as a data processor, how personal data is processed on our behalf, and how it is protected can be found in the Data Processing Addendum for Organizers.

For more information on the processing of personal data by Eventbrite, please refer to the privacy policy on the Eventbrite website.

The Eventbrite event platform is operated by Eventbrite Inc., 155 5th Street, Floor 7, San Francisco, CA 94103. Eventbrite also has a subsidiary in Berlin: Eventbrite DE GmbH, Oranienstraße 25, 10999 Berlin, Germany. A

ccording to Eventbrite, any data transfers to the USA are based on standard contractual clauses pursuant to Art. 46(2)(c) of the GDPR. Please note that data transfers to the USA do not guarantee a level of data protection that meets GDPR requirements. U.S. security authorities may have extensive and indiscriminate access to your personal data transmitted to Eventbrite. You do not have effective legal remedies to prevent this. More information on this can be found [here].


E. Rights of the Data Subject

1. The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:

‍• Right of access by the data subject pursuant to Art. 15 GDPR
‍• Right to rectification pursuant to Art. 16 GDPR• Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
‍• Right to restriction of processing pursuant to Art. 18 GDPR
‍• Right to be informed pursuant to Art. 19 GDPR
‍• Right to data portability pursuant to Art. 20 GDPR
‍• Right to withdraw a given consent pursuant to Art. 7 (3) GDPR
‍• Right to lodge a complaint pursuant to Art. 77 GDPR

2. Right to Object
‍IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.


F. Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until a data subject revokes their consent.If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.


G. Social Media
The dEtails of how your personal data is processed when you visit one of our social media accounts, such as Instagram or LinkedIn, and interact with us there, you can find here.