General Data Protection Declaration for Participants of Events

General data protection declaration for participants of events

If you participate in an event of EDRO Specialty Steels GmbH (hereinafter referred to as “we”, “us”), we would like to point out that we process personal data (hereinafter referred to as “data”) of you in order to be able to organise, process and document this event. Who is responsible for data processing and who can you contact? The controller for the following data processing is

EDRO Specialty Steels GmbH Industriestraße 5c, 77767 Appenweier, Germany

What is personal data?

“Personal data” means any information relating to an identified or identifiable natural person (e.g. name, address, e-mail address, company affiliation, image and sound recordings). Processing of data based on participation in one of our events Organization and handling of the event Purpose: We process the data you transmit to us in order to ensure your participation in our event and to ensure the smooth organisation and handling of the event.

There is neither a legal nor a contractual obligation on your part to provide us with the data necessary for registering for our event. However, if you do not provide the necessary data to the required extent, you may be refused participation in the event under certain circumstances.

Data categories: Personal master data (e.g. name, title, date of birth), contact data (e.g. address, e-mail address, telephone number), health data (e.g. physical impairments, food allergies and intolerances), correspondence data (e.g. content of e-mails, registrations and deregistrations)

Legal basis:

Article 6 (1) (a) GDPR – Consent

Article 6 (1) (f) GDPR – legitimate interests: knowledge of the number of event participants and, if applicable, their special needs in order to be able to handle the event and take special precautions in advance

Article 9 (2) (a) GDPR – explicit consent: If health data (e.g. food allergies, physical limitations) is transmitted

Storage period: We store your data until the purpose has been fulfilled. After fulfilling the purpose, your data will only be stored if there is a legal obligation to retain it or if another essential reason for further storage can be cited. This may be the case, for example, if we need your data for the assertion, exercise, defense, but also defense of legal claims.

Recipient categories: Your data may be transmitted to other voestalpine Group companies

(www.voestalpine.com/standorte) in compliance with data protection regulations. If your data is collected and stored in IT systems or IT applications for the purpose of participating in the event, this data may also be transmitted to processors (IT service providers). Documentation and reporting Purpose: To document the event, film and photo recordings are regularly created, which in turn can be published in reports about the event in newspapers, publications and on social media.

Data categories: Personal master data (e.g. name, title), data on the company (e.g. company name), video, photograph and sound data (e.g. photos, video recordings, speech held), data that can be collected from publicly available sources (e.g. websites)

Legal basis: Article 6 (1) (a) GDPR – Consent Article 6 (1) (f) GDPR – legitimate interests: Documentation of the event for internal company purposes (e.g. information of employees) and publication of event details to inform business partners and to achieve media presence

Recipient categories: Professional photographers and filmmakers; if necessary, your data will be transmitted to other voestalpine Group companies (www.voestalpine.com/standorte) in compliance with data protection regulations. If your data is collected and stored in IT systems or IT applications for the purpose of event documentation, this data may also be transmitted to processors (IT service providers). International data transfers Due to the complexity of today’s data processing processes, we commission processors to process your data. As far as possible, we only use processors that are based within the European Union or within the European Economic Area and are therefore subject to the GDPR.

However, it may exceptionally happen that we transfer data to third countries (i.e. outside the European Union or the European Economic Area) and have it processed there. If we transfer data to third countries, the transfer will only take place in compliance with the legally regulated admissibility requirements (in particular, the existence of an adequacy decision by the EU Commission, the conclusion of standard data protection clauses, including – if necessary – additional agreement on further technical, organisational and contractual measures). In the event of a transfer of your data to a third country, it is possible to request a copy of the appropriate or adequate safeguards from our data protection organisation.

Rights of data subjects and complaint options

In accordance with Article 15 of the GDPR, you have the right to request confirmation as to whether personal data is being processed by the controller and the right to information about this data.

In accordance with Article 16 of the GDPR, you have the right to request the rectification of incorrect data concerning you and/or the completion of incomplete personal data without undue delay.

In accordance with Article 17 of the GDPR, you have the right to have your personal data deleted.

In accordance with Article 18 of the GDPR, you have the right to restriction of processing.

In accordance with Article 20 of the GDPR, you have a right to data portability.

In accordance with Article 21 of the GDPR, you have the right to object to data processing.

If your data is processed on the basis of your consent, you have the right to revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

Finally, you have the option of filing a complaint with the supervisory authority responsible for you.

Contact Details

If you have any questions about data protection or how to assert your aforementioned rights, you can reach our data protection organization by e-mail at datenschutz@edro.com or by post at EDRO Specialty Steels GmbH Industriestraße 5c, 77767 Appenweier with the subject “Data protection”. Portions of this Privacy Notice may be changed or updated by us for technical or legal reasons without prior notice to you. Please review the current Privacy Notice to stay informed of any changes or updates.