Data Privacy Policy

The operator of the website www.mumac-conference.com (hereinafter the “Website”) takes the protection of your personal data very seriously. Your personal data will be kept confidential and will be processed solely in accordance with applicable laws – including Regulation (EU) 2016/679 (General Data Protection Regulation) (“GDPR”), the German Federal Data Protection Act (Bundesdatenschutzgesetz) (“BDSG”) and the German Tele Media Act (Telemediengesetz) (“TMG”) – and in line with this data protection notice. 

Details of the Controller

Contact Data: MuSaC Munich Services & Consulting GmbH

You can find further details in our Imprint.

Use of your personal data

Website – General

When you access the Website, your computer will automatically send information to the webserver, including the IP address of your computer/internet connection, browser type and version, etc. This information will, in general, only be used to provide the Website and will not be stored. 

The legal basis is our legitimate interest (Article 6(1) point (f) GDPR) to provide you with information on the internet. The processing of personal data also complies with the TMG.

If you do not wish your actual IP address to be processed by our Website, you can use an anonymiser or VPN service.

We use analytics services, such as Google Analytics which use Data Collection Technology to analyze your use of the Website. For more information on Google’s privacy practices for Google Analytics, please visit https://support.google.com/analytics/answer/6004245. You may prevent Google Analytics from recognizing you on our Website by deleting or disabling the relevant cookies. You may exercise choices regarding the use of cookies from Google Analytics by visiting https://tools.google.com/dlpage/gaoptout.

Except as stated above, you can generally use our Website without providing any personal data. If we collect personal data (such as your name or email address), we will do so as set out in the sections “Contact via email, phone or mail” and “Registration for events” below.

Website – Links to social media sites

Our Website includes links to our profiles on Twitter, Instagram and Linkedin. For these profiles, the data protection notice on these separate websites will apply.

Contact via email, phone or mail

If you contact us via email, phone or regular mail, we will collect your contact information (name, email address, postal address, etc.) and use this data to reply to you. The same applies if you provide us your contact details in person.

The legal basis is our legitimate interest (Article 6(1) point (f) GDPR) to reply to your requests. If you contact is in connection with the registration of an event or if you are one of our supplier or service provider, the legal basis will be the fact that the processing is required in order to enter into or perform a contract with you (Article 6(1)(b) GDPR). If you are a contact person for one of our suppliers or service providers, the legal basis is our legitimate interest Article 6(1) point (f) GDPR) to communicate with our contractual partners.

For contact requests that involve claims or entitlements, we will retain your personal data for up to six months after expiry of the statutory limitation period. In other cases, we will retain your data for up to one year after your last request. In case of legal obligations to retain data or documents beyond that, we will retain the data until the expiry of such legal obligations.

Registration for events

If you register for events, we will collect the data set out in the registration form on this Website. Required information is also marked as such (with a *) on the registration form.

The data will only be used to organise the respective event. The legal basis will be the fact that the processing is required in order to enter into or perform a contract with you (Article 6(1)(b) GDPR), for optional (non-required) information, the legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. With your consent, we will also use the data to send you communications about current and future MuMAC events as set out below.

We will retain your personal data for up to six months after expiry of the statutory limitation period. In case of legal obligations to retain data or documents beyond that, we will retain the data until the expiry of such legal obligations.

MuMAC communications

If you opt to subscribe to receive MuMAC communications (as offered during registration), we will also use your personal data to send you said communications. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. Your data will be retained until you unsubscribe from our mailing list.

Recipients

Categories of recipients

The operator of the Website will disclose your personal data to the following categories of recipients only to a limited extent: 

  • Data processors who provide us with IT services and for that purpose require access to personal data, including webhosts and email service providers. The legal basis for this is the processing on our behalf (Article 28 GDPR).
  • Employees and other members of staff who need access to your personal data in connection with their work for us.
  • Postal services and electronic communication service providers that we use in order to communicate with you. The legal basis is set out under “Contact via email, phone or mail”.
  • MuMAC sponsors (on request).

Third countries

We will not normally transfer your personal data to countries outside the European Economic Area. 

In individual cases, we will need to transfer data to third countries (e.g., if you live outside the EEA or if you email account is hosted by a non-EEA service provider). We will only do so in accordance with Article 49 GDPR. As stated above, we also use Google Analytics, who may store data outside of the EAA. You may exercise choices regarding the use of cookies from Google Analytics by visiting https://tools.google.com/dlpage/gaoptout

Your Rights

Right of Access

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data as well as (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (e) the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the personal data are not collected from the data subject, any available information as to their source; (h) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you..

Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you as well as – taking into account the purposes of the processing –the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure

You also have the right to obtain from us the erasure of personal data concerning you without undue delay, provided that (a) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) you withdraw your consent on which the processing is based according where there is no other legal ground for the processing; (c) you object to the processing for legitimate interests (see below) and there are no overriding legitimate grounds for the processing, or (d) the personal data have been unlawfully processed.

Right to restriction of processing

You have the right to obtain from the controller restriction of processing where (a) you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;(b) the processing is unlawful and the you oppose the erasure of the personal data and request the restriction of their use instead; (c) we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; (d) you have objected to processing for legitimate interests to pending the verification whether our legitimate grounds for the processing override yours.

Withdrawal of your consent

Where you have provided us with optional information, where you subscribed to receive MuMAC communications or where we have asked you for your consent in any other form, you have the right to withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

Right to object against processing based on legitimate interest 

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is based on legitimate interests. We may, however, continue to process your personal data if  we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims

Right to object against direct marketing 

You also have the right to object to processing for direct marketing purposes at any time.

Right to lodge a complaint

If you have any questions or grievances regarding the processing of your personal data, you can contact us at any time. You are also entitled to lodge a formal complaint with the competent data protection supervisory authority.