Privacy Policy

The purpose of this privacy policy is to inform visitors to our website and our customers about how personal data (data) is processed.

I. Who is responsible for processing the data and who can I contact?

Responsible body for the processing of data on this website:

Conexio-PSE GmbH
Kiehnlestraße 16
75172 Pforzheim
Germany
Tel.: +49 7231 58598-182
Email: info(at)conexio-pse.de

If you have any questions about data protection, please contact our data protection officer:
VdE Service GmbH
Mr. Sandro Berger
Eduard-Pfeiffer-Straße 48
70192 Stuttgart
Germany
Tel.: +49 711 22333-26
Email: datenschutzbeauftragter(at)conexio-pse.de

II. What data do we process?

1. Data transfer via the internet

When you visit this website, we will process your IP address, the date and time of your visit, information about the browser used including language settings and operating system, the address of the website from which you came to our website (referrer URL) as well as information about the files you accessed. Your browser automatically transfers this data to your internet provider, and your internet provider transfers it to us.

Why do we process this data?

We process this data so that you can load our website, to allow us to check and, if necessary, restore system security and stability, as well as for the purpose of obtaining statistics (see below). We are not able to assign this data to a particular person. The legal basis for this processing operation is Article 6 para 1(f) of the General Data Protection Regulation (GDPR). We have a legitimate interest in ensuring that our website is properly displayed on your screen, and in being able to identify and rectify the cause of any faults.

How long is this data stored for? Do I have to provide this data?

The data is stored in log files and automatically anonymized after 7 days.
There is neither a legal nor a contractual obligation for you to provide this data, nor is it required in order to conclude a contract with us. However, for technical reasons it would not be possible to visit our website without these data being processed.

2. Storage of cookies

We use cookies on our website. Cookies are small files that contain an ID number. Cookies are stored on your computer or mobile device when you access our website. When you access our website again, the ID number allows your computer or mobile end device to be recognized.

Why are cookies used?

Thanks to session cookies, you do not have to re-submit data on our website, even if you have visited other websites in the meantime. The purpose of these session cookies is to make using our website easier. Session cookies are used solely to improve user-friendliness. We also employ persistent cookies in order to collect statistical data on the use of our website, and to evaluate this for the purposes of optimizing our services (see II.3.). In particular, the cookies listed below are used for the following purposes:

PDF downloads – improving user-friendliness
Cockpit login – handling the login process

The legal basis is Article 6 para 1(f) GDPR. We have an interest in enabling the user-friendly use of our website and in optimizing our website.

How long is this data stored for?

Session cookies will be erased after you close your browser. Our persistent cookies are retained for the following duration:

PDF downloads: 30 days
Cockpit login: expires after one hour of inactivity, or on closing the browser

Do I have to provide this data?

You can visit our website without cookies. There is no obligation to use cookies. Most internet browsers accept cookies automatically. You can set your browser so that it does not accept cookies. You have to change the settings on each browser and each end device that you use separately.

3. Registering using your Facebook account (Facebook Connect)

If you have a Facebook account, you can register with the ticket shop on our website by clicking on the “Sign in with Facebook” button. You will then be transferred to Facebook, where you can register by entering your Facebook login data. We only use your Facebook user name, first name and last name for registration in our ticket shop. To find out how Facebook processes your data and your rights in this context, please refer to the Facebook Data Policy. We do not have any influence over how Facebook processes your data. Conversely, it is possible that data may be transferred to Facebook from our website. If you do not agree to this type of data transfer between Facebook and us, please do not use your Facebook account to register with us. The legal basis for data transfer to and from Facebook is your consent (Article 6 para 1(a) GDPR).
This data is provided voluntarily. Registration using Facebook is not necessary for the conclusion of a contract with us.

4. Registering using your LinkedIn account

If you have a LinkedIn account, you can register with the ticket shop on our website by clicking on the “Sign in with LinkedIn” button. You will then be transferred to LinkedIn, where you can register by entering your LinkedIn login data. We only use your LinkedIn user name, first name, last name and email address for registration in our ticket shop. To find out how LinkedIn processes your data and your rights in this context, please refer to the LinkedIn Privacy Policy. We do not have any influence over how LinkedIn processes your data. Conversely, it is possible that data may be transferred to LinkedIn from our website. If you do not agree to this type of data transfer between LinkedIn and us, please do not use your LinkedIn account to register with us. The legal basis for data transfer to and from LinkedIn is your consent (Article 6 para 1(a) GDPR).
This data is provided voluntarily. Registration using LinkedIn is not necessary for the conclusion of a contract with us.

5. Registering using your XING account

If you have a XING account, you can register with the ticket shop on our website by clicking on the “Sign in with XING” button. You will then be transferred to XING, where you can register by entering your XING login data. We only use your XING user name, first name, last name and email address for registration in our ticket shop. To find out how XING processes your data and your rights in this context, please refer to the XING Privacy Policy. We do not have any influence over how XING processes your data. Conversely, it is possible that data may be transferred to XING from our website. If you do not agree to this type of data transfer between XING and us, please do not use your XING account to register with us. The legal basis for data transfer to and from XING is your consent (Article 6 para 1(a) GDPR).
This data is provided voluntarily. Registration using XING is not necessary for the conclusion of a contract with us.

6. Purchasing conference tickets, particularly via the ticket shop

If you purchase tickets for events via our ticket shop or on the door, we will process the data you have provided as part of the transaction.

Why do we process your data?

a) Contract performance
We process your data for the purposes of contract performance or in order to take steps prior to entering into a contract before a conference or other event. In particular, we process your email address in order to be able to send you order confirmations and online tickets, and so that we can inform you of any changes concerning the conference. We will process your (company) name and your postal address for the purposes of dispatching tickets, if applicable, invoicing and accurately assigning your order to your company. In addition, we will process your data when you enter the conference grounds in order to check whether you have a valid ticket for the relevant exhibition. The legal basis for the data which you have entered into the required fields is Article 6 para 1(b), and for the data you have provided on a voluntary basis is our legitimate interest in getting to know our customers better according to Article 6 para 1(f) GDPR.

b) Advertising & Customer Satisfaction
We will use your data to send you advertising for services comparable to the ones you ordered from us by post or by email, provided you have been our customer in the previous three years and have given us your postal address or your email address. You have the right to withdraw your consent at any time if you do not wish to receive information about our services (see V.). The legal basis is Article 6 para 1(f) GDPR. We have a legitimate interest in sending out direct marketing.
Furthermore, we process your data in order to conduct market and opinion research for our own purposes. The legal basis is Article 6 para 1(f) GDPR. We have a legitimate interest in optimizing our services and adapting them to better suit your needs.
If you have booked and attended an event, we would ask you after this event about your satisfaction with this event. To do this we will send you an e-mail to the e-mail address provided at the time of booking, containing a link to a survey via the platform Survey Monkey of SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland.
As part of the customer satisfaction survey using Survey Monkey software, please also refer to Survey Monkey's privacy policy, available at https://www.surveymonkey.com/mp/legal/privacy-policy/.
If you do not wish to be asked, in particular by e-mail, about customer satisfaction of the exhibitions / conferences you have booked and visited, you can object to this use of your data at any time (see V.). The legal basis is Article 6 (1) (f) GDPR. We have a legitimate interest in optimizing our services and adapting them to your needs.

How long is the data stored for?

We are permitted to hold your data for as long as is necessary for the performance of a contract. We are allowed to store much of your data at least until a contract has been performed, and subsequently within the statutory limitation period of 3 years. We are allowed to hold data until the maximum limitation period expires in order to assert or defend legal claims, if necessary. If we are obliged to store certain data, we are authorized to hold this data until the end of the retention period laid down in Section 257 of the German Commercial Code and Section 147 of the German Tax Code. The legal basis is Article 6 para. 1 (c) GDPR in conjunction with these laws. These retention periods can be up to 10 years.

Do I have to provide this data?

Our events constitute voluntary services. However, in order to register, we require your email address, your company name and your invoice address as a minimum, as we would otherwise be unable to send you participation certificates and invoices. Further information is not required for participating in events. You are providing your name on a voluntary basis for the purpose of allowing us to address you personally.

7. Registering for webinars and downloading documents

When you register for a webinar or download a white paper or a market study, we will process the data you enter for the purposes of contract performance and taking steps prior to entering into a contract. This means, in particular, that we process your email address in order to be able to send you a participation certificate or a download link. We will process your (company) name and your postal address for the purposes of invoicing and accurately assigning your order to your company. The legal basis for the data which you have entered into the required fields is Article 6 para 1(b), and for the data you have provided on a voluntary basis is our legitimate interest in getting to know our customers better according to Article 6 para 1(f) GDPR.
In addition, we use your data in order to send you email advertising and – if you have provided your postal address – to send you advertising by post (see also II.7. above and see V. below regarding your right to object).
Our webinars and download services are provided on a voluntary basis. However, in order to register, we require your first name, last name, email address, your company name and your invoice address, as we would otherwise be unable to send you participation certificates and invoices. Further information is not required for participating in events. For information about the retention period, see II.7. above.

8. Purchasing online event tickets

If you purchase tickets for our online events in our ticketshops, we will process the data you have provided as part of the transaction.

Why do we process your data?

a) Contract performance
If you register for an online event, we process your data for the purposes of contract performance or in order to take steps prior to entering into a contract before the online event. In particular, we process your email address in order to be able to send you order confirmations, participation or download links. We will process your (company) name and your postal address for the purposes of if applicable, invoicing and accurately assigning your order to your company. The legal basis for the data which you have entered into the required fields is Article 6 para 1(b), and for the data you have provided on a voluntary basis is our legitimate interest in getting to know our customers better according to Article 6 para 1(f) GDPR.

In order to facilitate networking for the purposes of contract performance, we may provide your last name, first name and (where applicable) your email address and/or date of online access when you enter ‘contact rooms’ such as networking, exhibition, poster, break and other areas to other participants, exhibitors and hosts of other virtual rooms at the online event.

For the execution of online events in Hopin we process at least the data marked as mandatory fields during the event registration (first name, last name, email address) for the registration process to the event platform Hopin Ltd. (Hopin Ltd of Seedcamp Office, 5 Bonhill Street, Shoreditch, London, England, EC2A 4BX, https://www.hopin.to) , to give you access to the online event. For this purpose, we transmit the above mentioned data to the platform Hopin Ltd. The legal basis for this is Article 6 para 1(b) GDPR. We also have a legitimate interest in the transmission of the aforementioned data. This legitimate interest is for enabling access to the event on the Hopin platform using the technical possibilities available. The legal basis for this is Article 6 para 1(f) GDPR.

For the execution of online events in Scoocs we process at least the data marked as mandatory fields during the event registration (first name, last name, email address) for the registration process to the event platform Scoocs (Scoocs OÜ, Sepapaja 6, Tallinn 15551, Estonia, https://scoocs.co/), to give you access to the online event. For this purpose, we transmit the above mentioned data to the platform Scoocs. The legal basis for this is Article 6 para 1(b) GDPR. We also have a legitimate interest in the transmission of the aforementioned data. This legitimate interest is for enabling access to the event on the Scoocs platform using the technical possibilities available. The legal basis for this is Article 6 para 1(f) GDPR.

b) Advertising & Customer Satisfaction
In addition, we use your data in order to send you email advertising and – if you have provided your postal address – to send you advertising by post (see also II.7. above and see V. below regarding your right to object).

How long is the data stored for?

We are permitted to hold your data for as long as is necessary for the performance of a contract. We are allowed to store much of your data at least until a contract has been performed, and subsequently within the statutory limitation period of 3 years. We are allowed to hold data until the maximum limitation period expires in order to assert or defend legal claims, if necessary. If we are obliged to store certain data, we are authorized to hold this data until the end of the retention period laid down in Section 257 of the German Commercial Code and Section 147 of the German Tax Code. The legal basis is Article 6 para. 1 (c) GDPR in conjunction with these laws. These retention periods can be up to 10 years.

Do I have to provide this data?

Our events constitute voluntary services. However, in order to register, we require your first name, last name, email address, your company name and your invoice address, as we would otherwise be unable to send you participation certificates and invoices. Further information is not required for participating in events.

9. Newsletters

If you have subscribed to a newsletter, we will process the data you provided when subscribing to the newsletter.

Why do we process your data?

We process your email address and your postal address for the purpose of regularly sending you our newsletter. Once you have subscribed to the email newsletter, we will send you an email with a confirmation link in order to verify your email address. The legal basis is the consent you gave to us when subscribing to the newsletter (Article 6 para 1(a) GDPR).

How can I unsubscribe from the newsletter? How long is the data stored for?

If you no longer wish to receive the newsletter, you can withdraw your consent to receiving the newsletter at any time without stating any reasons by sending an email to info(at)conexio-pse.de (for more information about the right to withdraw your consent, see V.).
The data which you provided when subscribing to the newsletter will be deleted without delay once you have withdrawn your consent or unsubscribed from the newsletter. If you are also our customer, partner or employee, this data may be retained for a longer period for other purposes, provided it is needed to perform a contract or employment contract, or is subject to statutory retention obligations.

Do I have to provide this data?

Our newsletter service is provided on a voluntary basis. However, we require your email address in order to send you our email newsletter, and to send you our newsletter by post we need your postal address. Further information is not required for receiving the newsletter. You are providing your name on a voluntary basis for the purpose of allowing us to address you personally. If you have subscribed to an email newsletter, providing your postal address is voluntary and serves the purpose of allowing us to inform you about events near you.

10. Contact form

We process the data you have provided in our contact form or sent to us by email in order to be able to process and answer your query.

Why do we process this data?

Under Article 6 para 1(a) GDPR, we are allowed to process data that you enter into our contact form provided you have given your consent to such processing by clicking the “submit” button. If you enter any sensitive information containing special categories of data (e.g. racial or ethnic origin, political opinion, religion or beliefs, trade union membership, genetic or health status or sexual orientation) into the “message” field, you are giving your consent for this data to be processed. If you transmit this data to us by email, the legal basis is Article 6 para 1(f) GDPR. If you are also our customer, Article 6 para 1(b) GDPR also applies as a legal basis.

How long is the data stored for? Do I have to provide this data?

The data will be erased no later than 3 months after we receive your query, unless we are entitled or obliged to store the data for a longer period under statutory provisions in conjunction with Article 6 para. 1 (c) GDPR. If you are also our customer, the retention periods under II.7. apply.
There is no obligation for you to provide this data, nor is it necessary for the conclusion of a contract with us. Use of the contact form requires an email address to be entered, however, because otherwise we will not be able to respond. If you enter any additional data, you do so on a voluntary basis.

11. Marketing via mail

To inform potential customers about our exhibitions and conferences, we send marketing material via mail, including to people who have not yet had any contact with us.
To do so, we process the following data: first name, surname, address
We also use data from publicly accessible sources.
The legal basis is Article 6 para 1(f) GDPR. We have a legitimate interest in sending out direct marketing. This overrides the interest of data subjects in the protection of their data, as the data is publicly available and therefore not subject to high standards of protection.
You have the right to withdraw your consent at any time if you do not wish to receive information about our services (see V.).
Your data will then no longer be used to send you marketing material.

III. What is the source of my data?

Generally speaking, we obtain your data from you. In some cases, data may originate from one of the following sources:

Publicly available commercial registers or registers of associations (company name, addresses)
Credit reference agencies (names and addresses) and address brokers (addresses), if we are unable to reach you at your address.
Facebook Inc., 4 Grand Canal Square, Dublin 2, Ireland, based on your consent given when registering using your Facebook account (Facebook user name, first name, last name, email address, profile picture, gender, link to your Facebook profile, time zone, language settings)
LinkedIn Corp., 2029 Stierlin Court, Mountain View, CA 94043, USA based on your consent given when registering using your LinkedIn account (first name, last name, email address, profile picture, link to your LinkedIn profile, header of your LinkedIn profile, city of residence, place of residence, information given under “Skills & Endorsements”, “industry”, summary, number of contacts, most recently shared article)
New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany based on your consent given when registering using your Xing account (first name, last name, company, city, country, email address)

IV. Will my data be transferred to third parties?

We transfer some of the above-mentioned data to the following data processors for the following purposes:

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (Registration)
Univents GmbH, Veilchenweg 38, 71672 Marbach am Neckar, Germany (Registration)
mpc networks GmbH, Max-Planck-Str. 22, 70806 Kornwestheim, Germany (Hosting)
SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (Customer satisfaction surveys)
LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Irland (Webinars)
Hopin Ltd of Seedcamp Office, 5 Bonhill Street, Shoreditch, London, England, EC2A 4BX (for accessing certain web events)
Scoocs OÜ, Sepapaja 6, Tallinn 15551, Estonia (for accessing certain web events)
Solar Promotion GmbH, Kiehnlestraße 16, 75172 Pforzheim, Germany
RealtimeBoard Inc. dba Miro, 201 Spear Street Suite 1100 San Francisco, CA 94105
Zoom Video Communications, Inc; 55 Almaden Blvd, Suite 600; San Jose, CA 95113, USA
Where necessary, other data processors operating in the fields of hosting, IT services, personnel services, printing services and the destruction of data carriers

Data processors will only process data under our instruction; they will not do so for their own purposes.
In certain cases, some of your data may be transferred to the following recipients for the purposes described below, either if you have given your consent to this (Article 6 para 1(a) GDPR, if we have a legal obligation to do so (Article 6 para. 1 (c) GDPR, or if it is necessary in order to safeguard our legitimate interests (Article 6 para 1(f) GDPR):

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (Registration)
Univents GmbH, Veilchenweg 38, 71672 Marbach am Neckar, Germany (Registration)
Facebook Inc., 4 Grand Canal Square, Dublin 2, Ireland and USA (based on your consent given when registering using your Facebook account)
LinkedIn Corp., 2029 Stierlin Court, Mountain View, CA 94043, USA (based on your consent given when registering using your LinkedIn account)
Postal and telecommunications companies (dispatch and communication)
Prosecuting authorities, courts for the assertion or defense of legal claims, auditors, lawyers or tax consultants, insurance companies for processing claims

Where the processors or other recipients are located outside the EU or the European Economic Area, an adequate level of data protection shall be established by concluding standard contractual clauses adopted by the European Commission with the respective contractual partner.

V. What rights do I have with respect to my data?

Under the provisions of Article 15 GDPR, you have the right to request information on whether we process your personal data and on which data we process. You have the right to request the rectification and completion of incomplete personal data pursuant to Article 16 GDPR. Under the provisions of Article 17 GDPR, you have the right to have your data deleted, or under the provisions of Article 18 GDPR, to have it made unavailable. Pursuant to Article 21 GDPR, you have the right to receive any data transmitted to us on the basis of consent or a contract, provided that the data is processed by automated means. If you wish, and if this is technically possible, we will transfer this data to a third party. In certain circumstances, your rights may be limited, or excluded, by law.
If we process data to safeguard our own interests exclusively on the basis of Article 6 para 1(f) GDPR, you have the right to object to your data being processed for reasons arising from your particular situation. Should you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing thereof, grounds which override your interests, rights and freedoms, or unless such processing serves for the enforcement of legal claims.
Furthermore, you may withdraw your consent to the use of your data for advertising purposes at any time without incurring any costs other than the cost of transmitting the notification at the basic rate. You have the right to object to being sent advertising emails at any time free of charge, for example by clicking on the unsubscribe button at the end of such an email. You also have the option to object by writing an email to info(at)conexio-pse.de.
If you have given your consent to data processing, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the legality of processing until such withdrawal is received. You can object by writing an email to info(at)conexio-pse.de. Once your objection has been received, your data will no longer be processed. This shall not apply if we have the legal right or obligation to do so.
You have the right to lodge complaints in connection with data protection to a data protection authority, in particular to: Landesbeauftragter für Datenschutz und Informationsfreiheit, Königstraße 10a, D-70173 Stuttgart.

Date: January 2023