The following applies to our entire privacy policy: If a term that refers to groups of people is used only in the masculine form, this has no gender-specific meaning, but serves solely to make it easier to read.

We run our Bits & Pretzels trade fair according to the principles set out below.

We are committed to complying with the legal provisions on data protection and always endeavour to consider the principles of data avoidance and minimization.

‍

1. Name and address of the person responsible and the data protection officer‍

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

Startup Events GmbH
Rumfordstrasse 15
80469 Munich
Germany

Email: privacy@bitsandpretzels.com
Website: https://bitsandpretzels.com

‍

2. Contact details of the data protection officer

You can contact the data protection officer of the controller as follows:

SiDIT GmbH
Langgasse 20
97261 Güntersleben
Email: info@sidit.de

‍

3. Collection and storage of personal data as well as their type and purpose of use

a) Ordering a ticket

When establishing the contractual relationship, only the personal data that is necessary for the execution of the contract is processed by Art. 6 Para. 1 Clause 1 Letter b of GDPR (such as company name, title, first name, last name of the named contact person, position, address, if different: billing address, a valid email address, telephone number, bank details if applicable). Any additional personal data, including uploaded profile pictures, are processed based on legitimate interest, provided that you provide further information here, Art. 6 Para. 1 Clause 1 Letter f) of GDPR.

In connection with the purchase of tickets, you grant us the right to use the profile pictures you provide for promotional purposes. This includes using your profile picture in marketing campaigns, social media posts, and other promotional materials to promote our services. You agree that this use is free of charge and does not result in additional rights or compensation. We use the service provider Vivenu GmbH (Kesselstraße 3, 40221 Düsseldorf) to order tickets and process payments via the website. We have concluded a contract for order processing with this service provider.

For more information about Vivenu GmbH’s data protection, please see the following link: https://vivenu.com/de/dataprivacy

If you want to pay for the ticket by invoice, the payment will be processed directly by us. The data you provide for the payment process will be processed by us to fulfill our contractual obligations, so the data processing is based on Art. 6 Paragraph 1 Clause 1 Letter b) of GDPR.

‍

b) Trade fair participation

aa) Scanning the name tag as part of the trade fair participation

(1) When you enter the event, we will scan your name tag. Your full name, company name, job title, email, country, and time of the scan will be processed. This data will be used to fulfill the contract, namely to check your eligibility to participate. The processing is based on Art. 6 Para. 1 Clause 1 Letter b of GDPR.

(2) When visiting the individual rooms and lectures as part of the event, your name tag can be scanned based on your consent. You will be reminded again at the respective entry points that the scan is voluntary. If you give your consent to scanning by providing your name tag, your data will be passed on to the sponsors and operators of the stages and stands for marketing and advertising purposes, Art. 6 Para.1 Clause 1 Letter a of GDPR, a list of which can be found here: https://www.bitsandpretzels.com/festival/partners

You can revoke your consent at any time with effect for the future. We would like to inform you that the revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

‍

bb) Notification of your name

Bits & Pretzels is a networking event. The purpose is to get to know other people, investors, and other network partners. This is only possible if your name and contact details are made available to other participants. This happens in various ways, including via our website, our app, and as part of the virtual event.

The processing of this data is necessary to protect the legitimate interests of us or a third party and outweighs the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, Art. 6 Para. 1 Clause 1 Letter f of GDPR.

Our legitimate interest here is to give you an opportunity to get in touch with others. This is also in your interest, as companies can contact you in this way, which strengthens the networking character of the event. Our interest in offering sponsors, operators and you an optimal environment for networking outweighs your interest in not disclosing your data.

‍

cc) Photographs

As part of the event, we will take photos and videos. These are recordings for the presentation, promotion, and representation of the event. These recordings will be published on the website and on social media portals. These recordings are created and published based on the contract fulfillment for our customers by Art. 6 Para. 1 Clause 1 Letter b GDPR and based on our legitimate interest by Art. 6 Para. 1 Clause 1 Letter f GDPR for the other persons concerned.

As far as individual or close-up photos are concerned, these images are created and published based on your consent, Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. You can revoke your consent at any time for the future. We would like to inform you that the revocation of the consent does not affect the legality of the processing carried out based on the consent up to the time of revocation.

‍

dd) Participation in the “Table Captain” event

As part of events during the Bits & Pretzels trade fair, so-called “Table Captain” events are also offered for networking purposes.

The Table Captain is a well-known expert from the startup ecosystem and is the “host” of a table at which up to eight participants can usually sit. Participants have the opportunity to reserve a seat at a table that particularly interests them.

To enable participants to network with each other, it is possible to see not only the respective table captain but also the other people who will be at the respective table.

Your name and the company name you provide will be shared with the other guests at the table. The processing of this data is necessary to protect our legitimate interests and outweighs the interests or fundamental rights and freedoms of the guests which require the protection of personal data, Art. 6 Para. 1 Clause 1 Letter f) GDPR.

Our interest here is once again to offer participants the best possible networking event for startups. For optimal networking among participants, it is necessary that they also know the other people sitting at the table. Our interest in a successful networking event is also in the interest of those affected within the meaning of the GDPR, who also have an interest in networking as comprehensively and efficiently as possible. Ultimately, our interest outweighs the interest of participants who do not want to disclose their data.

The table reservation itself is made via the HelloSpaces platform (Hello Spaces GmbH is a subsidiary of efec AG, based in D-35578 Wetzlar. You can find out more about data protection by efec AG at the following link https://efec.de/datenschutzerklaerung/ ), which also informs you about the occupancy of the respective table. The data is also passed on to HelloSpaces for the above-mentioned legitimate interest since without these reservations it is not possible to ensure that participants get the seat at the table for which they have registered, Art. 6 Para. 1 Clause 1 Letter f) GDPR.

‍

ee) Participation in the “Pitch Award”

The privacy policy for the European Pitch Award can be found here.

‍

4. Further data processing

We process your contact data to fulfill contractual obligations and/or carry out pre-contractual measures (Art. 6 Para. 1 Clause 1 lit. b) GDPR) that are carried out based on your ticket order and trade fair participation, i.e. in particular

- for the performance of the contract;
- to correspond with you;
- for invoicing;
- for the processing of warranty claims;
- to handle any liability claims that may arise and to assert any claims against you.

If you have given us your consent to process personal data, the respective consent is the legal basis for the processing mentioned (Art. 6 Para. 1 Clause 1 Letter a) GDPR). This applies in particular to:

- the collection and storage of further personal data
- Promotional approaches by telephone or email
- Customer account
- Newsletter delivery
- Photo and video recordings (single/close-up shots)
- Transfer of your data to third parties

We may also use your data based on a balance of interests to protect the legitimate interests (Art. 6 Para. 1 Clause 1 Letter f GDPR) of us or of third parties. This is done, for example, for the following purposes:

- For customer advice and support and sales
- general business management and further development of services and products
- Advertising, market and opinion research
- Photo and video recordings at the event

Since we are subject to various legal obligations, such as statutory commercial retention and documentation obligations (from the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO), we can also use your data based on legal requirements (Art. 6 Para. 1 Clause 1 Letter c) GDPR).

‍

5. Disclosure of personal data

The passing on of personal data also constitutes processing within the meaning of the previous section 5. However, we would like to inform you separately at this point about the issue of passing on data to third parties. The protection of your data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

Your data will generally be transferred to third parties for the following purposes.

- Processors with whom we have agreed pursuant to Art. 28 GDPR
- Shipping (e.g. shipping service provider)
- Payment (e.g. payment service provider)
- Accounting (e.g. tax advisor)
- Legal disputes (e.g. lawyer)
- Communication platform (e.g. email, WhatsApp, other messenger services)
- Authorities, if applicable

Data will therefore only be passed on to third parties if there is a legal basis for the processing. For example, we pass on personal data to people or companies who work for us as processors by Art. 28 GDPR. A processor is anyone who processes personal data on our behalf - in particular in a relationship of instruction and control with us.

By the requirements of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus provide your data with comprehensive protection.

‍

6. Storage period and deletion

We will delete your data if it is no longer necessary for the purposes for which it was collected or otherwise processed if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

‍

7. Rights of data subjects

You have the right:

- to withdraw your consent at any time by Art. 7 Paragraph 3 GDPR. This means that we will no longer process the data based on this consent. may no longer be continued in the future;

- to request information about your data processed by us by Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;

- to request the immediate correction of inaccurate or incomplete personal data stored by us by Art. 16 GDPR;

- to request the deletion of your data stored by us by Art. 17 GDPR, provided that they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

- to request the restriction of the processing of your data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

- pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party and

- to complain to a supervisory authority by Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or place of work.

‍

8. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation. If you would like to exercise your right of objection, simply send an email to privacy@bitsandpretzels.com

‍

Status: 14.09.2023