General data protection instructions by Article 13 for Bits&Pretzels HealthTech Conference

The following applies to our entire data protection declaration: If a term that refers to groups of people is only used in the masculine form, this has no gender-specific meaning, but is only intended to make it easier to read.

We stock our Bits&Pretzels HealthTech Conference according to the principles set out below:

We undertake to comply with the legal provisions on data protection and strive to always take into account the principles of data avoidance and data minimization.

1.     Name and address of the person responsible and the data protection officer


The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

Startup Events GmbH

Rumfordstrasse 15

80469 Munich





2.    Contact details of the data protection officer


You can reach the data protection officer of the person responsible as follows:

SiDIT GmbH, Langgasse 20, 97261 Güntersleben, 

3.     Collection and storage of personal data and their type and purpose of use


a)    ordering a ticket

As part of the establishment of the contractual relationship, according to Art. 6 Para. 1 S. 1 lit. b GDPR only processes the personal data that is absolutely necessary for the execution of the contract (such as company name, title, first name, last name of the named contact person, position, address, if different: billing address, a valid e-mail address, telephone number, bank details if necessary). Any personal data going beyond this will be processed on the basis of a legitimate interest, insofar as you provide further information here, Art. 6 Para. 1 S. 1 lit. f) GDPR. We use the service provider vivenu GmbH (Kesselstraße 3, 40221 Düsseldorf) to order tickets and process payments via the website . We have concluded an order processing contract with them. You can find out more about data protection at vivenu GmbH from the following link:



b)    trade fair participation


aa) Scanning the name badge as part of the event participation

(1) When you enter the event, your name tag will be scanned by us. Your full name, company name, job title, e-mail, country and time of the scan will be recorded processed. This data is used to fulfill the contract, namely to check eligibility to participate. The processing is based on Art . 6 Para. 1 S. 1 lit. b GDPR.


(2) If you visit the individual premises and lectures during the event, your name badge can be scanned with your consent. At the respective admission points, you will be informed once again that the scan is voluntary. If you give your consent to scanning by providing your name tag, your data will be passed on to the sponsors and operators of the stages and stands for marketing and advertising purposes, Art. 6 Para.1 S.1 lit.a DSGVO . You can revoke your consent at any time with effect for the future. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation.


bb) message of your name

Bits & Pretzels Health Tech is a networking event. The purpose is to get to know other people, investors and other network partners. This is only possible if your name and contact details are also made available to other participants. This is done in a variety of ways, including through our website, our app and as part of the virtual event.


the protection of personal data, Art. 6 Para. 1 S. 1 lit. f GDPR.


Our legitimate interest in this case is to give you the opportunity to get in touch with others. This is also in your interest, as you can be contacted by companies in this way, which strengthens the networking character of the event. Our interest in offering sponsors, operators and you an optimal environment for networking outweighs your interest in not disclosing your data.


cc) photo shoots


We will take photos and videos during the event. These are recordings for the presentation, application and presentation of the event. These recordings will be published accordingly both on the website and on social media portals. This creation and publication of the recordings is based on our legitimate interest according to Art. 6 Para. 1 S. 1 lit. f GDPR.

As far as individual or close-ups are concerned, these recordings are created and published on the basis of your consent, Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time for the future. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation.


4.     Further data processing


We process your personal contact data to fulfill contractual obligations and/or carry out pre-contractual measures (Art. 6 Para. 1 S. 1 lit. b ) GDPR) which are based on your ticket order and participation in the trade fair, i.e. in particular

·      to fulfill the contract;

·      to correspond with you;

·      for invoicing;

·      to process warranty claims;

·      to process any existing liability claims and to assert any claims against you.


If you have given us your consent to the processing of personal data, the respective consent is the legal basis for the processing mentioned (Art. 6 Para. 1 S. 1 lit. a) DSGVO). This concerns in particular:

·      the collection and storage of other personal data

·      Promotional speeches by telephone or e-mail

·      customer account

·      Newsletter dispatch

·      Photo and video recordings (single/close-ups)

·      Disclosure of your data to third parties


We can also use your data on the basis of a balance of interests to protect our legitimate interests (Article 6 ( 1 ) sentence 1 lit. f GDPR) or that of third parties. This is done, for example, for the following purposes:

·      For customer advice and support and sales

·      general business management and further development of services and products

·      Advertising, market and opinion research

·      Photo and video recordings at the event


Since we are subject to various legal obligations, such as statutory storage and documentation obligations under commercial law (from HGB, StGB or AO), we can also use your data on the basis of legal requirements (Art. 6 Para. 1 S. 1 lit. c ) DSGVO ) . .

5.     Disclosure of Personal Data


The transfer of personal data is also processing within the meaning of the previous paragraph 5. However, we would like to inform you again separately about the topic of transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.


Your personal data is usually transmitted to third parties for the following purposes.

·      Processors with whom we have concluded an agreement in accordance with Art. 28 GDPR

·      Shipping (e.g. shipping service provider)

·      Payment (e.g. payment service provider)

·      Accounting (e.g. tax consultant)

·      Litigation (e.g. attorney)

·      Communication platform (e.g. email, WhatsApp, other messenger services)

·      Possibly authorities


It will therefore only be passed on to third parties if there is a legal basis for processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. Processor is anyone who processes personal data on our behalf - i.e. in particular in an instruction and control relationship with us


In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus to provide your data with comprehensive protection.

6.     Duration of Storage and Deletion


Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation reasons of public interest or to assert, exercise or defend legal claims.

7.     data subject rights


You have the right:


• According to Art. 7 Para. 3 GDPR, to revoke your consent given to us at any time. As a result, we can no longer process the data based on this consent

was based, may no longer be continued for the future;


• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;


• In accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;


• according to Art. 17 GDPR, to request the deletion of your personal data stored by us, insofar as these are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not to exercise the right to freedom of expression and Information required to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;


• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing

is unlawful, but you refuse to delete it and we no longer need the data, but you need them to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;


• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible and


• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work.

8.     Right to object


If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are reasons for this that arise from your particular situation. If you would like to make use of your right of objection, an e-mail to is 



Status: 06/16/2023