Data Protection Notice

1. Scope of application

This data protection notice is intended to inform you about how your personal data is processed and what your rights and entitlements are under the provisions of data protection law.

2. Identity of the data controller

VDE Verband der Elektrotechnik Elektronik Informationstechnik e. V.
Represented by the members of the Management Board
Stresemannallee 15
60596 Frankfurt am Main

Tel. +49 69 6308-0
service@vde.com

(hereinafter referred to as “VDE”) is the data controller for all personal data which are processed in the context of our relationship, such as participation in an event, membership or work as an expert unless this data protection information contains information to the contrary.

3. Data Protection Officer

You can contact our Data Protection Officer at:

Data Protection Officer
VDE Verband der Elektrotechnik Elektronik Informationstechnik e. V.
Stresemannallee 15
60596 Frankfurt am Main
Germany

Phone +49 69 6308-0
datenschutz@vde.com

4. Personal data

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes their name, e-mail address or phone number. However, purely technical data that can be ascribed to a person is also to be considered personal data.

Among other things, we process the following types of personal data in the normal course of proceedings:

Information for personal identification, e.g. first name and last name, academic title, job title;
Participation in events;
Industry/employers/companies/organizations;
Photos/videos;

5. Cookies

Cookies are saved on your computer when you use our website. Cookies are small text files that are assigned to the browser you use and stored on your hard drive and that allow the party placing the cookie (in this case, us) to receive certain information. Cookies cannot run programs or transfer viruses to your computer. They are used to make our internet services more user-friendly and effective as a whole.

We use the following cookies:

If you have an account with us, we use cookies to identify you for subsequent visits, as otherwise you would have to log in each time.

We also use HTML5 storage objects that are stored on your device. These objects store the required data independently of your browser and do not have an automatic expiration date. You can prevent the use of HTML5 storage objects by using private mode in your browser.

We also recommend that you regularly delete your cookies and browsing history manually.

6. Overview of individual procedures/legal bases

We process your personal data using the procedures described below for these defined purposes:

6.1 Processing for invitations to VDE events

We process data for invitations to events arranged by VDE and the departments (ITG, GMM etc.), training courses, exchange meetings and delegate conferences in order to inform you about these events in accordance with the purpose of VDE as set out in its articles of association.

Legal basis:

The legal basis for the above data processing is Art. 6 (1) f) GDPR. This statutory authority allows for the processing of personal data as part of the controller's "legitimate interest", provided that their fundamental rights, fundamental freedoms or interests are not overriding. We have a legitimate interest in providing information about our events.

6.2 Processing for performance of events

We process data from members, experts and other third parties in order to perform VDE events to which you have signed up.

Legal basis:

We process this data in accordance with Art. 6 (1) b) GDPR. Under this legal basis, data processing is lawful if it is necessary for the performance of a contract to which the data subject is party. Data is processed in order to perform a contract in relation to the event.

6.3 Surveys

We process your data to conduct member satisfaction surveys in order to adapt our services to the needs of our members.

Legal basis:

We process this member data in accordance with Art. 6 (1) b) and f) GDPR. Data processing is lawful if it is necessary for the performance of a contract to which the data subject is party; or the controller has a legitimate interest (in this case, the member satisfaction surveys to fulfil the purposes of the articles of association), without violating the interests or basic rights of the data subject.

7. Image, sound and media recordings

VDE is entitled, but not obliged, to take photographs, record films or make other media recordings at its events or to arrange for this to be done.

These recordings are made for publication for presentation and information purposes, including on our website, in VDE publications, on social media and in the press.

Participants who do not wish to be photographed or otherwise recorded are requested to inform the seminar leader or event staff accordingly.

Legal basis:

Photographs, videos and media recordings are processed on the basis of Art. 6 (1) f) GDPR. Under this legal basis, processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We have a legitimate interest in our public relations activities and in presenting the events and activities of VDE e.V. in order to provide interesting insights into the activities of VDE e.V. as one of Europe’s largest technology and science associations.

Extensive information in accordance with Art. 13 GDPR can be found in the notes that are available at the participant reception desk.

8. Recipients of personal data

As a matter of principle, your personal data is processed by us. VDE transmits data to third parties (in particular, to international standards organisations) only when there is a corresponding legal basis; in particular, this is the case if consent has been given to such transmission, if this is required in order to perform a contract, if this is justified by the balance of interests – particularly within the VDE Group – or if this is necessary in order to comply with statutory requirements obliging us to provide, report or pass on data.
Some of the software applications we use for data processing are hosted by VDE Services GmbH, Frankfurt am Main, Germany. VDE Services GmbH acts solely and exclusively on our behalf and in accordance with our instructions. VDE Services GmbH is regularly checked by us. VDE Services GmbH is a subsidiary of VDE e.V.
Various VDE events are performed by EW Medien und Kongresse GmbH, Kaiserleistr. 8A, 63067 Offenbach am Main, Germany. EW Medien und Kongresse GmbH acts solely and exclusively on our behalf and in accordance with our instructions. EW Medien und Kongresse GmbH is regularly checked by us.

We also commission external service providers that act on VDE’s behalf and in accordance with VDE’s instructions.

Within VDE, the internal offices and departments only receive the personal data that is necessary and required to perform the respective tasks.

9. Processing of your data in a third country

Data is transmitted to parties in countries outside the European Union (EU) or the European Economic Area (EEA) (“third countries") when there is a corresponding legal basis, e.g. if consent has been given, if this is required in order to perform a contract or if this is required by law.

Personal data can be transmitted to (standards) organisations in third countries outside the EU/EEA that do not have an adequate level of data protection approved by the EU Commission if you have provided your express consent.

Your data may also be processed in a third country as a result of the involvement of service providers in processing.

If there is no adequacy decision by the European Commission concerning an adequate level of data protection for the respective country, we conclude corresponding contracts in order to ensure that your rights and freedoms are adequately protected and guaranteed in line with EU data protection regulations. Corresponding information, documentation and a copy can be made available on request from VDE.

10. Data security

The personal data processed by us is treated confidentially and suitable technical and organisational precautions are used to protect it from loss and changes as well as unauthorised access by third parties.

11. Your rights

In accordance with the statutory requirements, you have the right to request access to your personal data and data processing (Article 15 GDPR), correction, deletion and restriction of your personal data and data processing (Articles 16 through 18 GDPR) and transmission of your personal data (Article 20 GDPR).

In accordance with the statutory requirements pursuant to Article 21 GDPR, you also have a right to object to data processing. In accordance with the statutory requirements, you can withdraw the consent you have given in full or in part at any time with future effect.

In order to exercise any of these rights, it is sufficient to send an e-mail to: datenschutz@vde.com or a letter to:

Data Protection Officer
VDE Verband der Elektrotechnik Elektronik Informationstechnik e.V.
Stresemannallee 15
60596 Frankfurt am Main
Germany

In accordance with Art. 77 Para. 1 GDPR, you also have the right to file a complaint with the supervisory authority if you are of the opinion that your personal data is not being processed in a lawful manner, in particular in case of a suspected breach of the GDPR.

Address of supervisory authority:

The Data Protection Officer for Hesse
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Phone +49 611 1408-0
poststelle@datenschutz.hessen.de

12. Duration of data storage

We store the personal data collected in accordance with the procedures described above for a period of at least six years and up to ten years in accordance with the provisions of German commercial and tax law.

Various data, such as names in standardisation meeting reports or at delegate conferences, is permanently archived for documentation purposes.

13. Voluntary nature of provision of data

The provision of personal data is not required by law. Furthermore, you are not obliged to provide us with this data. However, the collection of certain personal data is necessary because, for example,

participation in events, applications,
the fulfilment of the membership contract
or the performance of standardisation and committee work with VDE
are not possible without this data.