Privacy Policy – Wakeboard Event
PRIVACY POLICY – PARTICIPATION IN THE WAKEBOARD EVENT by KERSY STRAUSS
1. Person responsible
The responsible party within the meaning of Art. 4 No. 7 GDPR is
THE KERSY COMPANY GmbH & Co. KG
Lindenallee 21
63619 Bad Orb
(hereinafter: “KERSY”)
Phone: 060529180030
Email: info@kersystrauss.com
2. Processing of personal data in the context of participation in the wakeboard event
When participating in the wakeboard event, the following personal data (hereinafter "data") is collected as mandatory information (hereinafter "mandatory information"): from the participant: first and last name, address; in the event that the participant is not of legal age from the parent/ guardian : first and last name, address. If additional information is provided outside of the mandatory information marked as such, this is done voluntarily (hereinafter "voluntary information").
3. Purpose of processing and legal basis
The legal basis for the processing of the mandatory information is the implementation of participation in the wakeboard event and thus the preparation and implementation of the contractual relationship with KERSY, Art. 6 (1) (b) GDPR.
The legal basis for processing the voluntary information is your consent (Art. 6 (1) (a) GDPR). If you voluntarily provide us with special personal data within the meaning of Art. 9 (1) GDPR, the legal basis for this is your consent in accordance with Art. 9 (2) (a) GDPR.
4. Recipients or categories of recipients of the data
The recipients of your data are the respective staff members who are responsible for your participation in the wakeboard event.
We will pass on at least some of your data, which we collect in accordance with the aforementioned sections, to processors. These processors process your data only on our instructions and not for their own purposes (Art. 28, 29 GDPR). These processors are the following processors or the following categories of processors: media agency (support with organizational matters as well as with the planning and implementation of KERSY events), IT service providers (provision of the website, IT support). Registrations are processed by our partner pretix, a product of rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, with whom we have also concluded a data processing agreement. pretix's privacy policy can be found at https://pretix.eu/about/de/privacy available.
In certain cases, we will share some of your data with other recipients. This may be the case if you have consented (Art. 6 (1) (a) GDPR), we are legally obliged to do so (Art. 6 (1) (c) GDPR), or this is necessary to protect legitimate interests (Art. 6 (1) (f) GDPR). These recipients receive data for the purposes stated below: public authorities (e.g., social security institutions, tax authorities, or law enforcement authorities) and courts (e.g., to enforce or defend legal claims).
5. Image recordings
Type of data: In the case of any image recordings (photo/video; video possibly including sound), the following characteristics are recorded which enable a personal reference to be made: image of the data subject (i.e. appearance/image in photo and/or video), in the case of sound recordings, voice if applicable, location of the recording (hereinafter "data").
Purpose of processing and legal basis: The data will be processed for the purpose of internal and external reporting on the Student Talk. The recordings will be shared online on our internal employee platform BIRD as well as on our external communication channels (in particular, social media channels such as LinkedIn, Instagram, Facebook, TikTok, and YouTube, as well as the company websites of THE KERSY COMPANY GmbH & Co. KG). The legal basis for the processing is our legitimate interest in this reporting (Art. 6 (1) (f) GDPR).
If the recordings are individual or small group recordings, the legal basis for publication is your consent (Art. 6 (1) (a) GDPR), which we may obtain separately from you and/or your legal guardians. This consent is of course voluntary, and you can revoke it at any time. If you do not wish to give your consent, this will not have any consequences. We will then no longer show the images on the relevant channels and will delete them from them. Please note, however, that the images can be accessed by all users of the channels until your consent is revoked, so further use or forwarding cannot be completely ruled out even after deletion. The revocation only takes effect for the future. Processing that took place before the revocation is not affected by the revocation.
Disclosure of data to third parties: The data will be shared or displayed via the above-mentioned channels – subject to the conditions stated under section 3.b. – and can therefore be viewed by THE KERY COMPANY GmbH & Co. KG and via the Internet worldwide by any user who has access to the corresponding channels.
6. Storage of data
The data will be stored for a specific purpose, subject to revocation of consent.
7. Your data subject rights
Under the statutory requirements, you are entitled to the following rights as a data subject:
· Right to information
Under the conditions of Art. 15 GDPR, you can request information from us as to whether we process your data. If this is the case, you have the right to receive information about this data.
· Right to rectification
In the event that your data stored by us is incorrect or incomplete, you can request that this data be corrected and, if necessary, completed (Art. 16 GDPR).
· Right to erasure or restriction of processing
If the legal requirements are met, you can request the deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) of your data.
· Right to data portability
For automated data that we have received from you based on your consent or a contract, you can assert your right to data portability (Article 20 GDPR). We will then send you your data in a machine-readable format. If you wish and this is technically possible, we will transmit this data to a third party.
All of the above rights may be limited or excluded by law in certain cases.
Revocation of consent
If you have given us your consent to process personal data for specific purposes, the legality of the processing is based on your consent. You can revoke your consent. You can send your revocation to info@kersystrauss.com . Please note that the revocation only takes effect for the future. Processing that occurred before the revocation is not affected.
Objection to processing based on a legitimate interest (Art. 21 GDPR)
To the extent that we process your data exclusively on the basis of Art. 6 (1) (f) GDPR, you may object to the processing of your data at any time for reasons arising from your particular situation. If you object, we will no longer process this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to enforce legal claims.
You can send your objection to info@kersystrauss.com.
Right to lodge a complaint with a supervisory authority
Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. In particular, you can lodge a complaint with the supervisory authority responsible for us or another competent supervisory authority. A list of data protection supervisory authorities and their contact details can be found at the following link: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html . The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.