← Back to application page DE

Data Protection Information

I. Name and contact details of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Based GmbH
Badstr. 14
90762 Fürth
Germany
E-mail: datenschutz@based.de

II. General information on data processing

1. Scope of the processing of personal data

As a matter of principle, we only process personal data of our users to the extent necessary to provide a functional website as well as our content and services.

2. Legal basis

In the case of the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

III. Provision of the Website and Server Log Files

1. Scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

The data is also stored in the log files of our system. This data is not stored together with other personal data of the visitor.

2. Legal basis

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the visitor's computer. For this purpose, the visitor's IP address must be stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

IV. Cookies

Our website only uses technically necessary cookies that are necessary for the proper operation of the site. The legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25 (2) TDDDG is Art. 6 (1) (f) GDPR. Our legitimate interest lies in ensuring the proper technical operation and functionality of the website.

Cookies that are not technically necessary – in particular for analysis or marketing purposes – are not used on this website.

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or limit the storage of cookies. Cookies that have already been stored can be deleted at any time.

V. Registration in the influencer pool

1. Scope of data processing

On our website, interested parties have the opportunity to register for our influencer pool. For this purpose, the following personal data is collected via the registration form and transmitted to us:

The provision of free texts and other social media channels is voluntary. Registration is also possible without this information.

The transmitted data is stored in our database. We view and evaluate the incoming registration data as part of our activities.

2. Legal basis

The processing of personal data collected during registration is carried out on the basis of Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest consists in the compilation and maintenance of an influencer pool for the purpose of referring suitable influencers to Cyber Security Messe Nürnberg.

Insofar as further communication with you (cf. Section VI) is aimed at concluding a contractual agreement on an influencer activity, Art. 6 (1) (b) GDPR (pre-contractual measures) also serves as a legal basis.

3. Purpose of data processing

The data collected will be processed exclusively for the following purposes:

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. This is especially the case if the influencer pool is dissolved or you object to the storage of your data. In all other respects, the data will be stored for the duration of the active placement activity. After completion or final failure of a brokerage, the data will be deleted, provided that there are no statutory retention obligations to the contrary.

5. Right to object and right to rectification or erasure

You have the right to have the data stored about you rectified or erased at any time, and the right to object to its processing. Please send your request by e-mail to: datenschutz@based.de.

VI. E-mail communication

1. Scope of data processing

We use the e-mail address provided during registration to contact you in preparation for a possible placement. This includes, in particular, contacting you to coordinate an influencer activity for specific events and transmitting relevant information to prepare for a collaboration.

2. Legal basis

Insofar as e-mail communication is aimed at concluding a contractual agreement on an influencer activity, the processing is carried out on the basis of Art. 6 (1) (b) GDPR (pre-contractual measures).

In all other respects – in particular in the case of general contact and the transmission of information without a direct connection to the conclusion of the contract – the processing is carried out on the basis of Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in processing the registration and communicating with us.

3. Purpose of data processing

The processing of personal data serves us solely to process the contact. The purpose is to prepare and carry out the influencer placement for specific events.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected, e.g. when communication has ended. This is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified and that there are no further bases for storage.

5. Right to object

The user has the right to object to the processing of their personal data at any time. In such a case, communication cannot be continued. Please send objections by e-mail to: datenschutz@based.de.

VII. Disclosure of personal data to third parties – NürnbergMesse GmbH

1. Scope of disclosure

As part of our brokerage activities, we may pass on the registration data (first name, last name, e-mail address, country, social media channels and, if applicable, free text information and the choice of format) to our client, NürnbergMesse GmbH.

Recipients:

NürnbergMesse GmbH
Exhibition Centre 1
90471 Nuremberg
Germany

2. Legal basis

The data is passed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the provision of our brokerage service: As the operator of the influencer pool, we put together suitable influencers for it-sa Expo&Congress and place them with the organising trade fair. The disclosure is absolutely necessary for the fulfilment of this mediation purpose. Insofar as the disclosure is aimed at concluding or fulfilling a contractual agreement on an influencer activity, Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) serves as a legal basis.

3. Purpose of Sharing

NürnbergMesse GmbH receives the data passed on exclusively for the preparation and implementation of the it-sa Expo&Congress, in particular for the purpose of contacting the selected influencers and preparing for a cooperation.

4. Duration of storage by the recipient

Once the data has been passed on, NürnbergMesse GmbH processes it in its own responsibility under data protection law. We recommend that you consult the data protection information of NürnbergMesse GmbH: https://www.itsa365.de/de-de/datenschutz.

On our part, the data will be deleted after completion of the mediation process, provided that there are no statutory retention obligations to the contrary.

5. Right to object

To the extent that the disclosure is based on Article 6(1)(f) of the GDPR, you have the right to object at any time to the disclosure of your data to NürnbergMesse GmbH (see Section VIII, Right to Object under Article 21 of the GDPR). In the event of an objection, your data will not be disclosed to NürnbergMesse GmbH. Please send any objections by email to: datenschutz@based.de.

VIII. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller: