Logging and creation of log files
A variety of technical data is logged when you access www.futuresax.de . This general data and information is stored on our server in log files. The log file records your IP address, user agent and domain, the name of the accessed file, the date and time of access, the volume of data transferred and the successful access. Personal data is processed for the purpose of providing the website, to rectify errors and to investigate misuse or fraud on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 point f) GDPR. The log files are erased after seven days.
Cookies are used on our website in connection with the following services:
- Google Analytics, Google Ireland Limited – web analytics
We use Google Analytics, a web analytics service by Google Ireland Limited (“Google”), based on your consent according to Art. 6 para. 1 point a) GDPR. For this purpose, a data processing agreement was concluded with Google pursuant to Art. 28 GDPR. Moreover, where data is transferred to the parent company Google LLC – domiciled in the USA – we conclude standard data protection clauses according to Art. 46 para. 2 point c) GDPR to ensure that appropriate safeguards for the protection of personal data are provided in the meaning of Art. 46 para. 1 GDPR. Your declaration of consent expressly includes a possible worldwide transfer and processing of data by other group companies within Google LLC. We would like to expressly point out the possible risks in this respect, for example the more difficult exercise of data protection rights by data subjects.
The cookies set by Google Analytics are used to process usage data (e.g. Internet pages visited, access times) and communication data (e.g. IP addresses, device information) on our behalf in order to evaluate the use of our online service, compile reports on the activities within our online service and provide other services associated with the use of our online service. This may also involve the creation of pseudonymised user profiles.
- Google Maps, Google Ireland Limited – map presentation
We use Google Maps, an online map provider by Google Ireland Limited (“Google”), to show you concise information concerning our location and any route information based on your consent according to Art. 6 para. 1 point a) GDPR. Your declaration of consent expressly includes a possible worldwide transfer and processing of data by other group companies within Google LLC. We would like to expressly point out possible risks in this respect, for example the more difficult exercise of data protection rights by data subjects.
Integration and use of the map contents may enable Google to process both usage data (e.g. access times, any addresses entered for route planning) and communication data (e.g. IP addresses). We have no influence over any further processing of personal data by Google. The cookies that are set to guarantee the Google Maps functions are erased at the end of the session.
Apart from this, only cookies that are necessary for technical reasons are used, in this case on the basis of our legitimate interest according to Art. 6 para. 1 point f) GDPR. In this regard, the legitimate interests of futureSAX GmbH are to guarantee ease of use (e.g. to prevent rebroadcast of the introductory video) and to ensure that the website is made available in accordance with data protection regulations (e.g. storage of personal regarding the cookie banner), as well as unrestricted technical functionality of the website, especially the login area (e.g. TYPO3-specific cookies). These cookies are stored for no longer than twelve months.
- Newsletter2Go, Newsletter2Go GmbH – email circulation
We have included a form field by our service provider Newsletter2Go in order to provide our newsletter service. This form field is used to register an email addresses on our website on the basis of our legitimate interest in accordance with Art. 6 para. 1 point f) GDPR. For this purpose, a data processing agreement was concluded with the newsletter service provider Newsletter2Go pursuant to Art. 28 GDPR.
Registration for our newsletter is always based on your consent according to Art. 6 para. 1 point a) GDPR. We only require your email address in order to send you our newsletter. You will receive from us a suitable confirmation email to ensure the correctness of your information and to verify your consent. Based on current case law, we log your email address, your IP address as well as the date and time of registration and confirmation during the process of newsletter registration.
Where you participate in our events or competitions or otherwise join our network and provide us with your email address, we will use it to send you information on other events and our activities on the basis of our legitimate interest in accordance with Art. 6 para. 1 letter f) GDPR. Our interest in this regard is to remain in contact with you as a member of our network and to build on our shared network activities.
Naturally, you may withdraw your consent at any time with effect for the future or object to the processing of data on the basis of our legitimate interest. To do so, kindly select the unsubscribe link that you will find at the end of each email message from us. The personal data concerning you will then be erased and you will no longer receive any email messages from us.
- YouTube, Google Ireland Limited – presentation of video content
We integrate the video platform YouTube by Google Ireland Limited (“Google”) to show a concise presentation of our activities and contents based on your consent according to Art. 6 para. 1 point f) GDPR.
The user’s IP address and other browser-based information are transferred to Google by providing the video content. The videos are embedded in privacy-enhanced mode, which means that no other personal data is processed. Additional information is not transferred to Google until the video is selected for viewing. This is necessary to show the video contents. Google will assign this information to your personal user account if you are signed into YouTube at this time.
Our website includes a contact form that is used to make contact with us electronically. When using the contact form, we process the personal data provided by you to deal with your request, in particular your name, email address and your request, as well as the IP address and the time of use to prevent and investigate cases of misuse. This personal data is processed on the basis of our legitimate interest according to Art. 6 para. 1 point f) GDPR.
We treat the personal data provided by you confidentially. It is only used to process your request and will not be transferred to third parties, except where this is necessary in individual cases due to the nature of your request. The personal data is erased once we have completed the processing of your request or in the event that you submit an objection. The logged IP address and the time of contact are erased after seven days. These erasure times only apply insofar as other statutory storage periods do not conflict with this erasure.
Our website allows you to register for My futureSAX in order to unlock special functions of our network. This takes place on the basis of your consent in accordance with Art. 6 para. 1 letter a) GDPR. We require your complete name and address in this regard. We need your email address to send a confirmation email to verify and confirm your registration. By confirming your registration, you consent to the processing of your personal data for the purpose of sending you emails and for performing network activities in our system. Your personal data will not be used for other purposes or associated with other data. You may change your personal data at any time in the profile settings tab on our website.
Based on current case law, our registration involves logging your email address, your IP address as well as the date and time of registration and confirmation, as well as the text of the respective confirmation email. Your personal data is only transferred to third parties where this is necessary for the purposes of performance, for compliance with a legal obligation or if you have provided your prior consent.
Naturally, you may withdraw your consent at any time with effect for the future by selecting the “Request Erasure” button. All data stored concerning you will then be erased without delay. Please be aware in this case that you will no longer be able to use the My futureSAX account and associated options.
Registration for events
Among other things, this website allows you to register for our events. Processing of your personal data, in particular your full name, email address and place of residence, takes place in order to prepare and host the events, as well as for the duration of the particular events, on the basis of Art. 6 para. 1 point b) GDPR.
You join our network by registering for events. For this purpose, we process your personal data in our system and store information on participation in the event on the basis of our legitimate interest in accordance with Art. 6 para. 1 point f) GDPR. Our interest in this regard is to remain in contact with you as a member of our network and to build up our shared network activities. You may object at any time to the processing of your personal data for purposes beyond your participation in the event. The personal data stored concerning you will then be erased insofar as it is no longer required for organisation of the event or its erasure does not conflict with statutory storage obligations.
Organisation of online events using GoToWebinar, Hopin an Microsoft Teams
We use GoToWebinar, Hopin and Microsoft Teams (“online platforms”) to organise online events like video conferences and webinars (in the following: “online events”). GoToWebinar is a service provided by LogMeIn Ireland Ltd., domiciled in Ireland, and its parent company LogMeIn Inc. with domicile in the United States. Hopin is an online live event platform by Hopin Ltd. with domicile in the United Kingdom, which we use with the support of our service provider smartEvents GmbH. Microsoft Teams is a service provided by the Microsoft Corporation ,which is based in the United States of America.
The individual providers are the data processing controllers insofar as you access the websites provided by the online platforms. Various categories of personal data are processed when you use online platforms for our online events. The scope also depends on which data you provide prior to or during your participation in an online event. The categories of personal data may be: user details (first name, surname, telephone, email address, etc.), meeting meta-data (e.g. topic, description, participant IP addresses, device/hardware information, access times) and content data (e.g. text, audio and video data). You also have the option of using the chat function during the online events. In this respect, the text entries you make are processed in order to show them during the online events and to log them if necessary.
We process your personal for performance of the contract according to Art. 6 para. 1 s. 1 point b) GDPR. Insofar as a contractual relationship does not exist, we process your data on the basis of our legitimate interest according to Art. 6 para. 1 s. 1 point f) GDPR. Our legitimate interest is in an efficient organisation of our online events. We will log the chat contents where it is necessary for the purpose of recording the results of an online event. The personal data processed by us will be erased as soon as it is no longer necessary for the purpose for which it was processed, unless otherwise stipulated by statutory storage periods.
As a rule, personal data that is processed in connection with participation in online events will not be transferred to third parties, except where it is intended for transfer. The online platform providers necessarily acquire knowledge of the aforementioned data insofar as this is set out in our data processing agreements. We have concluded with these providers data processing agreements that comply with the requirements of Art. 28 GDPR. Where data is transferred to third countries, these agreements include in particular the standard data protection clauses as defined in Art. 46 para. 2 point c) GDPR.
Our website allows you to enter certain competitions. For this purpose, we process your full name, address, telephone number and email address for the preparation, organisation and for the duration of the relevant competitions on the basis of Art. 6 para. 1 point b) GDPR.
We create a profile at the start of your registration which you may use to continue your entry at a later date. This profile will be erased six months after the final data for entries insofar as you do not submit your entry. Where you do send in your entry, you will automatically join our network and, if necessary, receive relevant email notifications that suit your target group on the basis of our legitimate interest in accordance with Art. 6 para. 1 point f) GDPR. Our interest in this regard is to remain in contact with you as a member of our network and to build up our shared network activities. You may object at any time to the processing of your personal data for purposes beyond your participation in the competition. The personal data stored concerning you will then be erased insofar as it is no longer required for organisation of the competition or its erasure does not conflict with statutory storage obligations.
Our website will occasionally give you the opportunity to participate in votes. As a rule, we will only process your email address for this purpose in order to carry out the corresponding vote and the associated award of prizes on the basis of our legitimate interest according to Art. 6 para. 1 point f) GDPR. Our legitimate interest is to prevent multiple voting. Your data will be erased as soon as the vote is over and the data is no longer required. We do not associate this personal data with other data sources. The data is not transferred to third parties. There are no intentions to transfer the data to third countries or international organisations.
Use of service providers to offer this website
We use service providers to make this website available. They either process personal data on behalf of futureSAX GmbH, or it cannot be excluded that they gain access to personal data. For this purpose, a data processing agreement has been concluded with all of these service providers pursuant to Art. 28 GDPR. Besides the services providers mentioned above, they are Hetzner Online GmbH (hosting) and Netresearch DTT GmbH (support).
Rights of the data subject and contact to the data protection officer
Data subjects may at any time request access to their personal data and, where appropriate, rectification, erasure or restriction of processing, or may object to processing. They also have the right to data portability. Furthermore, consent may be withdrawn at any time with effect for the future if data processing is carried out on the basis of this consent. Should you wish to exercise your rights, please contact the Dresdner Institut für Datenschutz at datenschutz[at]futuresax.de (refer to www.dids.de for additional contact details). Moreover, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority if you suspect that personal data is being processed unlawfully