PHOTO REFERENCES

Photo references and information according to art. 13 GDPR

The protection of your personal data is very important to us. We therefore process your personal data (in short "data") solely on the basis of legal provisions. At the "Zukunft Personal" exhibitions and complementary events, we will be taking photos and video recordings on which you may be seen directly or as part of a group. These photo references are intended to provide you with comprehensive information on the processing of your picture data and your data protection claims and rights within the meaning of article 13 of the GDPR.

1. Who is responsible for data processing and who can you contact?

The data controller responsible for data collection according to article 4 (7) GDPR is

CloserStill Media Germany GmbH
Theodor-Heuss-Anlage 2
68165 Mannheim
Tel.: +49 621 533 976 00
E-mail: info@messe.org

represented by the CEO: Astrid Jaeger, Michael Westcott

If you have any questions on the processing of your personal data or on the subject of data protection in general, please contact our data protection officer at the above address by e-mail to datenschutz@messe.org.

2. What data is processed and where does it come from?

We process picture data in the form of photos and videos that we have taken of you at the above-mentioned events.

3. Why do we process your data and what is the legal basis for doing so?

We process this data in accordance with the provisions of the GDPR and the German Federal Data Protection Act 2018 in the respective current version:

• to protect legitimate interests (art. 6 (1) (f) GDPR): Based on a consideration of both our interests and those of the data subject, we can carry out data processing to protect our legitimate interests.

4. Who receives your data?

If we engage a service provider (e.g. photographer) as a data processor, we are still responsible for the protection of your data. All data processors are contractually obliged to handle your data confidentially and to only process them within the scope of the provision of services. We may publish the photos or videos taken of you in the following media: - Internet (website, Flickr, YouTube and social media sites) - Print products e.g. flyers, exhibition newspaper, exhibition catalogue etc. - Press

5. How long do we keep your data?

We only store your data until it has achieved the purpose for which it was collected or until you revoke your consent to its use. Your data must then be deleted in accordance with GDPR.

6. Are personal data sent to a third country?

We do not send any data to a third country on principle.

7. What are your data protection rights?

You have, at any time, a right to information, rectification, erasure or restriction of the processing of your stored data, a right to object to the processing and a right to data portability and to lodge a complaint in line with the requirements of data protection law.

Right to information: You can ask us whether and to what extent we process your data.

Right to rectification: If we process any data of yours that is incomplete or incorrect, you can ask us to rectify or complete it at any time.

Right to erasure: You can ask us to erase your data if we process any of it unlawfully or the processing excessively interferes with the protection of your vital interests. Please note that there may be grounds to prevent immediate erasure e.g. in the case of retention requirements regulated by law. Independent of the exercise of your right to erasure, we shall immediately and completely erase your data as long as there is no transactional or legal retention requirement that would prevent it.

Right to restriction of processing: You can ask us to restrict the processing of your data if

• you contest the accuracy of the data for a period that enables us to verify the accuracy of the data.
• the processing of the data is unlawful, but you oppose the erasure and request the restriction of the data use instead,
• we no longer need the data for the intended purpose but you still need this data for the establishment, exercise or defence of legal claims, or
• you have objected to the processing of the data.

Right to data portability: You can ask us to provide the data that you have made available to us in a structured, commonly used and machine-readable format and to transmit these data to another controller without hindrance from ourselves, if

• we are processing these data on the basis of a revocable consent issued by you or to fulfil a contract between us, and
• this processing is carried out by automated means. Where technically feasible, you can ask us to directly transmit your data to another controller.

Right to object: If we process your data on legitimate grounds, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We would then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims. You can object to the processing of your data for direct marketing purposes at any time without having to give any reasons.

Right of lodge a complaint: If you believe that we are contravening German or European data protection law in processing your data, we ask you to contact us so that we can clarify any questions. You naturally have the right to contact the supervisory authority responsible for you, the relevant state office for data protection supervision.

If you would like to assert any of the rights mentioned against us, please contact our data protection officer. In case of doubt, we are allowed to request additional information to confirm your identity.