1. Information Obligations pursuant to Articles 13 and 14 of the EU GDPR: Event Management

1.1 Who is responsible for data processing?

The respective company of the SÜLZLE Group* hereby informs you about the processing of personal data in connection with the invitation to and organization of events held by the company.
Contact details of the Data Protection Officer:
Steffen Wacker
datenschutz@suelzle-gruppe.de
Contact details of the Data Protection Officer for Société Nouvelle SOTRALENTZ CONSTRUCTION S.A.S:
ACTECIL
dpo_sotralentz-construction@actecil.fr
The companies of the SÜLZLE Group are listed here.

1.2 Scope and types of processed data

Processing of personal data particularly includes first name, last name, company name, position, email address, telephone number, etc., as well as photographs of event participants that may be collected, stored, organized, read, modified, transmitted, or deleted by the company from registered participants.
According to Article 4(1) GDPR, personal data means any information relating to an identified or identifiable natural person.

1.3 Methods of data processing

The processing of personal data by the controller is carried out both in paper form and electronically, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion, or destruction.

1.4 Legal basis and purpose of data processing

The processing of personal data is generally based—unless special legal provisions apply—on Article 6 GDPR. The following legal bases may apply in particular:

1.4.1 Performance of a contract and/or pre-contractual obligations, in particular:

  • Management of contractual and pre-contractual relationships

  • Execution of the contract/event
    Legal basis: Article 6(1)(b) GDPR

1.4.2 Compliance with legal obligations of the controller, such as:

  • Fulfilling obligations arising from laws, regulations, or legal provisions at national or EU level or imposed by competent authorities
    Legal basis: Article 6(1)(c) GDPR

1.4.3 Pursuit of legitimate interests of the controller, in particular:

  • Processing and transmission of personal data for internal administrative purposes within the company

  • Use of address and contact details for promoting (future) company events

  • Promotion and reporting of company events using photos or videos of participants (which may include you) for public relations purposes; such materials may be published on our website, event pages, social media channels (especially Facebook, LinkedIn, and Xing), intranet, event applications, and, where applicable, in print media

The creation and publication of such visual materials are based on the company’s legitimate interest in documentational and promotional coverage, provided that the rights and freedoms of the data subject do not override these interests.
Our legitimate interests include protecting our rights, ensuring operational security, promoting business partnerships, and supporting the company’s commercial activities.
Legal basis: Article 6(1)(f) GDPR

1.4.4 Processing based on consent

Processing may also occur based on your consent, which can be withdrawn at any time.
If you provide personal data of other persons (e.g., a spouse or guest), you are responsible for obtaining their consent as required by applicable law.
Providing personal information is voluntary. However, please note that incomplete or missing information may prevent participation in the event.
Legal basis: Article 6(1)(a) GDPR

1.5 Data storage period

The data processed by the controller will be deleted or restricted in accordance with Articles 17 and 18 GDPR. Data stored by us will be deleted as soon as they are no longer required for the aforementioned purposes and there are no statutory retention obligations that prevent deletion.

1.6 Obligation to provide data and consequences of refusal

Providing mandatory information marked as required for event participation is necessary. Refusal to provide such data may affect your ability to be invited to or participate in the event.

1.7 Access to data

Your data may be accessible for the purposes described above to:

  • Employees of the controller in their roles as responsible parties and/or internal processors

  • Companies performing outsourced tasks on behalf of the controller, such as data processors

1.8 Disclosure or transfer of data

Your personal data will not be shared without your explicit prior consent, except as legally permitted or required.
Where external service providers are engaged for performance of our services, any data transfer is justified because we have carefully selected such third-party providers and service contractors as processors in accordance with Article 28(1) GDPR, regularly reviewed them, and contractually required them to process personal data exclusively under our instructions.
Alternatively, if purposes and means of processing are determined jointly, they are considered joint controllers under Article 26(1) GDPR.

1.9 Location of data processing

Your personal data are not transferred to or processed in countries outside the European Union.

1.10 Your rights as a data subject

To exercise the rights listed below, please contact us using the contact details provided.
You have the right at any time to request information about your personal data processed by us in accordance with Article 15 GDPR.
You have the right to immediate rectification of inaccurate personal data concerning you.
You have the right to request deletion of your personal data in accordance with the conditions of Article 17 GDPR, particularly if the data are no longer necessary for their original purpose, processing was unlawful, you have objected, or there is a legal obligation to erase under Union or Member State law.
You may request restriction of processing under Article 18 GDPR, for example, if the accuracy of your data is contested, processing is unlawful, or data are needed for legal claims.
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format in accordance with Article 20 GDPR.
You also have the right to contact us, our Data Protection Officer, or a supervisory authority with complaints about our data processing.

1.11 Right to object

You have the right, for reasons relating to your particular situation, to object at any time to the processing of your personal data carried out under Article 6(1)(e) or (f) GDPR.
We will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.