Data Protection

Data Protection Declaration according to the DSGVO/GDPR

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

COCS GmbH – Congress Organisation C. Schäfer
Goethestr. 43
80336 Munich
Germany

Phone: +49 (0)89 89 06 77-0
Email: info@cocs.de
Website: www.cocs.de
VAT ID No.: DE 266 58 70 98

II. General Information on Data Processing

1. Scope of Processing of Personal Data

In principle, we only process personal data of our users insofar as this is necessary to provide a functional website, our content and services. The processing of personal data of our users generally takes place only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2. Legal Basis for Processing Personal Data

Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

3. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in Union regulations, laws or other provisions to which the controller is subject.

The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or fulfilment of a contract.

III. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• Date and time of access
• Websites from which the user’s system accessed our website
• Websites accessed by the user’s system via our website

The data is also stored in the log files of our system. This does not include the user’s IP address or other data that enable assignment to a specific user. This data is not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of the data is Article 6(1)(f) GDPR.

3. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

Our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR also lies in these purposes.

4. Duration of Storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.

5. Right to Object and Removal Option

The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, there is no possibility for the user to object.

IV. Use of Cookies

Some pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure.

Cookies are small text files stored on your computer and saved by your browser.

Most of the cookies we use are so-called „session cookies“. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate automatic deletion of cookies when closing the browser.

If cookies are deactivated, the functionality of this website may be restricted.

Cookies required to carry out the electronic communication process or to provide certain functions requested by you are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services.

If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

The basis for data processing is Article 6(1)(f) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

V. Registration

1. Description and Scope of Data Processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input form, transmitted to us and stored.

For confirmation purposes, the entered data will be sent to the specified email address for information and verification after registration.

Data is not transferred to third parties.

At the time of registration, the following data is also stored:

• The user’s IP address
• Date and time of registration

As part of the registration process, the user’s consent to the processing of this data is obtained.

2. Legal Basis for Data Processing

The legal basis for processing the data is Article 6(1)(a) and (b) GDPR.

3. Purpose of Data Processing

Registration of the user is required for the fulfilment of a contract with the user or for carrying out pre-contractual measures.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, taking into account statutory retention obligations.

5. Right to Object and Removal Option

Users may cancel their registration at any time and request changes to their stored data.

If the data is required for the fulfilment of a contract or for carrying out pre-contractual measures, premature deletion is only possible if there are no contractual or legal obligations preventing deletion.