SCC EVENTS GmbH Data Protection Policy
for Guests of VIP events

The following English version is provided solely to aid in understanding. In the event of any conflicts arising about wording, the German original version shall be exclusively binding for all parties involved.

With this notice, we are informing our guests of VIP events about the processing of your personal data by SCC EVENTS GmbH (hereinafter also referred to as “SCC” or “we”) and the rights to which you are entitled under the Data Protection Act.

1. Responsible for data processing and data protection officer

SCC EVENTS GmbH

Olympiapark Berlin, Hanns-Braun-Strasse / Adlerplatz, 14053 Berlin

Managing directors: Christian Jost, Jürgen Lock

e-mail: vip@scc-events.com

Phone: 030 / 30 12 88 - 10

Fax: 030 / 30 12 88 - 20

The data protection officer can be contacted by post at the above address with the keywords “Data Privacy” or by e-mail: datenschutz@scc-events.com.

1. Purposes and legal basis of data processing

For the purpose of organising and holding our VIP events (e.g. brunch, get-together, skater reception), we process personal data of our guests. Registration for the respective event takes place via our online registration form on the website https://login.scc-events.com/s/side-events-registration. Registration can only take place if the invited person uses their registration code provided by us within the registration period. The details of the respective VIP event can be found in the personal invitation. We process the registration data of our VIP guests in compliance with the applicable data protection provisions from the EU Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

The legal basis for the lawful processing of your personal data is derived from:

1. Article 6 (1) lit. b) GDPR:for the fulfilment of pre-contractual measures and / or contractual obligations. The processing is carried out for the purpose of registration and participation in the respective VIP event on the basis of the respective event information (e.g. in the personal invitation). This includes all data required for the organisation and implementation of the event (e.g. name, e-mail address, registration code), including electronic communication (e-mail) confirming or rejecting the registration or containing further information on the event (such as the admission ticket).
2. Article 6 (1) lit. c) to comply with legal obligations such as commercial and tax law retention obligations, corporate, data protection and civil law obligations or regulatory requirements in compliance with the relevant legal regulations.
3. Article 6 (1) lit f) GDPR on the basis of a consideration of interests: e.g. to assert legal claims, to defend ourselves in legal disputes, to guarantee IT and TK security. In addition, SCC EVENTS processes data of its guests at the respective VIP event on the basis of this legal basis for the creation of photo and video recordings. These recordings can be used for media coverage by the press and media, to document advertising measures for sponsors and partners, to document the event and for advertising measures (e.g. publication and PR), also after the end of the respective event. Information on photo and video recordings processed in the course of your participation in the sports event is available at https://www.scc-events.com/en/privacy-information
4. Article 6 (1) lit. a) GDPR with your consent explicitly described in the respective declaration of consent, e.g. to using of your registration data for future invitations by SCC EVENTS.

Insofar as we have been granted consent (also by implied action) to process personal data for specific, previously stated purposes, the lawfulness of this processing is given on the basis of the consent. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.

1. Recipients or categories of recipients of personal data

For the organisation and implementation of the respective VIP event, only those employees/departments within SCC EVENTS will have access to the personal data that require it for the fulfilment of the respective purpose. In order to fulfil our contractual services and legal obligations, your data is partly processed in part by external service providers and partners if this is necessary to fulfil the aforementioned purposes and is permitted by law. In doing so, we always follow the provisions of data protection law, in particular any processing carried out by service providers engaged by us only takes place after the conclusion of contracts with a corresponding confidentiality clause.

1. Duration of data storage

The registration and contact data of our guests as well as the registration codes provided are processed for the duration of the organisation and implementation of the respective VIP event. This data is stored for 4 weeks from the end of the event and then deleted. Registration data of guests who cancel their participation before the start of the event will be deleted immediately. Registration data that has been released for the sending of future invitations by consent of the persons concerned will be stored even after the end of the event until the consent is revoked.

Immediate termination of data processing also takes place in the event of a (permissible) objection by the data subject.

There are various legal retention periods of up to 10 years, due to which we do not delete certain data (e.g. the guest list of the VIP event) after the end of the event, but archive it for this period. The retention period may be extended if processing of personal data is necessary for the assertion, exercise or defence of legal claims. E-mails are archived automatically and in an audit-proof manner by our mail system. The storage period can be up to 10 years. After expiry of the legal retention periods, the data is deleted completely.

Log and protocol data will be deleted as soon as they are no longer needed, at the latest 3 months after retrieval of our online offers (websites, online booking portal). Further information can be found in the data protection declarations of the respective websites. The privacy policy of the online booking portal is available at : https://login.scc-events.com/s/side-events-data-protection.

The storage period for created and published photo and video recordings is described in the privacy policy “Photo and Video”, available at: https://www.scc-events.com/en/privacy-information

We store our responses to the data protection inquiries regarding information, correction, deletion or restriction of processing, as well as other inquiries from data subjects or supervisory authorities regarding data protection issues for the purpose of accountability for three years.

1. Rights of data subjects

All data subjects have the right of access to their personal data referred to in Art. 15 GDPR, the right to obtain rectification of their inaccurately stored data according to Art. 16 GDPR, the right to obtain the erasure of personal data according to Art. 17 GDPR, the right to obtain the restriction of the processing of their data according to Art. 18 GDPR and the right to receive their personal data according to Art. 20 GDPR. Given consent can be revoked at any time. The revocation of consent does not affect the lawfulness of the processing until the revocation.

Right to object:

According to Art. 21 GDPR, data subjects also have the right to object at any time to the processing of personal data concerning them.

1. A) Individual right of objection according to Art. 21, (1) GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6, (1) lit. f) GDPR (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

1. B) Right to object to processing of data for direct marketing purposes pursuant to Art. 21,(2) GDPR

In individual cases, we process your personal data to carry out direct advertising (by post and by e-mail). You have the right to object at any time to the processing of your personal data for the purposes of such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Please send any requests to exercise your rights as a data subject, stating your full name, by post or e-mail to our data protection officer: SCC EVENTS GmbH, Data Protection Officer, Olympiapark Berlin, Hanns-Braun-Strasse / Adlerplatz, 14053 Berlin or datenschutz@scc-events.com

Right of appeal:

If you suspect that we are processing your data unlawfully, you can of course obtain a judicial clarification of the problem at any time. In addition, every other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. The right of appeal according to Art. 77 GDPR is available to you in the EU member state of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the above-mentioned places. The supervisory authority to which the complaint has been submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Note on publication:

In particular photo and video recordings can become the subject of media coverage and thus be published on the internet. We would like to point out that data used for media coverage are only partially the responsibility of SCC EVENTS GmbH. In particular, printed products such as daily newspapers or live broadcasts via radio and television are subject to reporting in the public interest due to the competitive character of this sporting event, which is the occasion for the respective VIP event,  so that the rights of individual affected persons do not fundamentally prevail. Therefore, please contact us directly if you have any questions or requests regarding these topics: Revocation of a consent or objection to data processing in the case of publication of names, images or result lists on the websites and social media appearances of SCC, on video platforms, on websites and social media channels of other operators (sponsors, associations), in the press or in media reports.

In general, when publishing personal data on the Internet (regardless of the platform selected), it cannot be ruled out that the data may also be accessed from countries that do not have an adequate level of data protection. A permitted publication of personal data on the Internet does not constitute a transfer of personal data to a third country in this sense. After the publication of personal data, the data can be accessed worldwide on the Internet. Further distribution or indexing by search engines or copying by third parties is possible. A deletion of these data cannot be guaranteed continuously.

With regard to the safeguarding of personal rights in the collection of photo and video recordings (e.g. in the context of media coverage in the form of pictures and interviews by the press, SCC-EVENTS photographers, sponsors or advertising partners), the guests of our VIP events have the opportunity to inform the respective representatives of the coverage on site if they do not wish to be depicted in the recordings of the event and can also avoid the areas of media attention (e.g. award ceremony, finish line).

1. Transfer of data to a third country or international organisation

We sometimes transfer personal data to third countries or to international organisations. A list of these services and service providers that may be used in connection with booking and participation in the above-mentioned sporting event is provided below in this document.

Third countries are those countries outside the EEA where the GDPR is not directly applicable. The level of data protection is not comparable with that in the EU. To compensate for the existing data protection deficit in the absence of an adequacy decision, we have agreed further suitable guarantees for the processing of personal data with the service providers concerned in the third country or with the international organisation in addition to the standard data protection clauses, so that the data protection standards for these data transfers are compatible with the legal data protection provisions of the EU and adequate protection is ensured when processing personal data.

1. Voluntary nature and obligation to provide personal data

Registration and Participation in the respective VIP event is always voluntary. In the case of registration, the data required for the organisation and realisation of the event and the fulfillment of associated duties must be provided. Failure to provide the data will result in the inability to participate in the event.

If requested information is voluntary, we have marked this information in the respective survey form and in the terms of participation. You can revoke the processing of personal data on the basis of consent at any time for the future.

With regard to the safeguarding of personal rights in the collection of photo and video recordings (e.g. in the context of media coverage in the form of pictures and interviews by the press, SCC-EVENTS photographers, sponsors or advertising partners), the guests of our VIP events have the opportunity to inform the respective representatives of the coverage on site if they do not wish to be depicted in the recordings of the event and can also avoid the areas of media attention (e.g. award ceremony, finish line).

1. Automated decision making, profiling

Automated decision-making in the sense of Art. 22 DSGVO is not carried out.

“Profiling” is a form of automated processing of personal data using the assessment of personal aspects relating to a natural person, in particular for the purpose of analysing or predicting the performance of work, economic situation, health, personal preferences or interests, reliability or conduct, whereabouts or change of location of the data subject, where this produces legal effects concerning the data subject or significantly affects him/her in a similar way. Your data will not be processed by SCC EVENTS GmbH for the purpose of profiling.