Privacy Policy for Users of Exactag Webinars
This data protection information relates to the processing of personal data belonging to users (data subjects, hereafter “you” or “your”) participating in webinars (“Webinars”) offered by Exactag GmbH (“Exactag”, “we” or “us”) in accordance with the General Data Protection Regulation (“GDPR”) and the new German Federal Data Protection Law (“New BDSG”).
1. Scope, controller and definitions
1.1. Scope
This data protection information applies to the processing of your personal data in the context of your participation in Webinars. This data protection information is available under the following link: https://exactag.com/privacy-policy-webinar.
1.2. Controller of your personal data
The controller in charge of the processing of your personal data is:
Exactag GmbH
Theodorstraße 178
40472 Düsseldorf
1.3. Definitions
This data protection information is based on the following legal terms found in data protection legislation that we have defined below for better understanding:
- New BDSG is the new German Federal Data Protection Act [“DSAnpUG-EU” – Datenschutz-Anpassungs- und -Umsetzungsgesetz EU: Act to Amend the Data Protection Act and Implement EU Law] which implements the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Regulation (EU) 2016/680). It came into force on the same date as the GDPR and specifies the requirements of the GDPR in some areas.
- The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Recipient means a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of this data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
- Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. Exactag is the controller of the data processing described in this data protection information (see Section 1.2. hereof).
- Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing could involve the collection and use of your data in preparation of and during your participation in the Webinars.
2. Purposes, legal basis and data categories when processing your personal data
2.1. Data categories.
In relation to the Webinars, we collect the following personal data:
- Email address
- First and last name
- Company name
- Job title
- Login and usage (Registration date/time, number of sessions registered, web browser, operation system)
2.2. Purpose of data processing.
We process the data for the following purposes:
- Facilitating participation in the Webinars
- Protection against misuse, e.g. artificial or unauthorized access
- Improvement of our offer
- Statistics / statistical purposes
2.3. Legal basis of data processing.
We process and store the data on the basis of Art. (6)(1)(1) lit. a) GDPR.
3. Storage and deletion of your personal data
3.1. Standard retention period.
As standard, we will store your personal data in preparation of and during your participation of the Webinars and delete your personal data if we don’t need it anymore to provide our products and services.
3.2. Mandatory retention period.
Notwithstanding anything in Section 3.1. hereunder, we store your data according to mandatory legal retention periods, e.g. for 6 years according to Sect. 147 Fiscal Code of Germany (AO). Please note: The periods aforementioned are legally mandated retention periods. If these change due to legislative change or as a result of case law, we shall be entitled to adapt these retention periods accordingly.
4. Categories of recipients of personal data
4.1. CRM software provider, hosting provider.
We transfer your personal data to our hosting provider and CRM software provider, e.g. Gainsight Inc. or HubSpot, Inc.
4.2. Legal requirements.
Moreover, we disclose your personal data to the extent required that we are legally required to disclose such data. This disclosure is undertaken on the basis of Art. 6(1)(1) lit. c) GDPR (e.g., to the police as part of a criminal investigation).
5. Transfer of data to third countries.
Only if we use our CRM-Software provider Gainsight Inc. and/or HubSpot, Inc. (aforementioned under Section 4.1. hereof) your personal data may be transferred to the US. If your personal data is transferred to the US, such transfer is based on the adequacy decision of the European Commission as of 10 July 2023 in relation to the EU-US Data Privacy Transfer Framework.
6. Your rights
6.1. Rights according to Art. 15 et seq. GDPR.
Under the terms of the GDPR, you have the right to demand, at any time, that we
- Inform you of the personal data relating to you that we are processing (Art. 15 GDPR)
- Rectify personal data relating to you that is inaccurate (Art. 16 GDPR) and/or
- Erase your personal data (Art. 17 GDPR), restrict it (Art. 18 GDPR) and/or release it (Art. 20 GDPR).
Please address your request to: Please activate JS to see this email
If you assert your rights towards us, we will process your personal data collected in this context to the extent needed to address your request. In this case, your personal data is processed to meet a legal obligation on the basis of Art. 6(1)(1) lit. c) GDPR.
6.2. Right to complain.
Notwithstanding your rights under this Section 6.1, you have the right to lodge a complaint with a supervisory authority for data protection if you are of the opinion that the processing of your personal data by Exactag breaches the terms of the GDPR.
7. Miscellaneous
We reserve the right to supplement and amend the contents of this data protection information. The updated data protection information applies from the date on which it is published by us.
8. Contact details of the data protection officer
Please address any questions relating to data protection to: Ms Rechtsanwältin Verena Limbacher, Im Großen Winkel 28C, 40489 Düsseldorf
Email: Please activate JS to see this email
Date: May 2024
