Table of Contents
- Privacy Policy for the Facebook Page of
SCC EVENTS GmbH - Privacy Policy for the Instagram Channel of
SCC EVENTS GmbH - Privacy Policy for the X Profile (formerly Twitter) of
SCC EVENTS GmbH - Privacy Policy for the YouTube Channel of
SCC EVENTS GmbH - Privacy Policy for the Vimeo Channel of
SCC EVENTS GmbH - Privacy Policy for the TikTok Channel of
SCC EVENTS GmbH - Privacy Policy for the LinkedIn Page of
SCC EVENTS GmbH - Privacy Policy for the Strava Club of
SCC EVENTS GmbH
Privacy Policy for the Facebook Page of SCC EVENTS GmbH
We expressly point out that you use the Facebook page offered here and its interactive functions (such as commenting, liking, sharing, rating or sending messages) at your own responsibility. When Facebook is used, Meta Platforms Ireland Limited processes extensive personal data of visitors, uses profiling and creates detailed user profiles.
All essential information that we provide via our Facebook channel is also available in the same or a similar form on our official website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Joint Controllers
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the operation of this Facebook page and the evaluation of page statistics (so-called Page Insights), there is joint controllership within the meaning of Art. 26 GDPR.
Controller on the Part of the Company
Responsible for the content and operation of our Facebook presence is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of Facebook (Meta)
Responsible for the provision of the platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., based in the USA.)
Joint Controller Agreement (Page Insights Controller Addendum)
In an agreement with Meta, we have determined in a transparent manner which of us fulfils which obligations under the GDPR, in particular with regard to the exercise of the rights of the data subject. Meta refers to this contractual agreement as the “Page Insights Controller Addendum”.
The essence of the agreement is made available to the data subject. You can view the exact wording of the agreement directly at Meta:
As a company, we are primarily responsible for the content we publish on our Facebook page and for moderating user posts on our page.
Under this agreement, Meta assumes primary responsibility for processing the Insights data and for fulfilling all obligations under the GDPR with regard to the creation of statistics.
Irrespective of the terms of the agreement, the data subject may exercise their rights under this Regulation in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of Meta: You can contact Meta's Data Protection Officer directly via the web form provided by Meta: https://www.facebook.com/help/contact/540977946302970
Data Processing by Meta (the Facebook Platform)
As the operator of the page, we have no full influence on the type and scope of the data processed by Meta, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the parent company Meta Platforms, Inc. in the USA).
Types of Data Processed by Meta
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. “Personal data” means any information relating to an identified or identifiable natural person. Meta processes data you enter voluntarily (e.g. name, profile picture, friends lists, posted content) as well as automatically generated data. This includes your IP address, technical information about your device, your location, your mobile network and your exact usage behaviour. Meta uses profiling to draw conclusions from this data about your personal characteristics and interests and to show you personalised advertising.
Access to Terminal Equipment and Tracking (TDDDG)
Meta uses technologies such as cookies, tracking pixels and scripts to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information. The information provided to the end user and the consent must comply with Regulation (EU) 2016/679. An exception applies only where access is strictly necessary for the provider to deliver a service expressly requested by the user. Responsibility for these technical measures lies solely with Meta.
Data Transfers to Third Countries
Meta is a globally operating company. Data is therefore regularly transferred to Meta servers in countries outside the European Economic Area (so-called third countries, e.g. the USA). Any transfer of personal data which is undergoing processing or is intended for processing after transfer to a third country may only take place if the conditions of the GDPR are complied with. All provisions shall be applied to ensure that the level of protection of natural persons guaranteed by the GDPR is not undermined. For these transfers, Meta relies on adequacy decisions of the European Commission (Art. 45 GDPR), such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the European Commission (Art. 46 GDPR).
Further information on data processing by Meta can be found in the Facebook privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully, fairly and in a transparent manner in relation to the data subject. We use our Facebook page for marketing purposes, to strengthen our brand presence (public relations), to present our services and products, to acquire new customers and to interact with interested parties.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interest lies in up-to-date information and interaction with our customers, partners and interested parties and in analysing our reach. The statutory restriction that this legal basis does not apply to public authorities does not affect us as a private company.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. If you contact us via Facebook Messenger regarding our products or services, we process your data in order to handle your enquiry.
Page Statistics (Facebook Page Insights)
We use the “Page Insights” function provided by Meta. Meta thereby provides us with anonymised statistical data on the use and reach of our page (e.g. age structure, gender distribution, clicks on posts). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to optimise our information offering in line with demand.
Interaction and Direct Messages (Messenger)
If you comment on, share or like our posts, we process this data within the scope of our Facebook profile. If you send us a direct message via Facebook Messenger, we process the data you enter there (username, content of the message) exclusively to answer your enquiry. If you take part in a live video, we process the data you transmit in the process (in particular your username, comments, reactions and other interactions) exclusively to conduct and moderate the live video and to answer your questions.
Important Security Notice for Users
Please note that the public comment section of Facebook is not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, contract details, invoice data or private contact details this way. Should you post such information in public comments, we will delete it immediately for your own protection.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and Meta with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and to information defined by law, such as the purposes of processing and the categories of data.
Right to rectification (Art. 16 GDPR): The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the statutory grounds applies. This is the case, for example, where the data are no longer necessary in relation to the purposes for which they were collected.
Right to restriction of processing (Art. 18 GDPR): The data subject has the right to obtain from the controller restriction of processing where one of the statutory conditions applies. This applies, for example, where you contest the accuracy of the data, for a period enabling it to be verified.
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f). Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to such processing.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes this Regulation. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with Meta (Facebook)
As we have no direct access to the technical systems, the infrastructure and the user profiles tracked by Meta in the background, requests for access, erasure, restriction and objection are most effectively made directly to Meta. Only Meta has full access to your linked user data and can implement the corresponding technical measures (such as handing over data logs or permanently deleting your account).
Please use the tools provided by Meta for Facebook:
Online form for privacy requests to Meta:
https://www.facebook.com/help/contact/540977946302970 Adjusting privacy and ad settings: You can manage these directly in your Facebook profile under “Settings & privacy” > “Settings” > “Ads”.
Information on Facebook cookies and tracking technologies:
https://www.facebook.com/privacy/policies/cookies
Should you nevertheless need help exercising your rights against Meta in connection with our page, you can contact us or the office responsible for data protection at any time. We will review your request within the scope of joint controllership and forward it to Meta.
Privacy Policy for the Instagram Channel of SCC EVENTS GmbH
We expressly point out that you use the Instagram channel offered here and its interactive functions (such as commenting, liking, sharing, saving or sending direct messages) at your own responsibility. When Instagram is used, Meta Platforms Ireland Limited processes extensive personal data of visitors, uses comprehensive tracking technologies and creates detailed user profiles.
All essential information that we provide via our Instagram channel is also available in the same or a similar form on our official website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Joint Controllers
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the operation of this Instagram presence and the evaluation of page statistics (so-called Instagram Insights), there is joint controllership within the meaning of Art. 26 GDPR.
Controller on the Part of the Company
Responsible for the content and operation of our Instagram presence is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of Instagram (Meta)
Responsible for the provision of the platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., based in the USA.)
Joint Controller Agreement (Page Insights Controller Addendum)
In an agreement with Meta, we have determined in a transparent manner which of us fulfils which obligations under the GDPR, in particular with regard to the exercise of the rights of the data subject. As Instagram is part of the Meta group, the “Page Insights Controller Addendum” provided by Meta applies.
The essence of this agreement is made available to the data subject. You can view the exact wording of the agreement directly at Meta:
As a company, we are primarily responsible for the content we publish on our Instagram page and for moderating user posts on our page.
Under this agreement, Meta assumes primary responsibility for processing the Insights data and for fulfilling all obligations under the GDPR with regard to the creation of statistics (including information obligations, data security and responding to data subject requests).
Nevertheless, irrespective of the terms of the agreement, the data subject may exercise their rights under this Regulation in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of Meta: You can contact Meta's Data Protection Officer directly via the web form provided by Meta: https://www.facebook.com/help/contact/540977946302970
Data Processing by Meta (the Instagram Platform)
As the operator of the Instagram channel, we have no full influence on the type and scope of the data processed by Meta, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the parent company Meta Platforms, Inc. in the USA).
Types of Data Processed by Meta
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. Meta processes data you enter voluntarily (e.g. name, profile picture, age, contacts, uploaded, commented or liked content) as well as automatically generated data. This includes your IP address, technical information about your device, your location, your mobile network and your exact usage behaviour (which posts, stories or reels you view and for how long, your interactions with other profiles, clicks and dwell times). Meta uses profiling to draw conclusions from this data about your personal characteristics, interests and consumer preferences and to show you personalised advertising.
Access to Terminal Equipment and Tracking (TDDDG)
Meta uses technologies such as cookies, tracking pixels and scripts to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information. Meta obtains this consent when an account is registered or when the platform is accessed. Responsibility for these technical measures lies solely with Meta.
Data Transfers to Third Countries
Meta is a globally operating company. Data is therefore regularly transferred to Meta servers in countries outside the European Economic Area (so-called third countries, e.g. the USA). Any transfer of personal data which is undergoing processing or is intended for processing after transfer to a third country may only take place if the conditions of the GDPR are complied with. For these transfers, Meta relies on adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
Further information on data processing by Meta can be found in the Instagram privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully, fairly and in a transparent manner in relation to the data subject. We process your data on Instagram for marketing purposes, to increase our brand awareness (public relations), to present our products and services, to acquire new customers and for personnel marketing and recruiting (employer branding).
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interest lies in up-to-date information, interaction and communication with our customers, partners, applicants and interested parties and in analysing our reach.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. If you contact us directly via Instagram regarding our products or apply for a vacancy, we process your data in order to handle your enquiry or to carry out the application procedure.
Page Statistics (Instagram Insights)
We use the “Instagram Insights” function provided by Meta. Meta thereby provides us with anonymised statistical data on the use and reach of our Instagram page (e.g. age structure, gender distribution, clicks on posts or stories). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to optimise our information offering in line with demand.
Interaction and Direct Messages
If you comment on, share or like our posts, we process this data within the scope of our Instagram profile. If you send us a direct message, we process the data you enter there (username, content of the message) exclusively to handle and answer your enquiry.
Important Security Notice for Users
Please note that the public comment section of Instagram is not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, contract details, invoice data or private contact details this way. Should you post such information in public comments, we will delete it immediately for your own protection.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and Meta with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and to information defined by law, such as the purposes of processing and the categories of data.
Right to rectification (Art. 16 GDPR): The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes of processing).
Right to restriction of processing (Art. 18 GDPR): The data subject has the right to obtain from the controller restriction of processing where one of the statutory conditions applies (e.g. where you contest the accuracy of the data, for a period enabling it to be verified).
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f). Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to such processing.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes this Regulation. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with Meta (Instagram)
As we have no direct access to the technical systems, the infrastructure and the user profiles tracked by Meta in the background, requests for access, erasure, restriction and objection are most effectively made directly to Meta. Only Meta has full access to your linked user data and can implement the corresponding technical measures (such as handing over data logs or permanently deleting your account).
Please use the tools provided by Meta for Instagram:
Online forms for privacy requests to Meta (Instagram):
https://help.instagram.com/contact/1845713985721890 Adjusting privacy and ad settings: You can make these directly in your Instagram app under “Settings and privacy”.
Information on Instagram cookies and tracking technologies:
https://de-de.facebook.com/help/instagram/1896641480634370
Should you nevertheless need help exercising your rights against Meta in connection with our Instagram page, you can contact us or the office responsible for data protection at any time. We will review your request within the scope of joint controllership and forward it to Meta.
Privacy Policy for the X Profile (formerly Twitter) of SCC EVENTS GmbH
We expressly point out that you use the X short-message service offered here and its interactive functions (such as commenting, reposting/retweeting, liking or sending direct messages) at your own responsibility. When the platform is used, the operating company of X processes extensive personal data of visitors, uses tracking technologies and creates in-depth user profiles.
All essential information that we provide via our X profile is also available in the same or a similar form on our official website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Controllers and Classification under Data Protection Law
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Operating a social media profile involves overlaps under data protection law and a division of responsibilities.
Controller on the Part of the Company
Responsible for the content, the creation of posts and the moderation of our X profile is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of X
For users residing in the European Economic Area, the entity legally responsible for the provision of the X platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(Twitter International Unlimited Company is a subsidiary of X Corp., based in the USA.)
Agreement and Cooperation
For the simple operation of a company profile, X does not offer a specific joint controller agreement as standard, as is the case with other platforms (e.g. Facebook). Nevertheless, in practice there is a division of co-responsibility:
As a company, we are responsible for our posts, our interactions and for answering direct messages.
X assumes primary responsibility for the technical provision of the platform, the setting of cookies and the provision of aggregated statistics (X Analytics).
Irrespective of X's internal contractual structures, you may exercise your rights as a data subject under the GDPR (in particular pursuant to Art. 26(3) GDPR) in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of X: You can contact the Data Protection Officer of Twitter International Unlimited Company directly via the web form for privacy requests provided by X: https://help.x.com/de/forms/privacy
Data Processing by X (the Platform)
As the operator of the company profile, we have no full influence on the type and scope of the data processed by X, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the parent company X Corp. in the USA).
Types of Data Processed by X
“Processing” means any operation performed on personal data, whether or not by automated means. X processes data you enter voluntarily (e.g. name, X handle, telephone number, email address, profile picture, shared content, likes, reposts) as well as automatically generated data, even if you do not have an account. This includes your IP address, the application used, device information, your location, your mobile network provider and your exact usage behaviour. X uses this data for profiling in order to draw conclusions about your interests, make personalised feed suggestions and serve targeted advertising.
Access to Terminal Equipment and Tracking (TDDDG)
X uses technologies such as cookies, pixels and web beacons to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information (Section 25(1) TDDDG). An exception applies only where access is strictly necessary to provide the service technically. X obtains this consent when the platform is accessed or via cookie banners. Legal and technical responsibility for this lies solely with X.
Data Transfers to Third Countries
As the parent company X Corp. is based in the USA, data collected in Ireland is regularly transferred to servers in countries outside the European Economic Area (third countries). Any transfer of personal data to a third country may only take place if the conditions of the GDPR are complied with. For these transfers, X relies on adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework) or incorporates standard contractual clauses approved by the European Commission.
Further information on data processing by X can be found in the X privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully and fairly. We use our X profile for timely press and public relations work, for marketing, to present our services and products, to strengthen our brand awareness and, where applicable, for recruiting.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller. Our legitimate interest lies in providing fast, up-to-date information, in interacting with our customers, partners and interested parties and in analysing our reach on this platform.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract. If you send us a direct message via X regarding our products or services, we process your data in order to handle and answer your enquiry.
Profile Statistics (X Analytics)
We use the analytics function “X Analytics” provided by X. It gives us aggregated and anonymised statistical data on the use and reach of our posts (e.g. impressions, engagement rates, link clicks). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to optimise the content and timing of our posts.
Interaction and Direct Messages
If you comment on, like, quote or repost our posts, we process this data within the scope of our X profile, as your account name becomes visible to us. If you send us a direct message (DM), we process the data you enter there (username, message text) exclusively to handle your request.
Important Security Notice for Users
Please note that public replies on X are not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, bank details, invoice data or private contact details this way. Should you address such information to us in public posts, we will – as far as the platform allows – hide it for your own protection or immediately refer you to a secure communication channel.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and X with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and the purposes of processing.
Right to rectification (Art. 16 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes).
Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing where one of the statutory conditions applies (e.g. where the accuracy of the data is contested).
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our legitimate interest (Art. 6(1)(f)). We will then no longer process the data unless there are compelling legitimate grounds. Where data are processed for direct marketing purposes, you may object at any time.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, you have the right to withdraw your consent at any time.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes the GDPR. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with X (formerly Twitter)
As we have no direct access to the technical systems, the infrastructure and the user profiles tracked by X in the background, requests for access, erasure, restriction and objection are most effectively made directly to X. Only X has full access to your linked user account, the system logs and the algorithms.
Please use the channels provided by X:
X privacy policy:
https://x.com/de/privacy Privacy requests & contact form:
https://help.x.com/de/forms/privacy Adjusting privacy and safety settings: You can manage these directly in your profile at:
https://x.com/settings/privacy_and_safety Downloading the data stored by X (archive):
https://help.x.com/de/managing-your-account/how-to-download-your-x-archive
Should you nevertheless need help exercising your rights against X in connection with our profile, you can contact us or our Data Protection Officer at any time. We will review your request within the scope of our possibilities and forward it to X.
Privacy Policy for the YouTube Channel of SCC EVENTS GmbH
We expressly point out that you use the YouTube channel offered here and its interactive functions (such as commenting, rating, sharing or subscribing) at your own responsibility. When YouTube is used, Google Ireland Limited processes extensive personal data of visitors, uses tracking technologies and creates detailed user profiles.
All information we offer via this channel is also available in the same or a similar form on our website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Responsible Bodies and Classification under Data Protection Law
The operation of this YouTube channel involves parallel responsibilities which, in data protection practice and under European case law (including that of the CJEU), are classified as functional cooperation or shared co-responsibility.
Controller on the Part of the Company
Responsible for the content and operation of our YouTube channel is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of YouTube (Platform Responsibility)
Responsible for the provision of the platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(Google Ireland Limited is a subsidiary of Google LLC, based in the USA.)
Contractual Basis of the Data Protection Framework
Google governs the framework for the use of platform data primarily through standardised terms for independent controllers (Google Controller-Controller Data Protection Terms). You can view Google's contractual provisions at
As we, as channel operator, decide on the creation and provision of the videos and the moderation of the comment section, and Google in return provides us with aggregated channel statistics (YouTube Analytics), the spheres of influence under data protection law overlap. If you assert your rights as a data subject against us with regard to the areas of our channel managed by YouTube, we will forward these requests to Google accordingly.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of Google Ireland Limited: You can contact Google's Data Protection Officer directly via the web form provided by Google: https://support.google.com/policies/contact/general_privacy_faq
Data Processing by Google (YouTube)
As the operator of the YouTube channel, we have no full influence on the type and scope of the data processed by Google, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the parent company Google LLC in the USA).
Types of Data Processed by Google
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. Google processes both data you enter voluntarily (e.g. name, profile picture, channel settings, uploaded or commented content) and automatically generated data. This includes your IP address, technical information about your device and browser, your precise location, your mobile network and your exact usage behaviour (which videos you watch and for how long, search queries, interactions and clicks). Google uses profiling within the meaning of Art. 4(4) GDPR to draw conclusions from this data about your personal characteristics, preferences and interests and to show you personalised advertising.
Access to Terminal Equipment and Tracking (TDDDG)
Google uses technologies such as cookies, local storage and browser fingerprinting to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information (Section 25(1) TDDDG). Google obtains this consent when an account is registered or when the website is accessed. Responsibility for these measures lies solely with Google.
Data Transfers to Third Countries
Google is a globally operating group whose parent company (Google LLC) is based in the USA. Data is therefore regularly transferred to countries outside the European Economic Area (so-called third countries). Any transfer of personal data which is undergoing processing or is intended for processing after transfer may only take place if the conditions of the GDPR are complied with. For these transfers, Google relies on the EU-US Data Privacy Framework (where an adequacy decision of the European Commission exists) or on standard contractual clauses approved by the European Commission.
Further information on data processing by Google can be found in the Google privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully, fairly and in a transparent manner in relation to the data subject. We use our YouTube channel for marketing purposes, to strengthen our brand presence (public relations), to present our services and products, to acquire new customers and to interact with interested parties.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interest lies in up-to-date information and interaction with our customers, partners and interested parties and in analysing our reach. The statutory restriction that this legal basis does not apply to public authorities does not affect us as a private company.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. If you contact us via the YouTube channel regarding our products or services, we process your data in order to handle your enquiry.
Channel Statistics (YouTube Analytics)
We use the “YouTube Analytics” function. Google thereby provides us with anonymised statistical data on the use and reach of our channel (e.g. watch time, demographic characteristics of viewers by age group, click-through rates). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to adapt and improve our information offering in line with demand.
Interaction and Comments
If you publicly comment on our videos or rate them positively or negatively, these actions are processed within the scope of our channel. If you send us a message, we process the data you enter there exclusively to answer your enquiry.
Important Security Notice for Users
Please note that the public comment section of YouTube is not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, contract details, bank details, invoice data or private contact details this way. Should you post such information in public comments, we will – as far as the platform allows – delete it immediately for your own protection and refer you to a secure communication channel.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and Google with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and to information defined by law, such as the purposes of processing and the categories of data.
Right to rectification (Art. 16 GDPR): The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the statutory grounds applies. This is the case, for example, where the data are no longer necessary in relation to the purposes for which they were collected.
Right to restriction of processing (Art. 18 GDPR): The data subject has the right to obtain from the controller restriction of processing where one of the statutory conditions applies. This applies, for example, where you contest the accuracy of the data, for a period enabling it to be verified.
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to such processing.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes this Regulation. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with Google (YouTube)
As we have no direct access to the technical systems, the server infrastructure and the user profiles tracked by Google, requests for access, erasure, restriction and objection are most effectively made directly to Google. Only Google has full access to your linked account data and can implement the corresponding technical measures (such as handing over data logs or deleting tracking entries).
Please use the tools provided by Google:
Web form for privacy requests to Google:
https://support.google.com/policies/contact/general_privacy_faq Google “My Account” (managing your activity and privacy): At
https://myactivity.google.com you can view, delete and permanently pause your search history, YouTube history and location settings. Google ad privacy settings: At
https://adssettings.google.com you can deactivate the personalisation of advertising for your profile.
Should you nevertheless need help exercising your rights against Google in connection with our channel, you can contact us or our Data Protection Officer at any time. We will review your request within the scope of our possibilities and forward it to Google.
Privacy Policy for the Vimeo Channel of SCC EVENTS GmbH
We expressly point out that you use the Vimeo channel offered here and the interactive functions of the platform (such as commenting, liking, sharing or watching and embedding videos) at your own responsibility. When the platform and the video player are used, Vimeo.com, Inc. processes extensive personal data of visitors, uses tracking technologies and creates user profiles.
All essential information that we provide via our Vimeo channel is also available in the same or a similar form on our official website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Controllers and Classification under Data Protection Law
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Operating a video channel on a third-party platform involves overlaps under data protection law and a division of responsibilities.
Controller on the Part of the Company
Responsible for the content, the production of videos and the operation of our Vimeo channel is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of Vimeo
Responsible for the provision of the platform, the technical infrastructure, the hosting of the videos, the delivery of the player and extensive processing of users' data for its own purposes is:
Agreement and Cooperation
As we as a company upload content to Vimeo and Vimeo in return provides us with aggregated usage and reach statistics (Vimeo Analytics), the spheres of influence under data protection law overlap in the sense of a functional co-responsibility.
Insofar as Vimeo and we are regarded as joint controllers for certain evaluations, the following applies:
As a company, we are primarily responsible for the video content we upload and for moderating any comments under our videos.
Vimeo assumes primary responsibility for the technical processing of data on the platform, the provision of the infrastructure, the setting of cookies and the fulfilment of data subject rights with regard to the raw data processed on the platform.
Irrespective of any internal responsibilities, you may exercise your rights as a data subject under the GDPR in respect of and against each of the controllers (Art. 26(3) GDPR).
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of Vimeo:
Vimeo can be contacted on data protection matters via the online privacy form or by email to the privacy team:
Web form / support:
Data Processing by Vimeo (the Platform)
As the operator of our video channel, we have no full influence on the type and scope of the data processed by Vimeo, the exact manner of processing and use, or the disclosure of this data to third parties.
Types of Data Processed by Vimeo
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. “Personal data” means any information relating to an identified or identifiable natural person.
If you are registered with Vimeo, Vimeo processes data you enter voluntarily (e.g. account details, name, email address, profile picture, uploaded or commented content). In addition, Vimeo processes automatically generated technical data, including for unregistered visitors:
IP address and device identifier
Browser type and operating system
Referrer URL (the previously visited page)
Location data (where shared or determinable via the IP address)
Usage and interaction data (which videos were accessed, viewing time, pauses, clicks, volume settings)
Vimeo uses this data to analyse user behaviour, to ensure platform security, to improve its products and to display interest-based advertising or recommendations.
Access to Terminal Equipment and Tracking (TDDDG)
Vimeo uses technologies such as cookies, local storage, pixels and browser fingerprinting to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information (Section 25(1) TDDDG). An exception applies only where access is strictly necessary for the provider to deliver a service expressly requested by the user. Vimeo obtains the corresponding consent when the platform is accessed or via cookie banners. Responsibility for these technical measures lies solely with Vimeo.
Data Transfers to Third Countries
Vimeo.com, Inc. is a company based in the USA. Personal data is therefore regularly transferred to Vimeo servers in the USA or in other countries outside the European Economic Area (so-called third countries). Any transfer of personal data to a third country may only take place if the conditions of the GDPR (Art. 44 et seq. GDPR) are complied with. Vimeo is certified under the EU-US Data Privacy Framework, which establishes an adequate level of data protection for transfers to the USA (Art. 45 GDPR). In addition, Vimeo relies on the European Commission's standard contractual clauses (Art. 46 GDPR).
Further information on data processing by Vimeo can be found in Vimeo's privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully, fairly and in a transparent manner in relation to the data subject. We use our Vimeo channel for marketing and information purposes, for the visual presentation of our services, products and company projects, to strengthen our brand awareness (public relations) and as part of recruiting and employer branding.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interest lies in a modern, high-quality video presentation of our company and in interacting with customers, partners and interested parties.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. If you contact us via the platform regarding our products or services, we process your data in order to handle your enquiry.
Page Statistics (Vimeo Analytics)
We use the “Vimeo Analytics” function provided by Vimeo. Vimeo thereby provides us with anonymised statistical data on the use and reach of our videos (e.g. number of video views, average viewing time, location of views by country, device types used). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to optimise the quality and content of our videos.
Interaction and Comments
If you publicly comment on or like our videos, we process this data within the scope of our Vimeo channel. If you contact us via the platform's messaging or contact functions, we process the data you enter there (username, email address, message text) exclusively to handle and answer your enquiry.
Important Security Notice for Users
Please note that the public comment section under Vimeo videos is not suitable for exchanging sensitive or confidential information. Do not send us confidential customer data, bank details, invoice data or private contact details this way. Should you post such information in public comments, we will delete it immediately for your own protection.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and Vimeo with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and to information defined by law, such as the purposes of processing and the categories of data.
Right to rectification (Art. 16 GDPR): The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes of processing).
Right to restriction of processing (Art. 18 GDPR): The data subject has the right to obtain from the controller restriction of processing where one of the statutory conditions applies (e.g. where you contest the accuracy of the data, for a period enabling it to be verified).
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f). Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to such processing.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes this Regulation. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with Vimeo
As we have no direct access to the technical systems, the server infrastructure and the user or player data tracked by Vimeo in the background, requests for access, erasure, restriction and objection are most effectively made directly to Vimeo. Only Vimeo has full access to the linked user accounts and system logs and can implement the corresponding technical measures.
Please use the channels provided by Vimeo:
Vimeo privacy policy & information:
https://vimeo.com/privacy Contact form for privacy requests:
https://vimeo.com/help/contact Email to the privacy team:
Privacy@vimeo.com Adjusting account settings: If you have a Vimeo account, you can manage your privacy and notification settings directly in your account settings under “Settings”.
Should you nevertheless need help exercising your rights against Vimeo in connection with our video channel, you can contact us or the office responsible for data protection at any time. We will review your request within the scope of our possibilities and forward it to Vimeo.
Privacy Policy for the TikTok Channel of SCC EVENTS GmbH
Please note that you use the TikTok channel offered here and its functions at your own responsibility. This applies in particular to the use of interactive functions such as commenting, sharing or rating. TikTok processes personal data extensively and creates user profiles.
Information we offer via this channel is also available in the same or a similar form on our website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Joint Controllers
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where two or more controllers jointly determine the purposes and means of processing, they are joint controllers. Such joint controllership within the meaning of Art. 26 GDPR exists for the operation of this TikTok channel.
Controller on the Part of the Company
Responsible for the content and operation of our TikTok channel is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of TikTok
For users residing in the European Economic Area, the entity legally responsible for the provision of the TikTok platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(TikTok Technology Limited is a subsidiary of Beijing ByteDance Technology Co Ltd., based in China.)
Joint Controller Agreement
In an agreement with TikTok, we have determined in a transparent manner which of us fulfils which obligations under the GDPR, in particular with regard to the exercise of the rights of the data subject, and who complies with which information obligations. The essence of the agreement is made available to the data subject.
Further information is available at
We are responsible for the content we publish on the profile.
TikTok is responsible for processing users' data to deliver content, for tracking, for profiling and for creating page statistics (so-called “TikTok Analytics”).
Irrespective of the terms of the agreement, the data subject may exercise their rights under this Regulation in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of TikTok: You can contact TikTok's Data Protection Officer via the following web form: https://www.tiktok.com/legal/report/privacy?lang=de
Data Processing by TikTok
We have no influence on the type and scope of the data processed by TikTok, the manner of processing and use, or the disclosure of this data to third parties. TikTok analyses your usage behaviour and creates profiles in order to personalise advertising and content.
Types of Data Processed by TikTok
TikTok processes data entered voluntarily (e.g. name, profile picture, age, language) as well as automatically generated data. This includes your IP address, information about your device, your location, your mobile network and your usage behaviour (which videos you watch and for how long, interactions, direct messages).
Access to Terminal Equipment and Tracking (TDDDG)
TikTok uses technologies such as cookies, pixels and web beacons to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information. The legal basis for this storage and access on your device is the consent you have given to TikTok pursuant to Section 25(1) TDDDG. An exception applies only where access is strictly necessary to provide the service technically. TikTok obtains this consent when the platform is accessed or via cookie banners. Legal and technical responsibility for this lies solely with TikTok.
Data Transfers to Third Countries
TikTok is a globally operating company. TikTok also transfers data to servers in countries outside the European Union (so-called third countries, e.g. the USA, Singapore, the UK). The transfer of personal data to a third country or an international organisation may only take place if the conditions of the GDPR are complied with. TikTok relies on adequacy decisions of the European Commission (e.g. for the EU-US Data Privacy Framework) or on EU standard contractual clauses (SCC).
Further information on data processing by TikTok can be found in the privacy policy for the EEA:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully and fairly. We use our TikTok profile for timely press and public relations work, for marketing, to present our services and products, to strengthen our brand awareness and, where applicable, for recruiting.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller. Our legitimate interest lies in providing fast, up-to-date information, in interacting with our customers, partners and interested parties and in analysing our reach on this platform.
Initiation and performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract. If you send us a direct message via TikTok regarding our products or services, we process your data in order to handle and answer your enquiry.
Page Statistics (TikTok Analytics)
We use the TikTok Analytics function to retrieve anonymised statistical data on the use of our channel (e.g. age structure, geographical distribution of followers, video views). This data does not allow us to draw any conclusions about individual users.
Interaction and Direct Messages
If you comment on, like or share our posts, we process this data within the scope of our TikTok profile. If you send us a direct message, we process the data you enter there (username, content of the message) exclusively to handle your request.
Important Security Notice for Users
Please note that public replies on TikTok are not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, bank details, invoice data or private contact details this way. Should you address such information to us in public posts, we will – as far as the platform allows – hide it for your own protection or immediately refer you to a secure communication channel.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and TikTok with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and the purposes of processing.
Right to rectification (Art. 16 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes).
Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing where one of the statutory conditions applies (e.g. where the accuracy of the data is contested).
Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our legitimate interest (Art. 6(1)(f)). We will then no longer process the data unless there are compelling legitimate grounds. Where data are processed for direct marketing purposes, you may object at any time.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, you have the right to withdraw your consent at any time.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes the GDPR. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with TikTok
As we have no direct access to the databases and the user profiles tracked by TikTok, requests for access, erasure, restriction and objection are most effectively made directly to TikTok. Only TikTok has full access to your user data and can take the corresponding measures (such as handing over or permanently deleting data).
Please use the channels provided by TikTok:
Web form for privacy requests:
https://www.tiktok.com/legal/report/privacy?lang=de Adjusting privacy settings: Directly in the TikTok app under “Profile” > “Settings and privacy” > “Privacy”.
Safety Center: Extensive explanations and help for users can be found in the Safety Center at
https://www.tiktok.com/safety/de-de/privacy-and-security-on-tiktok/
Should you nevertheless need help exercising your rights against TikTok in connection with our profile, you can contact us or our Data Protection Officer at any time. We will review your request within the scope of our possibilities and forward it to TikTok.
Privacy Policy for the LinkedIn Page of SCC EVENTS GmbH
We expressly point out that you use the LinkedIn company page offered here and its interactive functions (such as commenting, liking, sharing or writing direct messages) at your own responsibility. When the network is used, LinkedIn Ireland Unlimited Company processes extensive personal data of visitors, uses tracking technologies and creates detailed user profiles.
All essential information that we provide via our LinkedIn channel is also available in the same or a similar form on our official website at
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Joint Controllers
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the operation of this LinkedIn company page and the evaluation of page statistics (so-called Page Insights), there is joint controllership within the meaning of Art. 26 GDPR.
Controller on the Part of the Company
Responsible for the content and operation of our LinkedIn presence is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of LinkedIn
Responsible for the provision of the platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
(LinkedIn Ireland Unlimited Company is a subsidiary of LinkedIn Corporation, based in the USA.)
Joint Controller Agreement (Page Insights Joint Controller Addendum)
In an agreement with LinkedIn, we have determined in a transparent manner which of us fulfils which obligations under the GDPR, in particular with regard to the exercise of the rights of the data subject. LinkedIn refers to this contractual agreement as the “Page Insights Joint Controller Addendum”.
The essence of this agreement is made available to the data subject. Further information can be found here:
As a company, we are primarily responsible for the content we publish on our LinkedIn company page and for moderating user posts on our page.
Under this agreement, LinkedIn assumes primary responsibility for processing the Insights data and for fulfilling all obligations under the GDPR with regard to the creation of statistics (including information obligations, data security and responding to data subject requests).
Nevertheless, irrespective of the terms of the agreement, the data subject may exercise their rights under this Regulation in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of LinkedIn: You can contact LinkedIn's Data Protection Officer directly via the web form provided by LinkedIn: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
Data Processing by LinkedIn (the Platform)
As the operator of the company page, we have no full influence on the type and scope of the data processed by LinkedIn, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the parent company LinkedIn Corporation in the USA).
Types of Data Processed by LinkedIn
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. LinkedIn processes data you enter voluntarily (such as name, profile picture, professional background, qualifications, contacts, posted or liked content) as well as automatically generated data. This includes your IP address, technical information about your device, your location and your exact usage behaviour (which posts you view, your interactions with other profiles, clicks and dwell times). LinkedIn uses this data for profiling in order to draw conclusions about your professional interests and purchasing preferences and to show you personalised advertising and targeted job offers.
Access to Terminal Equipment and Tracking (TDDDG)
LinkedIn uses technologies such as cookies, tracking pixels and scripts to collect this data. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information. LinkedIn obtains this consent when an account is registered or when the platform is visited. Responsibility for these technical measures lies solely with LinkedIn.
Data Transfers to Third Countries
LinkedIn belongs to Microsoft Corporation, a globally operating US group. Data is therefore regularly transferred to servers in countries outside the European Economic Area (so-called third countries, in particular the USA). Any transfer of personal data which is undergoing processing or is intended for processing after transfer to a third country may only take place if the conditions of the GDPR are complied with. For these transfers, LinkedIn relies on adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
Further information on data processing by LinkedIn can be found in the LinkedIn privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
We use our LinkedIn page for marketing purposes, to strengthen our brand presence (public relations), to present our services and products, to acquire new customers and for personnel marketing and recruiting (employer branding).
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interest lies in up-to-date information and interaction with our customers, partners and interested parties and in analysing our reach.
Initiation of a contract and application procedures (Art. 6(1)(b) GDPR in conjunction with national employee data protection provisions): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract. If you contact us via LinkedIn regarding vacancies or send us application documents, we process this data to carry out the application procedure.
Page Statistics (LinkedIn Page Insights)
We use the “Page Insights” function provided by LinkedIn. LinkedIn thereby provides us with anonymised statistical data on the use and reach of our company page (for example demographic data such as industry, field of activity, company size and career level of visitors). This data is fully anonymised for us; it does not allow us to draw any conclusions about the identity of individual persons. We use it exclusively to optimise our posts and recruiting measures for our target groups.
Interaction and Direct Messages
If you comment on, share or like our posts, we process this data within the scope of our LinkedIn profile. If you send us a direct message or an InMail (for example an enquiry about our products or job offers), we process the data you enter there exclusively to handle and answer your request.
Important Security Notice for Users
Please note that the public comment section of LinkedIn is not suitable for exchanging sensitive or confidential information. Do not send us customer numbers, contract details, invoice data or private contact details this way. Should you post such information in public comments, we will delete it immediately for your own protection.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and LinkedIn with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed; where that is the case, they have the right to access the personal data and to information defined by law.
Right to rectification (Art. 16 GDPR): You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes).
Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing where one of the statutory conditions applies (e.g. where you contest the accuracy of the data).
Right to object (Art. 21 GDPR): As our processing is based on a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. The controller shall then no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes this Regulation. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with LinkedIn
As we have no direct access to the technical systems, the server infrastructure and the user profiles tracked by LinkedIn in the background, requests for access, erasure, restriction and objection are most effectively made directly to LinkedIn. Only LinkedIn has full access to your linked account data and can implement the corresponding technical measures (such as handing over data logs or deleting tracking entries).
Please use the tools provided by LinkedIn:
Web form for privacy requests to LinkedIn:
https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de Adjusting privacy and advertising settings: You can manage these directly in your LinkedIn profile under “Settings & Privacy” > “Data privacy”.
Information on LinkedIn cookies and tracking technologies:
https://www.linkedin.com/legal/cookie-policy
Should you nevertheless need help exercising your rights against LinkedIn in connection with our company page, you can contact us or our Data Protection Officer at any time. We will review your request within the scope of joint controllership and forward it to LinkedIn.
Privacy Policy for the Strava Club of SCC EVENTS GmbH
We expressly point out that you use the Strava club offered here and the interactive functions of the app (such as recording activities, sharing routes, commenting or giving “Kudos”) at your own responsibility. When the platform is used, Strava, Inc. processes extensive personal data, including highly sensitive movement, location and possibly health data.
There is no need to create a Strava account or to join our club in order to find out about our company. Our Strava club is a voluntary offering for connecting through sport (e.g. as part of employer branding or corporate health campaigns). If you have confidential concerns, please always use our direct, secure communication channels (such as email or the contact form on our website).
Reference to the Controller's Legal Notice
The controller's legal notice (imprint) is available at
Name and Address of the Controllers and Classification under Data Protection Law
A “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Operating a social media profile involves overlaps under data protection law and a division of responsibilities.
Controller on the Part of the Company
Responsible for the content, the creation of posts and the moderation of our Strava club is:
SCC EVENTS GmbH
Olympiapark Berlin, Haus des Deutschen Sports, Adlerplatz 1
14053 Berlin
Phone:
Email:
Controller on the Part of Strava
Responsible for the provision of the Strava platform, the technical infrastructure and extensive processing of users' data on the platform for its own purposes is:
Agreement and Cooperation
For the operation of a club, Strava does not offer a specific joint controller agreement as standard, as is partly the case with other social networks. Nevertheless, in practice there is a division of co-responsibility:
As a company, we are responsible for our posts, club challenges and for answering enquiries within the club.
Strava assumes primary responsibility for the technical provision of the platform, GPS tracking, the setting of cookies and the provision of aggregated club statistics (e.g. weekly leaderboards).
Irrespective of Strava's internal contractual structures, you may exercise your rights as a data subject under the GDPR in respect of and against each of the controllers.
Contact Details of the Data Protection Officer
Data Protection Officer of
Data Protection Officer of Strava:
You can contact Strava's privacy team via the online support system or by email:
Email:
Data Processing by Strava (the Platform)
As the operator of the club, we have no full influence on the type and scope of the data processed by Strava, the exact manner of processing and use, or the disclosure of this data to third parties (in particular to the USA).
Types of Data Processed by Strava
“Processing” means any operation performed on personal data, whether or not by automated means. Strava processes data you enter voluntarily (e.g. name, profile picture, age, weight, equipment, shared routes) as well as automatically generated data. This includes exact GPS location data, movement histories, performance data (pace, watts), biometric or health data (such as heart rate, if you pair corresponding sensors) and device and usage data. Strava uses this data to provide its tracking services, for safety features (e.g. Beacon), for analyses and for personalised advertising and features.
Access to Terminal Equipment and Tracking (TDDDG)
Strava uses technologies such as cookies, device IDs and trackers to collect usage data in the app and on the website. Storing information on the end user's terminal equipment or accessing information already stored there is only permitted if the end user has consented on the basis of clear and comprehensive information (Section 25(1) TDDDG). An exception applies only where access is strictly necessary to provide the service technically. Strava obtains this consent at registration or on first access. Legal and technical responsibility for this lies solely with Strava.
Data Transfers to Third Countries
As Strava, Inc. has its headquarters in the USA, data collected in the EU is regularly transferred to servers in countries outside the European Economic Area (third countries). Any transfer of personal data to a third country may only take place if the conditions of the GDPR are complied with. For these transfers, Strava relies on adequacy decisions of the European Commission (such as the EU-US Data Privacy Framework) or incorporates standard contractual clauses approved by the European Commission.
Further information on data processing by Strava can be found in Strava's privacy policy at:
Data Processing by SCC EVENTS GmbH
Purposes and Legal Bases of Processing
Personal data must always be processed lawfully and fairly. We use our Strava club to promote employee health, to build customer loyalty, to organise sporting challenges and to strengthen our brand awareness.
The legal bases for our data processing are:
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by your interests or fundamental rights. Our legitimate interest lies in connecting and motivating our employees and customers through sport and in employer branding.
Consent (Art. 6(1)(a) GDPR): Where we run certain internal company challenges and you actively register for them, the evaluation (e.g. of the kilometres run for a prize draw) is based on your voluntary consent. The data subject may withdraw this consent at any time.
Club Statistics and Leaderboards
We use the overviews provided by Strava within the club (e.g. weekly leaderboards, distances, members' activities). We do not aggregate this data further externally. We only see the data that you have released for the club or publicly in accordance with your own Strava privacy settings.
Interaction and Comments
If you comment on our club posts or give Kudos, we process this data within the scope of our Strava profile. If you publish posts within the club, they are visible to the defined audience (e.g. club members only).
Important Security Notice for Users (Location and Health Data)
We strongly recommend that you review your privacy settings in Strava.
Set up “privacy zones” around your home and work addresses so that these start and end points remain hidden on maps.
Consider whether your activities should be visible to “Everyone”, “Followers” or “Only You”.
In Strava, you can set whether your heart rate or performance data in activities should be visible to third parties.
Please do not share confidential information in the club chat.
Your Rights as a Data Subject
You have extensive rights under the GDPR vis-à-vis us and Strava with regard to the processing of your personal data:
Right of access (Art. 15 GDPR): The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed. Where that is the case, they have the right to access the personal data and to the following information: the purposes of processing and the recipients.
Right to rectification (Art. 16 GDPR): The data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them.
Right to erasure / “right to be forgotten” (Art. 17 GDPR): The data subject has the right to obtain the erasure of personal data concerning them without undue delay where one of the statutory grounds applies (e.g. where the data are no longer necessary for the original purposes).
Right to restriction of processing (Art. 18 GDPR): The data subject has the right to obtain restriction of processing where one of the statutory conditions applies.
Right to object (Art. 21 GDPR): The data subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on our legitimate interest. We will then no longer process the data unless there are compelling legitimate grounds.
Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, the data subject has the right to withdraw their consent at any time.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing infringes the GDPR. You may, for example, contact the supervisory authority responsible for our registered office:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Website:
Phone:
Exercising Your Rights Directly with Strava
As we have no direct access to the technical systems, the infrastructure and the GPS tracking, requests for access, erasure and adjustment of privacy are most effectively made directly to Strava. Only Strava has full access to your raw activity data.
Please use the channels provided by Strava:
Strava privacy policy:
https://www.strava.com/legal/privacy Privacy settings (visibility, zones, heart rate): You can adjust these directly in the app or on the web under “Settings” > “Privacy Controls”.
Downloading your data (archive): You can request a copy of your data via your account settings.
Deleting your account: You can permanently delete your data in your account settings.
Should you nevertheless need help exercising your rights against Strava in connection with our club, you can contact us or our Data Protection Officer at any time. We will review your request within the scope of our possibilities.
Erstellt durch:
© DURY LEGAL Rechtsanwälte – www.dury.de
© Website-Check GmbH – www.website-check.de