The following English version of the Privacy Notice is provided solely to aid in understanding. In the event of any conflicts arising about wording, the German original version shall be exclusively binding for all parties involved.

Data protection information from SCC EVENTS GmbH for guests of the Race Director Program

With this information, we, SCC EVENTS GmbH (hereinafter also referred to as "SCC EVENTS" or "we") inform our guests (participants and reporting persons) within the framework of the Registration and participation in one or more events in the Race Director program about the processing of their personal data and the rights to which they are entitled under the data protection regulations.

• Responsible for data processing and data protection officer

SCC EVENTS GmbH
Olympiapark Berlin, Hanns-Braun-Strasse / Adlerplatz, 14053 Berlin

Managing Director: Christian Jost, Jürgen Lock

Email: rdp2023@scc-events.com
Telephone: 030 / 30 12 88 - 10
Fax: 030 / 30 12 88 - 40

The data protection officer can be reached by post at the above address with the addition "Privacy Policy" or by email: datenschutz@scc-events.com

• Purposes and legal basis of data processing

We process personal data for the purpose of organizing and running our events in the Race Director program (e.g. guided tour, skater party, runners' party, grandstand). Registration for the events is via our online registration form on the website https://survey.scc-events.com/index.php/735651 . Registration can only take place if the invited person uses the registration code provided by us within the registration period. The details of the respective event in the Race Director program result from the personal invitation. We process the data of our guests (contact details of the reporting person and, if applicable, the names of the participants in one or more events) in compliance with the applicable data protection regulations from the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Additional information for participants on the origin and scope of the data:

We received your personal data from the person responsible for your organization (= person invited by us or registering for you) as part of the registration we received and your expected participation in an event in the Race Director program.

In doing so, we recorded these data categories for the purpose of your personalized accreditation and your participation as well as for the implementation of the event(s): last name, first name

The processing of personal data takes place on the basis of the following legal bases:

1. Article 6 paragraph 1 letter b) GDPR for the fulfillment of pre-contractual measures and / or contractual obligations. The contact details of the reporting person are processed for the purpose of registering participants for one or more events on the basis of the respective event information. This includes all data required to organize and hold the event (e.g. name, e-mail address, registration code), including electronic communication (e-mail) that confirms or rejects the registration or further information about the event (such as the admission ticket, accreditation documents).
2. Article 6 paragraph 1 lit. c) GDPR: to fulfill legal obligations such as e.g. B. Commercial and tax law storage obligations, corporate, data protection and civil law obligations, also with regard to the fulfillment of proof and accountability obligations, taking into account and complying with legal provisions.
3. Article 6 paragraph 1 lit. f) GDPR: On the basis of a balance of interests, personal data is also processed to assert legal claims, to defend against legal disputes and to ensure IT and telecommunications security. In addition, on the basis of this legal basis, we process the personal data of the registered participants in order to arrange for personalized accreditation and to prepare the corresponding accreditation documents.
4. Article 6 paragraph 1 lit. a) GDPR on the basis of consent for the purpose explicitly stated, e.g. B. Use of the reporting person's contact details for future invitations to SCC EVENTS.

Insofar as we have been given consent (also through implied action) to process personal data for specific, aforementioned purposes, the lawfulness of this processing is given on the basis of the consent. A given consent can be revoked at any time. The revocation of the consent does not affect the legality of the data processed until the revocation.

• Recipients or categories of recipients of personal data

For the organization and implementation of the events in the Race Director program, only those employees/departments within SCC EVENTS have access to the personal data that they need to fulfill the respective purpose. In order to fulfill our contractual services and legal obligations, personal data is sometimes processed by external service providers or, if necessary, by authorities if this is necessary to fulfill the aforementioned purposes and is legally permitted. In doing so, we always observe the data protection regulations, in particular, processing by service providers used by us only takes place after the conclusion of contracts with a corresponding confidentiality clause.

• Duration of data storage

The registration and contact details of our guests (participants and reporting persons) as well as the registration codes provided will be processed for the duration of the organization and implementation of the events in the Race Director program. This data is stored for 4 weeks after the end of the event and then deleted. Registration data of guests who cancel participation before the start of the event will be deleted immediately. Contact details of the reporting person, which have been approved by the data subjects for sending future invitations with their consent, are also stored after the end of the event until the consent is revoked.

The data processing is also terminated immediately in the event of a (permissible) objection by the data subject.

Log and protocol data from online offers are deleted as soon as they are no longer required, at the latest 3 months after accessing our online offers (e.g. websites, online registration form). Further information on data processing can be found in the data protection declarations of the respective website. The data protection declaration for the online registration form is available at : https://survey.scc-events.com/index.php/735651 .

Data protection inquiries: The inquiries we have answered for information, correction, deletion or restriction of processing, as well as other inquiries from data subjects or supervisory authorities on data protection issues are archived for the purpose of accountability for 3 years from the end of the action.

• Data protection rights for data subjects

All data subjects have the right to information in accordance with Art. 15 GDPR, the right to rectification of their data in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restrict the processing of their data in accordance with Art. 18 GDPR and the Right to data transfer according to Art. 20 GDPR.

Granted consent can be revoked at any time. The revocation of consent does not affect the legality of the data processed up to the revocation.

Right of objection:
According to Article 21 GDPR, data subjects also have the right to object at any time to the processing of their personal data. This applies in particular to these cases:

1. A) Individual case-related right of objection in accordance with Article 21 (1) GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Paragraph 1 lit. f) GDPR (data processing on the basis of a balance of interests). . If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

1. B) Right to object to the processing of data for direct marketing purposes in accordance with Article 21 (2) GDPR

If we process your personal data in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. SCC EVENTS does not intend to process your data for this purpose as part of the event.

Affected parties can informally send us their inquiries about exercising their rights by post or email, stating their full name: SCC EVENTS GmbH, Olympiapark Berlin, Hanns-Braun-Straße / Adlerplatz, 14053 Berlin or datenschutz@scc-events.com.

Right of appeal:
If those affected suspect that SCC EVENTS is processing their data illegally, they can of course bring about a judicial clarification of the problem at any time. In addition, those affected have every other legal option. Irrespective of this, those affected have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. The right of appeal pursuant to Art. 77 GDPR is available to those affected in the EU member state of their place of residence, their place of work and/or the place of the alleged infringement, i.e. they can choose the supervisory authority they contact from the above locations. The supervisory authority to which the complaint was lodged will then inform you of the status and the results of the submission, including the possibility of a judicial remedy in accordance with Article 78 GDPR.

The data protection supervisory authority responsible for SCC EVENTS is:
Berlin Commissioner for Data Protection and Freedom of InformationTel.: +49 (0)30 13889-0; Fax: +49 (0)30 2155050; Email: mailbox@datenschutz-berlin.de

• Data transfer to a third country or an international organization

We transmit some of the contact details of the reporting person to third countries or to international organizations. A list of these services and service providers that can be used can be found later in this document.

Third countries are those countries outside the EEA where the GDPR does not directly apply. The level of data protection is not comparable to that in the EU. In order to compensate for the existing data protection deficit in the event of a lack of an adequacy decision, we have agreed further suitable guarantees for the processing of personal data with the affected service providers in the third country or with the international organization in addition to the standard contractual clauses, so that the data protection standards for these data transmissions comply with the statutory EU data protection regulations are compatible and adequate protection is guaranteed when processing personal data.

• Voluntary and obligation to provide personal data

Registration and participation in events in the Race Director program are always voluntary. In the case of registration, the data of the registering and participating person(s) that is necessary or legally required for the organization and implementation of the event and the fulfillment of the associated obligations must be provided. Failure to provide the data means that participation in the event is not possible.

If information can be provided voluntarily, we have marked it in the respective survey form. A given consent can be revoked at any time.

• Automated decision-making, profiling

Automated decision-making within the meaning of Art. 22 GDPR does not take place.

"Profiling" is a form of automated processing of personal data to evaluate personal aspects relating to a natural person, in particular to analyze or forecast work performance, economic situation, health, personal preferences or interests, reliability or behavior, whereabouts or change of location of the data subject person, insofar as this has a legal effect on the person concerned or significantly affects them in a similar way. The data of our guests (participants and reporters) will not be processed by us for the purpose of creating a profile.