Data protection information of Maurten AB

This notice informs you about the processing of your personal data by Maurten AB (hereinafter also referred to as "we") and the rights to which you are entitled under the data protection laws.

  1. Data controller and data protection officer

Maurten AB

Head office: Gibraltargatan 1 A, 411 32 Gothenburg, Sweden

Branch office in Germany: Gontardstrasse 11, 4th floor, 10178 Berlin, Germany

Managing Director: Olof Sköld

E-mail: privacy@maurten.com

Telephone: 0049 151 163 27041 (Germany) or 0046 707 918 335 (Sweden)

The data protection officer can be contacted by post at the above address with the addition "Datenschutz" or by e-mail: privacy@maurten.com.

  1. Origin and scope of the data

We have received your personal data from SCC EVENTS GmbH on the basis of your consent to the transfer of data in the context of your registration for a sports event organised by SCC EVENTS GmbH.

Sports event:

GENERALI BERLIN HALF MARATHON 2023 and BMW BERLIN-MARATHON 2023.

In doing so, we have collected the following categories of data for the purpose of providing the Maurten newsletter for the aforementioned sporting events: E-mail address.

We receive your personal data for each event on the basis of the consent you have given in each case.

For the purpose of allocation, we process these data: E-mail address and sporting event.

Note on joint responsibility:

We would like to point out that the data provided to us regarding the possibility of opt-in-e-mails is partly subject to the responsibility of SCC EVENTS GmbH. Therefore, please also feel free to contact SCC EVENTS GmbH, Olympiapark Berlin, Hanns-Braun-Straße / Adlerplatz, 14053 Berlin, informationspflicht@scc-events.com with any questions or requests regarding your data protection rights.

The data protection information of SCC EVENTS GmbH is available at:

https://www.scc-events.com/corporate/kontakt/datenschutz/informationspflicht

Processing activities in connection with your order placed with us are described on our website, available at https://www.maurten.com/terms-and-conditions/eu-customers.

  1. Purpose and legal basis of data processing

We process your personal data in compliance with the applicable data protection provisions from the EU General Data Protection Regulation (GDPR). Your personal data will only be processed for the purposes expressly stated here.

The legal basis for the lawful processing of your personal data results from:

Article 6(1) lit. a) GDPR on the basis of consent to send the Maurten newsletter per sporting event.

Insofar as we have been granted consent to process personal data for specific, previously mentioned purposes, the lawfulness of this processing is based on consent. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.

  1. Recipients or categories of recipients of personal data

We partly use external service providers and partners to fulfil our contractual services and legal obligations.

Recipient

Purpose of disclosure

IT service provider

Maintenance, care and servicing of IT systems (hardware and software), data backup

Telecommunication service provider

Transport and storage of connection data

Website host, e-mail provider and server platform

Transport of data from SCC through the OPT-in process

Klaviyo, e-mail provider

Transport of data from Maurten AB

  1. Data transfer to a third country

Klaviyo Inc. is an organisation headquartered in a third country (Massachusetts, USA) and therefore the processing of its personal data may take place outside the EU.

The level of data protection is comparable to the EU data protection regulations. A joint responsibility agreement between Maurten AB and Klaviyo Inc. is in place. The DPA is available at: https://www.klaviyo.com/legal/dpa .

  1. Duration of data storage

We do not receive more information about you than required. The personal data – e-mail address - will be stored until 17 September 2023.

Immediate termination of data processing occurs both in the event of a revocation by the data subject and in the event of a deletion request by the data subject.

We store the data protection requests we respond to regarding information, correction, deletion or restriction of processing, as well as other requests from data subjects or supervisory authorities regarding data protection issues for 3 years for the purpose of accountability.

  1. Data protection rights for data subjects

All data subjects have the right to information under Article 15 of the GDPR, the right to rectification of their data under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing of their data under Article 18 of the GDPR and the right to data transfer under Article 20 of the GDPR. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.

Please send requests to exercise your data subject rights by post or email to our data protection officer: Maurten AB, Gibraltargatan 1 A, 411 32 Gothenburg, Sweden or privacy@maurten.com, stating your full name.

Right to complain:

If you suspect that we are processing your data unlawfully, you may of course seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. The right of complaint pursuant to Art. 77 GDPR is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the places mentioned above. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial review.