Privacy Policy

Thank you for your interest in the MHP FESTIVAL 2023, an event organized by MHP Management- und IT- Beratung GmbH. Your privacy is an important concern for us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will be processed exclusively in compliance with the statutory provisions of the applicable data protection regulations.

With this privacy policy, we inform you about the processing of your personal data and about your rights in relation to your participation in our MHP FESTIVAL 2023, which will take place on site in Ludwigsburg.

Continuous technological development, changes to our services or the legal situation, as well as other reasons may require adjustments to our data protection information. We therefore reserve the right to change this data protection notice at any time and ask you to inform yourself regularly about the current status.

1. PERSON RESPONSIBLE FOR DATA PROCESSING AND DATA PROTECTION OFFICER; CONTACT

The Data Controller within the meaning of data protection laws, rules, and regulations is:

MHP Management- und IT-Beratung GmbH
Film- und Medienzentrum
Königsallee 49
D- 71638 Ludwigsburg
Phone: +49 (0)7141 7856-0
Email: info(at)mhp.com

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.

Data protection officer

You can reach our data protection officer at dataprivacy(at)mhp.com.

2. SUBJECT OF DATA PROTECTION

The subject of data protection is personal data.

Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, information such as name, e-mail address, telephone number, job title and/or role but also information that is relevant during the initiation or in the course of the business relationship.

3. COLLECTION AND PROCESSING OF PERSONAL DATA

Below you will find an overview of the purposes and legal bases of data processing in the context of the implementation of the events.

3.1 Data processing for the implementation of the event

Unless you are employed by MHP, the implementation of events is based on a contractual relationship. We process personal data if this is necessary for the preparation and implementation of this contract with you. The purpose is the preparation, implementation, and follow-up of the event. This also includes the execution of the necessary steps prior to the conclusion of the contract, the answering of your related questions and the transmission of offer as well as invoice information. The processing of personal data is permitted insofar as this is related to the purpose of the contract.

The data processing is based on Article 6(1)(b) DSGVO. In this context, you must provide those personal data that are necessary for the preparation and implementation of the event. Without this data, we will not be able to process your request or fulfill the contract.

We will delete the personal data if they are no longer required for the initiation and execution of a business relationship with you and there are no statutory retention obligations to the contrary.

Personal data of MHP employees is processed within the scope of the employment relationship; the legal basis here is Article 6 (1) (b) DSGVO in conjunction with Section 26 BDSG.

3.2 Data processing due to legal obligation

We also process your personal data in order to comply with legal obligations to which we are subject. The obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law. In this case, we must retain the data for up to ten years. The purposes of the processing result from the respective legal obligation; the processing usually serves the purpose of fulfilling governmental control and information obligations.

The data processing is based on Article 6(1)(c) DSGVO. If we collect data due to a legal obligation, you must thereby provide those personal data that are necessary for the fulfillment of the legal obligation. Without the provision, we might not be able to process your request.

We delete the data after the legal obligation ceases to apply, unless there are legal retention obligations, e.g. from commercial, tax, money laundering, financial or criminal law.

3.3 Data processing based on legitimate interests

We also process your personal data to protect legitimate interests of us or third parties. This is primarily the creation of photo documentation at events. The publication of data is based on consent in accordance with No. 3.4 of this declaration.

Further interests and at the same time purposes are: Ensuring technical operation, responding to non-contract-related inquiries, ensuring data security, ensuring data availability, and eliminating errors and malfunctions.

3.4 Consent to data processing

Some data processing requires consent from participants. This concerns, among others, the following processing operations:

• Publication of videos and photo shoots on websites,
• Publication of videos and photographs on social networks such as Facebook, Instagram, Xing, LinkedIn, YouTube,
• Use of videos and photo shoots in print publications.
• LinkedIn Live as well as streaming on the MHP website (www.mhp.com).

The legal basis for the data processing is Article 6(1)(a) DSGVO.

Regarding the publication of information on LinkedIn, you can find out more here: https://www.mhp.com/de/datenschutz-linkedin. We will delete the data immediately if you revoke your consent or if the data is no longer required for the purposes we pursue unless legal retention obligations prevent this.

You can revoke your consent at any time with effect for the future. In the event of revocation, your data on the website will be deleted; printed products will not be destroyed separately. In the event of a request for deletion or an objection, we will remove your data from the web pages and not use it for further printed products; the printed products will still be used until a new edition is published.

4. DATA DELETION AND STORAGE PERIOD

For the storage period of personal data, please refer to the respective chapter on data processing. In addition, the following generally applies: we store your personal data only as long as necessary for the fulfillment of the purposes or - in the case of consent - as long as you have not revoked the consent. In the event of an objection, we will delete your personal data immediately, unless its further processing is permitted under the relevant legal provisions. We will also delete your personal data if we are obliged to do so for legal reasons.

5. RECIPIENTS OF PERSONAL DATA

Internal access: Within MHP, only those persons have access who require this for the purposes stated above under 3. As a matter of principle, your data will not be transferred to third parties outside MHP unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your express consent to the transfer of your data.

External recipients: Service providers and partner companies will only receive your data if this is necessary to process your request or to fulfill the contract. In these cases, however, the scope of the transmitted data is limited to the necessary minimum.

If privacy policies of service providers are relevant here, please also refer to the respective privacy policy. The respective service company is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

Your data will be passed on to service companies if they act on our behalf and support MHP. Any processing of your personal data by commissioned service companies will be carried out within the scope of commissioned processing pursuant to Art. 28 DSGVO. You will only be given access to such personal information that is necessary for the performance of the respective activity. These service companies are prohibited from disclosing your personal information or using it for other purposes, in particular for their own promotional purposes. Insofar as these service companies come into contact with your personal data, we have ensured through legal, technical and organizational measures as well as through regular checks that they also comply with the applicable privacy policy. Your personal data will not be passed on commercially to other companies.

6. DATA PROCESSING IN THIRD COUNTRIES

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure before the transfer that, outside of exceptional cases permitted by law, either an adequate level of data protection exists at the recipients (e.g. through an adequacy decision by the European Commission, through Binding Corporate Rules or the agreement of so-called EU standard contractual clauses of the European Union) or your adequate consent has been obtained.

In particular, the publication of data on social networks may result in a transfer of data to a third country.

7. AUTOMATED DECISION-MAKING

We neither use automated decision-making nor profiling.

8. DATA SECURITY

MHP uses technical and organizational security measures to protect the data we have under our control against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

9. RIGHTS OF THE DATA SUBJECT

If personal data of you are processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the controller(s):

• Right to information according to Article 15 DSGVO
  You may request confirmation from us as to whether personal data concerning you are being processed by us. If we have processed data of you, you have further rights of access mentioned in Article 15 DSGVO.
• Right to rectification
  If the data we have collected from you is incorrect or incomplete, you may request that we rectify it without undue delay in accordance with Article 16 of the GDPR.
• Right to restriction of processing
  Under the conditions of Article 18 DSGVO, you may also, under certain circumstances, request the restriction of the processing of personal data concerning you. After restriction, your data may only be processed with your consent or for the assertion, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. We will inform you before the restriction is lifted.
• Right to erasure
  You may, if one of the grounds in Article 17(1) DSGVO applies, request that we delete the personal data concerning you without delay, unless there is an exception to the obligation to delete in accordance with Article 17(3) DSGVO.
• Right to information
  If you have asserted the right to rectification, erasure, or restriction of processing against us, we are obliged under Article 19 DSGVO to inform all recipients/recipients of your personal data of this, unless the communication is impossible or involves disproportionate effort. You also have the right to be informed about the recipients. You have the right to be informed about these recipients by the data controller.
• Right to data portability
  In addition, according to Article 20 DSGVO, you have the right to receive from us the personal data concerning you in a machine-readable format and to transfer the data to another controller/responsible party without hindrance, provided that the conditions of Article 20 (1) lit.a DSGVO are met, or to have your personal data transferred directly from us to another controller/responsible party, insofar as this is technically feasible and no freedoms and rights of other persons are thereby impaired. This right does not apply to processing of personal data necessary for the performance of a task carried out in the public interest, or for the exercise of official authority.
• Right of objection
  You have the right to object at any time to MHP processing personal data relating to you in accordance with Article 6 (1) f DSGVO. We will no longer process your personal data unless legitimate grounds for the processing override your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims.
• Right to revoke the declaration of consent under data protection law.
  You have the right to revoke your declaration of consent under data protection law at any time with an explanation to MHP. The revocation of the consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. The consent can be revoked at the following e-mail: festival@mhp.com.
• Right of complaint to the supervisory authority:
  You may also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or your country or the data protection authority responsible for us. You can also file a complaint with the competent supervisory authority if you believe that the processing You can do so by contacting the data protection authority responsible for your place of residence or your country or the data protection authority responsible for us.

Your contact with us and the exercise of your rights:

Furthermore, you can contact us free of charge if you have any questions about the processing of your personal data, your data subject rights and any consent you may have given. In order to exercise all of your aforementioned rights, please contact us at info@mhp.com or by post at the address given in section 1 above.

10. SERVICES OF THIRD PARTIES

Services of other providers, which are referred to in the context of our business relationship, were and are designed and provided by third parties. We have no influence on the design, content, and function of these third-party services. We expressly distance ourselves from all content of all third-party services. If necessary, please contact the providers of these third-party services directly for more information.

11. STATUS

This privacy policy is continuously adapted in the course of further development of the internet or our offer. We will announce any changes on this page in good time. In order to be informed about the current status of our data usage regulations, this page should be called up regularly.

The current version of this privacy policy applies. Status 18.04.2023.