Source: https://www.conftool.com/cisbat2019/privacy.php
Timestamp: 2019-04-23 22:46:34+00:00

Document:
The organisers of CISBAT use ConfTool Pro to prepare and organize this event. The ConfTool software and the servers storing and processing your data are provided by ConfTool GmbH. All servers are hosted by ConfTool GmbH and are located in ISO 27001 certified data centers in Germany. All data is stored and processed on behalf of the organizers of tis event, they are the operators of this ConfTool installation (hereinafter also referred to as "we or "us"). Every event uses a separate installation and database and every ConfTool operator has only access to the data of his/her own installation (corresponding to the data separation principle of Art. 64 (3) BDSG 2018).
ConfTool GmbH will never use the data of any of the installation for other purposes as authorized by the ConfTool operator. ConfTool GmbH will never distribute any data to third parties without prior written authorization of the ConfTool operators. ConfTool GmbH is a German software service provider that considers the standards of the European GDPR and the German BDSG.
Who is responsible for the data collected by this ConfTool installation?
The data collected by this ConfTool installation are used and processed by the operator of this ConfTool installation. A link to the operator's contact details can be found in the legal notice in the lower left corner of every ConfTool page.
Some data are collected when you provide them to us. This could, for example, be data you enter into a form when you create a user account, submit a proposal or register as participant.
Other data are collected automatically by our IT systems when you access the ConfTool system. These data are primarily technical data such as the browser and operating system you are using or the date and time when you accessed the page. These data are collected automatically as soon as you access and use the ConfTool system.
The data is collected in order to guarantee the security and error-free provision of the ConfTool system and to be able to help users with questions regarding the usage of the system.
Please note that data transmitted via the internet (e.g. via e-mail communication) may be subject to security vulnerabilities. A complete protection of your data from third-party access is not possible.
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the country (or state) in which the operator of this ConfTool installation is headquartered. A list of the data protection officers of Germany and other EU countries and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
This ConfTool installation uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the operator of this ConfTool installation. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in the legal notice if you have further questions on the topic of personal data.
We hereby expressly prohibit the use of the contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The operator of this ConfTool installation reserves the right to take specific legal action if unsolicited advertising material, such as e-mail spam, is received.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit this ConfTool installation.
These data will not be combined with data from other sources. The data are mainly used to improve security and usability of the system and allows the ConfTool operators to help you when you have problems using the system.
The basis for data processing is Art. 6 paragraph 1, letter b of GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share these data without your permission.
We will, therefore, process any data you enter into the contact form only with your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal e-mail making this request is sufficient. The data processed before we receive your request may still be legally processed.
You can register with the ConfTool system in order to access functions offered here. The input data will only be used for the purpose of using the respective website or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.
To inform you about important changes such as those within the scope of this ConfTool installation or technical changes, we will use the e-mail address specified during registration.
We will process the data provided during registration only based on your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time with future effect. An informal e-mail making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will continue to store the data collected during registration for as long as you remain registered in this ConfTool installation. Statutory retention periods remain unaffected.
We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing this ConfTool installation (usage data) only to the extent required to enable you to access our service or to bill you for the same.
If you would like to receive news about this event, we require a valid e-mail address as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter. No additional data is collected or is only collected on a voluntary basis. We only use these data to send the requested information and do not pass it on to third parties.
We will, therefore, process any data you enter into the contact form only with your consent per Art. 6 (1) (a) GDPR. You can revoke consent to the storage of your data and e-mail address as well as their use for sending the newsletter at any time. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. e-mail addresses for the author or participant area) remain unaffected.
In the case of encrypted communication, any payment details you submit to this ConfTool installation or a payment service provider cannot be read by third parties.
This ConfTool installation accepts credit card payments via PAYONLINE gateway of EPFL (École polytechnique fédérale de Lausanne).
If you select credit card payment, the payment data you provide will be supplied to the gateway provider and the corresponding credit card networks and banks based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) GDPR (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.
Please note that we may update this statement if required.
This statement was last updated on 11/Dec/2018.

References: Art. 64
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6