Source: https://conferences.tu-ilmenau.de/frontend/index.php?page_id=5831
Timestamp: 2019-04-20 20:55:01+00:00

Document:
The TU Ilmenau hosts the software - Lombego Systems GmbH takes over the maintenance of the software and provides support.
In the area of card payment (debit/girocard/credit cards) Lombego Systems GmbH cooperates with Concardis GmbH (Concardis), Helfmann Park 7, D-65760 Eschborn - represented by its managing directors Mark Freese, Jens Mahlke and Luca Zanotti.
In addition to the purchase amount and date, card data is also transmitted to the above-mentioned company.
All payment data as well as data on possible chargebacks will only be stored as long as they are required for payment processing (including the processing of possible chargebacks and debt collection) and for combating abuse. As a rule, the data are deleted at the latest 13 months after their collection.
Beyond that, a further storage can take place, if and as long as this is necessary for the observance of a legal storage period or for the pursuit of a concrete abuse case. The legal basis for data processing is Art. 6 para. 1f) Basic Data Protection Regulation.
Furthermore, you have the right to complain to a supervisory authority (in Germany, the state data protection commissioners). Please note that the provision of payment data is neither required by law nor by contract. If you do not want to provide your payment data, you can use another payment method (for example, cash payment).
The TU Ilmenau does not store any data relating to payment processing.
The data is stored in log files to ensure the functionality of the website. In addition, the data enables us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Stored data in log files will be deleted after 14 days.
These cookies are mandatory for websites and their functions to function properly. Without these cookies, services such as subscriber registration, for example, cannot be provided.
These cookies make it possible to improve the comfort and performance of websites and to make various functions available. For example, language settings can be stored in function cookies.
These cookies collect information about how you use websites. Performance cookies help us, for example, to identify particularly popular areas of our Internet offering. This enables us to tailor the content of our websites more specifically to your needs and thus improve our services for you. The information collected with these cookies is not personal. For further information on collecting and evaluating the information, please refer to the section "Evaluation of usage data".
The conference management software offers users the opportunity to register by entering personal data. The data is entered into an input mask and transmitted to us and saved.
Mandatory data can be requested during registration. These must be complete and correct. If this is not the case, the registration is rejected. The system provides for a function that a data protection agreement must be actively confirmed before personal data is stored in the software.
When you enter company names or institute details as part of the registration process in the frontend, the system automatically proposes the company names that already exist in the system. This function is deliberately implemented and should prevent different spellings of the same company/institution and, for example, facilitate the creation of clean author specifications. As a rule, it is not possible to draw conclusions about specific persons from company details - personal data is not output anywhere via the system or the suggestion function.
Various payment options (e.g. invoice/bank transfer, credit card) are available for processing payment when attendees register for an event. Sensitive payment information is not stored in the conference management system itself. For this purpose, specially certified payment service providers are used who process and store the data. For this purpose, the user is directed directly to the pages of the respective provider. Further information on data protection can be found on the websites of the respective service provider.
The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. If registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
This is the case for those during the registration process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
Since the access data including address data can be used for further events such as follow-up events, these data are usually removed from the system within 2 years after the last login.
Please contact the responsible person by email or telephone (see information above).
(8) the existence of automated decision-making including profiling in accordance with Art.
they were collected or otherwise processed.
lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
against the processing pursuant to Art. 21 para. 2 DSGVO.
services offered pursuant to Art. 8 para. 1 DSGVO.

References: Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 8