Privacy policy for website operators based on GDPR specifications

We are delighted you are visiting our website and thank you for your interest in our company and our Service. Data protection and data security are very important to us with regard to the use of our Services. We would therefore like to take this opportunity to inform you about the personal data we collect and what we use this data for. We will use your personally identifiable information for a number of reasons, for example, to contact you by mail, phone or online regarding our services and events and for marketing, advertising and sale efforts. We may disclose personally identifiable information to trusted affiliates, independent contractors and business partners who will use the information for the purposes outlined before. We may disclose aggregate, anonymous data to investors and potential partners. Finally, we may transfer information collected from you in connection with a sale of our business. As far as any data are transferred to third parties outside the EU we will care for equivalent security measures. Please note that information submitted to us via the internet can at no time be fully secured. You may withdraw your permission to use your personal data at any time by giving us notice at info@cloudfest.com.

We kindly ask you to routinely read this privacy policy as changes to legislation or our internal corporate processes can necessitate an adaptation of its content. You can call up, save and print out this privacy policy at any time under "Privacy Policy".

§ 1 Controller and scope

The controller in the meaning of the EU General Data Protection Regulation (hereinafter: GDPR), other national data protection laws of member states and additional data protection regulations is:

WHD Event GmbH
Breite Str. 147-151
50667 Cologne
Germany
Tel.: +49 2203 9934-5900
E-Mail: info@cloudfest.com
Website: www.cloudfest.com

This privacy policy applies to the website(s) of WHD Event GmbH that is accessible via the domain www.cloudfest.com, www.worldhostingdays.com and various subdomains and connected domains (hereinafter: "our website").

§ 2 Data protection officer

The controller's external data protection officer is:

Herr Rechtsanwalt Dr. Karsten Kinast, LL.M
KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
50672 Köln
www.kinast.eu

§ 3 Principles of data processing

The term personal data refers to all information that relates to an identified or identifiable natural person. It includes, for instance, information such as your name, age, address, telephone number, date of birth, email address, IP address and user behavior. Information that does not allow us to establish a connection to you as a person (or would only allow such a connection with an unreasonable amount of effort), for instance anonymized information, is not classed as personal data. Processing personal data (for instance collecting, querying, using, storing and transferring personal data) always requires a legal basis or your consent. Processed personal data is deleted as soon as the purpose for which it was collected is fulfilled and statutory retention periods no longer apply.

Insofar as we process your personal data in order to provide specific services to you, the following serves to inform you of the concrete processes, the scope and the purpose of data processing, the legislation on which it is based and the duration of storage in each case.

§ 4 Individual processing activities

1. Website provision and use

a. Type and scope of data processing
When you call up and visit our website, we collect personal data that your browser automatically sends to our server. This information is stored temporarily in a so-called log file. When you use our website, we collect the following data needed for technical reasons to display the website and guarantee its security and stability:

  • IP address of the requesting computer
  • Date and time of access
  • Name of the URL and the requested file
  • The website from which access was made (referrer URL)
  • Your browser and possibly also your computer's operating system as well as the name of your access provider

b. Legal basis
Art. 6 Para. 1 (f) GDPR serves as the legal basis for data processing activities detailed in the preceding. Processing the specified data is an essential part of making the website accessible and therefore serves a legitimate interest of our company.

c. Duration of storage
The specified data will be deleted as soon as it is no longer needed to display the website. Collecting the data is essential to making the website available; storing the data in log files is essential to operating the website. The user therefore has no option to object to collection and storage. In some cases data may be stored for other purposes if required by law.

2. Registration / User account

a. Type and scope of data processing
Our website offers you an option to register as a user by submitting your personal data. We use your processed data to create a personalized user account for you that you can use to access specific content and services such as booking of events on our website. We process your email address so we can send you new login details should you happen to forget them. You can see in detail which personal data we process during registration from the following overview:

  • Title
  • First name
  • Last name
  • Job
  • Cell phone number
  • Company
  • Address
  • Email address

b. Legal basis
Processing the preceding personal data serves the fulfillment of a contract between you and WHD Event GmbH or the implementation of pre-contractual activities in accordance with Art. 6 Para. 1 (b) GDPR. You can withdraw your consent to the use of your personal data at any time with future effect by sending an email to the email address detailed in clause 1 above or to the data protection officer (cf. clause 2 above).

c. Duration of storage
Processed data will be deleted as soon as the registration is cancelled or changed on our website. It may also be necessary to keep your personal data on record after the fulfillment of a contract to meet contractual or legal requirements. In some cases data may be stored for other purposes if required by law.

d. Cancelling registration
You can cancel your registration as a user at any time. You can also request changes to be made to your personal data on record. To do so, please contact privacy@cloudfest.com. However, if the processed data is required for the purpose of contract performance or pre-contractual activities, it can only be deleted prematurely if contractual or legal obligations allow.

3. Newsletter

a. Type and scope of data processing
Our website offers you an option to subscribe to a free newsletter. We require the following details from you if you wish to subscribe:

  • Email address (required)
  • Name (optional)
  • Company (optional)

Your personal data will not be shared with any third party in connection with your newsletter subscription. Newsletter subscriptions are based on the so-called double opt-in method. This means we will only send you newsletters if you click on the link in a confirmation email sent to you to confirm your subscription.

b. Legal basis
Processing your email address in order to send you newsletters is based on the following voluntary declaration of consent pursuant to Art. 6 Para. 1 (a) GDPR: By entering my data and clicking the "Send" button, I declare my consent to having my email address processed for the purpose of receiving regular newsletters. I can cancel my newsletter subscription at any time by clicking on the corresponding link at the end of each newsletter.

c. Duration of storage
Your email address will be stored for as long as you are subscribed to the newsletter. Your email address will be deleted when you unsubscribe from the newsletter. In some cases data may be kept on record for other purposes if required by law.

4. Live events and conferences

a. Type and scope of data processing
We host many in-person conferences throughout the year (collectively "Events"). If you register for one of our Events, we will access the information in your user account to provide you with information and services associated with the Event, including but not limited to: Title, First name, Last name, Job, Cell phone number, Company, Address, Email address.

You also agree that photos may be taken at our Events, including those taken by our Exhibitors or other 3rd party vendors. If you are a presenter at one of our Events, we will collect information about you including your name, employer and contact information, and photograph. We may also make and store a recording of your voice and likeness in certain instances.

When you attend our conferences, you will be provided with an Event badge that includes a scannable QR code containing your Event registration information for easy networking if you choose to use our Event mobile app ("Mobile App"). Your use of the Mobile App is entirely voluntary. The chats are saved on our server in Straßburg and is secured. The communication between the server and your device is end-to-end encrypted.

Attendees or Exhibitors at our Events may wish to scan your badge so they can contact you for their own commercial purposes. By allowing an attendee or Exhibitor to scan your badge, you are consenting to provide the attendee or Exhibitor with your registration information. If you do not wish to be contacted, do not let them scan your badge.

b. Legal basis
Art. 6 Para. 1 (b) GDPR for registration data; Art. 6 Para. 1 (a) GDPR for Mobile App consent.

c. Duration of storage
Processed data will be deleted as soon as the registration is cancelled or changed on our website or mobile app. All data related to the live events and conferences will be deleted 30 days thereafter; however, in some cases, data may be stored for other purposes if required by law.

5. Contact form

a. Type and scope of data processing
You can get in touch with us via a contact form made available to you on our website. When you make use of the contact form, the following personal data will be collected and processed: Name, Email address, Company, Message content. We require your email address in order to allocate your inquiry and send you a response. Your personal data will not be disclosed to any third party when you use the contact form.

b. Legal basis
Art. 6 Para. 1 (a) GDPR — voluntary consent. You can withdraw your consent at any time with future effect by contacting privacy@cloudfest.com.

c. Duration of storage
We will delete the personal data collected from you via the contact form as soon as we have dealt with your inquiry and brought the subject matter to a close. In some cases data may be kept on record for other purposes if required by law.

6. Signup form

a. Type and scope of data processing
Users filling in the order form will enter the following personal data: Title, First name, Last name, Job, Cell phone number, Company, Address, Email address. The following additional personal data will be required if you wish to be called back: Telephone number.

b. Legal basis
Art. 6 Para. 1 (b) GDPR — contract fulfillment or pre-contractual activities.

c. Duration of storage
Your data will be routinely deleted insofar as the purpose of your communication no longer applies and data storage is no longer necessary.

6a. Signup form for CloudFest / CloudFest Academy or other CloudFest events

a. Type and scope of data processing
Users filling in the order form will enter the following personal data to participate in CloudFest, CloudFest Academy or other CloudFest events: First name, Last name, Company, Email address, Xing / LinkedIn Profile.

On our website, we offer you the opportunity to generate a Speaker/Attendee Headshot to promote your participation in this event. In doing so, we process: First and last name, Job position, Company, E-mail address, and the image that you have uploaded. The personal data you provide will be processed exclusively for the generation of the headshot and deleted after completion, at the latest after 24 hours. For the generation of the headshot, we use the RenderForm tool of the external service provider Jakub Pomykała Software (Małopanewska 10 m.22 54-212, Wrocław, Poland). For more information: renderform.io/legal/privacy-policy.

b. Legal basis
Art. 6 Para. 1 (b) GDPR for registration; Art. 6 (1) lit. f GDPR for email verification of approval status.

7. Contact options on our website

Our website offers you various options to contact us by email:

  • General Contact: info@cloudfest.com
  • Sales: sales@cloudfest.com
  • Marketing: marketing@cloudfest.com
  • Operations: events@cloudfest.com
  • Hotels: hotels@cloudfest.com
  • Press: press@cloudfest.com

Legal basis: Art. 6 Para. 1 (f) GDPR — legitimate interest in communication. Data will be routinely deleted insofar as the purpose of your communication no longer applies.

§ 5 Disclosing data

We will only disclose your data to third parties if:

  • You have explicitly granted your consent in accordance with Art. 6 Para. 1 p. 1 (a) GDPR
  • To do so is lawful and necessary to fulfill our contractual obligations towards you in accordance with Art. 6 Para. 1 p. 1 (b) GDPR
  • We are obligated to do so by law in accordance with Art. 6 Para. 1 p. 1 (c) GDPR
  • Disclosure is necessary to protect our legitimate interest or to assert, exercise or defend legal claims in accordance with Art. 6 Para. 1 p. 1 (f) GDPR and there is no reason to assume that you have an overriding interest in non-disclosure worthy of protection

§ 6 Use of cookies

Our website uses cookies. Cookies are small files that are sent to and stored by your browser when you visit our web pages. Certain technical cookies are essential as some of our website's functions will not work without them. Other cookies enable us to carry out a range of analyses.

Our website uses different kinds of cookies:

  • Transient cookies: Automatically deleted when you close your browser.
  • Persistent cookies: Stored in your browser for a longer time period. You can delete these using your browser settings.
  • Required cookies: Required for technical reasons to enable you to visit our website and use the functions we provide, including WordPress and security compliance.
  • Performance-related cookies: Enable us to analyze the use of our website and improve its performance and functionality.
  • Marketing and social media cookies: Make it possible to show you offers that correspond to your interests. Third parties receiving data include Facebook, Twitter, LinkedIn, B2B Media, and HotJar.

Legal basis: Art. 6 Para. 1 (f) GDPR; Art. 6 Para. 1 (a) GDPR if consent granted via cookie banner.

Most browsers are set to accept cookies by default. You can configure your browser so that it only accepts certain cookies or none at all. Please note that you may not be able to use all the functions of our website if its cookies are deactivated in your browser settings.

§ 7 Tracking and analysis tools

We use tracking and analysis tools to ensure our website is continuously optimized and its design is suitable for its purpose. Tracking measures also enable us to collect statistical data with regard to user behavior on our website. These interests justify the use of the tools described below in accordance with Art. 6 Para. 1 p. 1 (f) GDPR.

1. Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA. Google Analytics uses cookies. The information generated by the cookies about your use of the website is usually transmitted to and stored on a Google server in the United States. This website uses Google Analytics with the "anonymizeIp" extension — the last 8 bits of IP addresses are deleted so that your IP address is anonymized when collected (IP masking). You can prevent collection by downloading the browser plug-in available at: tools.google.com/dlpage/gaoptout.

2. Google AdWords

We use Google AdWords conversion tracking. Clicking on an advertisement placed by Google will install a conversion tracking cookie on your computer, valid for 30 days, not used for personal identification. The data collected serves to create conversion statistics. Users are not personally identified. You can deactivate conversion tracking cookies by adjusting your browser so that only cookies from "googleadservices.com" are blocked.

3. B2B Media

This offer uses Selfcampaign, a service by B2B Media Group EMEA GmbH. B2BMG uses cookies and Web Beacons to collect anonymized usage data. Information obtained is transferred to a B2BMG server in Germany. IP addresses are stored anonymously by deletion of the last number block. Contact: B2B Media Group EMEA, Bahnhofstraße 5, 91245 Simmelsdorf, Germany. Privacy: b2bmg.net.

4. MyFonts Inc.

We use fonts from MyFonts Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. Due to license terms, the number of page views is transferred to MyFonts for statistical purposes via an integrated script. By connecting to MyFonts, it gets temporary knowledge of your IP address. All transmitted data is anonymous and refers only to our customer ID at MyFonts. Privacy policy: monotype.com.

5. HotJar

For web analysis and optimization, we use technology provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Hotjar tools allow us to see how far users scroll and provide heatmaps showing where users clicked. Language settings, operating system, screen resolution and browser provider are also transmitted. Privacy policy: hotjar.com/privacy. Opt-out: hotjar.com/opt-out.

6. Matomo

We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. Matomo does not transmit any data to external servers. We have deactivated the use of tracking cookies within Matomo. Your IP address is an anonymous identifier for us; we have no technical way of identifying you as a logged-in user with it. You remain anonymous as a user. The following data is processed: location data, system data, length of stay. The software runs exclusively on our own servers. The data is not passed on to third parties. Legal basis: Art. 6 Para. 1 lit. f) GDPR.

§ 8 Hyperlinks

Our website contains so-called hyperlinks to websites operated by other providers. Activating a hyperlink will transfer you directly to the website of the corresponding provider. We cannot accept any liability for the confidential use of your data on these websites as we have no influence on the compliance of these companies with data protection regulations. Please refer directly to the website concerned to obtain information on how your personal data is handled.

§ 9 Right of access

The GDPR stipulates that you as a data subject whose data is processed have the following rights:

  • Art. 15 GDPR: Request information with regard to your personal data processed by us, including processing purposes, data categories, recipients, storage periods, and the existence of automated decision-making.
  • Art. 16 GDPR: Demand the immediate correction of incorrect or incomplete personal data stored by us.
  • Art. 17 GDPR: Request the erasure of your personal data stored by us insofar as processing is not required for freedom of expression, legal obligation, public task, or legal claims.
  • Art. 18 GDPR: Restrict our use of your personal data if you contest the accuracy of the data or the processing is unlawful.
  • Art. 20 GDPR: Receive the personal data concerning you in a structured, commonly used and machine-readable format, and have the right to transmit that data to another controller.
  • Art. 7 Para. 3 GDPR: Withdraw previously granted consent at any time with future effect.
  • Art. 77 GDPR: Lodge a complaint with a supervisory authority in your Member State of habitual residence, place of work or place of the alleged infringement.

§ 10 Right to object

In relation to the processing of your personal data on the basis of legitimate interests in accordance with Art. 6 Para. 1 p. 1 (f) GDPR, you have the right pursuant to Art. 21 GDPR to object to your data being processed on grounds relating to your particular situation or if your objection concerns direct marketing. With regard to direct marketing, you have a general right to object without providing a specific reason and we are required to take appropriate action.

§ 11 Data Portability

You may request a copy of your personal data in an electronic format that you can take to other service providers by contacting us at privacy@cloudfest.com. We will respond to your request within 30 days.

§ 12 Account Closure and Data Deletion

You may request to close your account according to the following conditions. All bookings and services must be cancelled or finished prior to closure. If there are any active bookings or services in the account, the account cannot be closed. You will no longer be able to log into your account after it is closed. Upon closing your account, it may take up to 30 days for account data to be deleted. After deletion, you will no longer be able to access your account and your account will be unrecoverable. Data that is necessary for the bookings or services you have placed may be retained if it is required for our legitimate business purposes or legal or contractual record keeping requirements.

§ 13 Data safety and security measures

We undertake to protect your privacy and to treat your personal data confidentially. We have implemented extensive technological and organizational measures to prevent the manipulation, loss or misuse of your personal data stored on our servers. These measures are routinely reviewed and adapted to reflect technological developments. They include the use of acknowledged encryption methods (SSL or TLS).

Please note, however, that the structure of the internet makes it possible for persons and institutions outside of our sphere of control to disregard data protection regulations and the security measures detailed in the preceding. In particular, data that is transmitted without prior encryption – for instance by email – can be read by third parties. We have no technological influence in this regard. It is the user's responsibility to protect the data provided by them from misuse by way of encryption or other suitable means.