Privacy Notice

Information regarding data protection to be provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)
 

MCI takes the protection of your personal data very seriously. Our goal is to use different formats (in-person, digital, hybrid) to provide you with a convenient range of training, while also protecting your right to informational self-determination and ensuring the protection of your privacy. We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) for the sole purpose of complying with contractual obligations (point (b) of Article 6(1), first clause GDPR), on the basis of your consent (point (a) of Article 6(1), first clause GDPR) or on the basis of legal requirements (point (c) of Article 6(1), first clause GDPR), as well as when we have a legitimate interest (point (f) of Article 6(1), first clause GDPR). The following Privacy Notice gives you an overview of when we store which data, for which purpose we use it and how we ensure the protection of your personal data.

I. The controller’s contact details
MCI Deutschland GmbH
Markgrafenstraße 56, 10117 Berlin, Germany
Tel.: +49 30 20459-0
Email: datenschutz@wearemci.com

II. The data protection officer’s contact details
Data protection officer of MCI Deutschland GmbH
Mr Thomas Werning
Dieselstraße 12, 32791 Lage, Germany
Tel.: +49 5232 98047-00, E-Mail: dsb-mci-bi@werning.com

III. Data processing

1.           Which personal data do we process?

We process the following personal data:

• First name, surname, academic title
• Postal address, email addresss, telephone number, mobile number
• Company, department
• Profession
• Financial and bank details, but only if they are required for remuneration for our services or for the reimbursement of expenses
• IP address
• if you are a supplier to the forging industry, a manufacturer of forgings or none of those, postal address, telephone, fax and your email address.

2.           Purpose of the processing

2.1         Purpose of the processing when participating in events on-site

Data is processed in order to host and arrange training events, conventions, conferences and other seminar services within the scope of the performance of our contracts with our participants or to perform pre-contractual measures, which are carried out on request. The purposes of data processing are primarily based on the specific service (e.g. medical specialist course, further training course, specialist convention, one-day seminar). If necessary, we continue to process your data past the actual fulfilment of the contract on the grounds of our legitimate interests (e.g. exercise of legal claims and defence in the event of legal disputes). Data processing may also be carried out on the basis of your consent or on the grounds of a legitimate interest on our part.

We process photos, videos and audio recordings of you during the event in order to broadcast the event to third parties live on a conference or streaming platform and/or to make all or part of the event available to third parties on demand via various channels. These channels are the MCI online media library, conference platforms and platforms for further training events, as well as social media (Instagram, Facebook, Twitter).

We also process photos and videos for the purposes of documentation and illustration, both on various online channels and for printed materials (e.g. training brochures). Examples of the online channels include the MCI homepage and training platforms.

2.2         Purpose of the processing when participating in virtual events

Data is processed in order to host and arrange digital and hybrid training events, conventions, conferences and other seminar services within the scope of the performance of our contracts with our digital participants or to perform pre-contractual measures, which are carried out on request. The purposes of data processing are primarily based on the specific service (e.g. online specialist conference, online medical specialist course, online seminars), either digital or hybrid. If necessary, we continue to process your data past the actual fulfilment of the contract on the grounds of our legitimate interests (e.g. exercise of legal claims and defence in the event of legal disputes). Data processing may also be carried out on the basis of your consent or on the grounds of a legitimate interest on our part.

We process photos, videos and audio recordings to enable us to provide you with a comprehensive portfolio of online services when participating in digital events, particularly to enable you and/or to make it easier for you to participate in video conferences or to communicate in chatrooms/breakout rooms.
 

3.           Data categories

3.1         Data processing in companies

3.1.1      General

We process personal data when you register (online, e.g. when requesting event materials) and/or when you sign up for an event.
When signing up, you have the option to enter a different billing address.

Furthermore, every time a user visits a page we operate, data pertaining to this process is stored in a log file. This data is used for analyses for statistical purposes; it is not merged with the personal details provided by the user.
Specifically, the following types of data are stored each time a page is viewed:

• Name of the file retrieved
• Date and time of visit
• Data volume transmitted
• Message as to whether access was successful
• Description of the type of web browser used
• Operating system used

3.2     External service providers

We sometimes use external service providers to carry out our duties. You can find a list of the contractors and service providers with which we have permanent business relationships in the attached overview.
The data collected during registration is also used for our own statistical purposes and is also encrypted and sent to our service providers and sponsors, provided that consent has been given.

3.3     Other recipients

We do not transfer your personal data to any other recipients.
 
4.       Legal basis

In accordance with point (a) of Article 6(1), first clause GDPR, we use the photos, videos and audio recordings of you during events on the basis of your consent to the processing of personal data concerning you.
The processing of the specified data for the purpose of performing our contracts with our participants or for performing pre-contractual measures is also carried out on the basis of points (b) and (f) of Article 6(1), first clause GDPR. Processing is also required to implement the agreement.

Our legitimate interest lies in an essential and appropriate customer relationship with you. We would like to use direct marketing to provide you with detailed information on other available training opportunities following your event and to encourage you to take part in these, as well as to send you offers for our services.

You have the right to object to the processing of data concerning you that is being carried out in accordance with point (f) of Article 6(1), first clause GDPR at any time and to state the reasons for this. The objection can be made in any form and should be directed, where possible, to: datenschutz@mci-group.com. If you do object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
 

5.     Right of withdrawal

You can withdraw consent that you have given at any time with effect for the future; this does not affect the lawfulness of the processing carried out on the basis of the consent prior to withdrawal. Consent granted by law remains unaffected by a withdrawal of consent, for example because the recording of the event constitutes an image from contemporary history or you have only appeared as an accessory or participated in a similar convention or event (legal basis point (f) of Article 6(1), first clause GDPR and Section 23(1) of the German Art Copyright Act (Kunsturhebergesetz, KUG)). If a claim for erasure is made, the recordings are removed from our own web pages or rendered unrecognisable (e.g. through pixelation) and no longer used for new printed materials. Information published on the Internet may remain accessible through archiving services even after it has been erased from the original web page. According to the information currently available, it is no longer possible to erase photos and data on social media services; instead, they are simply no longer publicly displayed.

6.     Duration of storage

We erase your personal data as soon as it is no longer required for the aforementioned purposes. There are different storage periods depending on the nature of the personal data:

6.1      Billing data (first name, surname, academic title and postal address): max. 10 years (retention of encrypted data only)
6.2      Event organisation data:
6.2.1   Images, videos and audio recordings of on-site events: 3 months to max. 1 year (depending on the media library program)
6.2.2   Images, videos and audio recordings of virtual events: 3 months to max. 1 year
6.2.3   Other essential data for hosting the event (IP addresses, email addresses, telephone numbers, mobile numbers, fax numbers): Erased immediately after the event
6.3      Data serving as proof of mandatory training (affiliation with a particular occupational group, membership, company, department, profession, professional function, specialist area/specialism, EFN if applicable): 3 years
6.4      Data used for direct marketing (email addresses, telephone numbers, mobile numbers, fax numbers, postal addresses): 3 years
6.5      Financial and bank details: Erased immediately after payment

7.     Sources of personal data

We obtain the data collected from

• Your registration
• or from our own database.
• Participant data from previous training events

VI. Overview of service providers

Overview of the service providers of the controller in accordance with the legal obligation to provide information