Privacy policy for online events

Status: December 2023

This Privacy Policy describes how we, exoIQ GmbH, Jaffestraße 12, 21109 Hamburg, Germany (hereinafter "ExoIQ", "we", "us"), responsible for data processing, process information about you as a participant in the online event for the product demonstration of the exoIQ - Shoulder Exoskeleton S700 (hereinafter "Online Event").

You are receiving this Privacy Policy because ExoIQ processes information about you that constitutes personal data and ExoIQ considers the protection of your personal data and privacy to be very important.

‍

1. commitment to data protection

Personal data is all information about personal or factual circumstances relating to an identified or identifiable person. In principle, we will only use your personal data in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (hereinafter "GDPR"), and only as described in this Privacy Policy. However, we reserve the right to make additional use of this data if this is permitted or required by law or is necessary to support legal or criminal investigations. In this case, we will inform you again about this further data processing, if required by law, and obtain your consent.

‍

2. processing of personal data, purposes and legal bases

‍

2.1 Registration for the online event

In order to participate virtually in the online event, you must first register on the event platform. As part of this registration, you must provide personal data on the event platform in the form of your first and last name, your email address, your position and your organization (hereinafter "participant data") in order to gain access to the online event by logging in.

We process the participant data provided during your registration exclusively to enable your registration and participation in the online event (log-in).

The legal basis for the processing of your personal data is the fulfillment of our contractual obligations (Art. 6 para. 1 letter b GDPR and - if applicable - § 26 BDSG), which consist in particular of registering you for the online event. The provision of your participant data is a prerequisite for participation in the online event.

‍

2.2 Procedure of the online event

‍

a. Sending the event links

The online event will take place as a virtual event in live stream format. For this purpose, an event link will be sent to you in advance to the e-mail address you provided during registration. The event link will take you directly to the online event for which you have registered in advance (see section 2.1. of this privacy policy).

The legal basis for the processing of your data is the fulfillment of our contractual obligations, which consist in particular of providing you with access to the event platform (Art. 6 para. 1 letter b GDPR)

‍

b. Organization of the event and processing of technical data

As part of the online event, we use Microsoft Teams to conduct online events. We use the Team Meetings mode in Microsoft Teams. In Team Meetings, audio input and video recordings are prevented by our Microsoft Teams settings. The event is never recorded.

Furthermore, we collect and process your technical access data, which your Internet browser automatically transmits to us for technical reasons in order to provide the event platform, as part of the online event. Depending on the access protocol used, the log data record contains general information with the following content: Your session data (user behavior, dwell time), your abbreviated or unabridged IP address, your browser version, your operating system, your website-specific settings.

The legal basis for the processing of your data is the fulfillment of our contractual obligations, which consist in particular in providing you with the event platform with the necessary functions and enabling the registration and execution of the online event (Art. 6 para. 1 letter b GDPR) or the protection of our legitimate interests (Art. 6 para. 1 letter f GDPR), which consist in particular in providing you with the event platform in a user-friendly format.

‍

c. Q&A function

During the online event, participants have the opportunity to ask written questions in the Q&A window. In the backend, your question will be forwarded with your name to the director or speaker or answered directly by a member of staff. Your question will not be visible to other participants. If the question cannot be answered during the online event due to time constraints, the question and the answer will be processed after the online event.

The legal basis for the processing of your personal data is the fulfillment of our contractual obligations (Art. 6 para. 1 letter b GDPR and - if applicable - § 26 BDSG), which consist in particular of making the Q&A function available to you. The provision of your question and your name is a prerequisite for the use of the Q&A function.

‍

d. Data processing by Microsoft

Microsoft Teams is a service offered by the European Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, a subsidiary of Microsoft Corporation based in the USA. We have contractually obligated Microsoft to comply with the General Data Protection Regulation (GDPR) via a so-called data processing agreement (see also section 3 below).

Please note that Microsoft processes your personal data when you register directly with Microsoft using a user account to use Microsoft services, such as Microsoft Teams. However, you can also use the event platform without registering in advance with Microsoft using a user account by visiting the event platform directly using the event link sent to you by us. Furthermore, Microsoft reserves the right to process customer data collected in the course of using Microsoft services for its own legitimate business purposes. We have no influence on this data processing by Microsoft. To the extent that Microsoft Teams processes personal data in connection with the registration of user accounts or legitimate business purposes, Microsoft is an independent controller for these data processing activities and as such is responsible for compliance with all applicable data protection regulations. If you require information about the processing by Microsoft, please refer to Microsoft's privacy policy, which can be found at the following link: https://privacy.microsoft.com/en-us/privacystatement.

‍

e. Dispatch of information

We use your participant data to send you additional information about the online event, in particular the presentation documents, by e-mail after the online event.

The legal basis for the processing of your data is the fulfillment of our contractual obligations, which consist in particular of sending you information about the online event by e-mail (Art. 6 para. 1 letter b GDPR).

‍

3. disclosure of personal data

We will not sell, pass on or otherwise disclose your personal data to third parties, except to the group of persons named in this privacy policy. In the course of our activities, your personal data may be accessed by or disclosed to the following categories of recipients if this is necessary for the organization and implementation of the online event:

- our personnel (including personnel, departments or other companies within the TTS Group); and

- our IT system providers, cloud service providers, database providers and consultants.

ExoIQ sometimes uses external service providers for the processing of your personal data, who act as processors (Art. 4 No. 8 GDPR). External service providers support us, for example, in technical operation and support, data management, the provision and delivery of services, marketing and website analysis. The service providers commissioned by ExoIQ process your data exclusively in accordance with our instructions. ExoIQ remains responsible for the protection of your data, which is ensured by strict contractual regulations, technical and organizational measures and additional controls by us.

As part of the online event, we use the following external service providers in particular as processors in accordance with Art. 4 No. 8 GDPR:

- Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland for the provision and use of the "Microsoft Teams" event platform.

Personal data may also be processed in other ways and also disclosed to third parties if we are legally obliged to do so - e.g. by court order (Art. 6 para. 1 letter c GDPR) or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to safeguard legitimate interests (Art. 6 para. 1 letter f GDPR), e.g. to provide joint content, products and services of the TTS Group.

‍

4. data transfers to third countries

As a rule, our external service providers process your personal data within the EU or the EEA. Third countries are countries outside the European Union (EU) or the European Economic Area (EEA) that do not have a level of data protection comparable to EU data protection law. In the event that your personal data is transferred to a service provider based in a third country and processed there, ExoIQ ensures the protection of your personal data by means of suitable guarantees, such as the conclusion of standard data protection clauses. If you would like to find out which suitable guarantees we have taken in individual cases, please contact us using the contact details provided in section 7.

‍

5. storage period

Your personal data will only be stored by us for as long as is necessary for participation in the online event or - if there are additional statutory retention periods (e.g. in the German Commercial Code and the German Fiscal Code) - for the duration of the statutory retention period. In a few exceptional cases, your data may also be stored beyond this period if, for example, storage is necessary in connection with the enforcement of and defense against legal claims in favor of ExoIQ.

‍

6. your data protection rights

In accordance with the applicable data protection law, you are entitled to the following rights in accordance with the legal requirements:

- The right to access your personal data processed by us and, if you believe that the information concerning you is inaccurate, out of date or incomplete, to request that it be corrected or updated;

- the right to request the erasure of your personal data or the restriction of processing to certain categories of data;

- the right to object to the processing of your personal data in whole or in part;

- the right to opt-out of a communication channel used for direct marketing purposes; and

- the right to request the portability of your data, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice in a structured, commonly used and machine-readable format without hindrance from us and in compliance with your confidentiality obligations.

- Right to object pursuant to Art. 21 (1) GDPR: You also have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on legitimate interests pursuant to Art. 6 (1) (f) GDPR. We will not process your personal data following an objection unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (see Art. 21 (1) GDPR, so-called "limited right to object"). In this case, you must provide reasons for the objection that arise from your particular situation.

To enforce your data protection rights, you can contact us at any time using the contact details provided in section 7 with reference to the online event.

You also have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your personal data is not lawful. The supervisory authority responsible for ExoIQ is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str 22, 20459 Hamburg, phone +49 (0)40/428 54 - 4040, fax: +49 (0)40 /428 54 - 4000, e-mail mailbox@datenschutz.hamburg.de.

‍

7. contact details

If you have any questions about the processing of your personal data or would like to exercise your data protection rights mentioned above, please let us know with reference to the online event using the following contact details:

by post: exoIQ GmbH

Jaffa Street 12

21109 Hamburg

Germany

by e-mail: datenschutz@tts-company.com.

You can also reach our data protection officer under these contact details with the addition "Data Protection Officer".

‍

8. reservation of right of amendment

We reserve the right to amend this privacy policy in compliance with legal requirements. This may be necessary, for example, to comply with new legal provisions, to take account of organizational changes or due to changing technical circumstances (e.g. on the part of one of our service providers). We will inform you of any changes to this privacy policy and treat your personal data at all times in accordance with the version of the privacy policy that was in force at the time this information was collected.

‍

‍

‍