dataprotection - Registration Principles

1. Information about the collection of personal data

With this privacy policy we intend to inform you about the collection of personal data when using our website. Personal data means any information relating to an identified or identifiable natural person (“data subject”), e.g. name, address, email addresses, user behaviour.
The controller pursuant Art. 4 (7) GDPR is the PRpetuum GmbH, Hohenzollernstraße 27, 81679 Munich, Germany, Telephone: +49 (089) 24 44 76-0, E-mail registration@registration-principles.de, (see our legal notices).

Data Protection Officer:
Peter Rother
InfiniSafe GmbH
Datenschutz und IT-Sicherheit
Richard-Strauss-Straße 71
81679 München

If for some activities we use subcontractors or external service providers, we inform you in detail below about the respective activities. In doing so, we also name the specified criteria for the storage duration.

2. General information on the content of this policy

Possible purposes of processing

• Contact requests and communication.
• Registration for virtual conference „Principles of Successful Patient Involvment in Cancer Research – The Way Forward“.

Legal bases for processing personal data (legal permission based on Art. 6 GDPR) Art. 6 (1) (a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfil a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 (1) (b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. In that case, the processing would be based on Article 6 (1) (d) GDPR. Ultimately, processing operations could be based on Article 6 (1) (f) GDPR. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, GDPR).

Transmission to third countries and third parties
If we process data in a third country, i.e. outside the European Union (EU) or the European Economic Area (EEA), or if processing takes place in the context of using the services of third parties or of disclosing or transferring data to other persons, bodies or companies, this is only done in accordance with the legal requirements.
Subject to express consent or a contractually or legally required transfer, we will only process or have processed the data in third countries with a recognised level of data protection, a contractual obligation through so-called EU standard protection clauses, in the case of certifications or binding internal data protection regulations in accordance with Art. 44 - 49 GDPR.

Storage duration
Regarding the storage duration of collected data, you will find more information about the individual offers. Insofar as continued storage is required for legal reasons, we will restrict your data until the expiration of these retention periods for further use and delete them as the deadlines expire.

Obligation to provide personal data
We will specify if we are under any obligation to provide personal data to third parties like public authorities or other private entities.

Data collected
In this section, you will find a description of the personal data collected with regard to a specific processing activity.

Recipients / Category of recipients
In this section, you will find all recipients of the collected personal data with regard to a specific processing activity.

Data subject´s rights
In this section, you will find a description of data subject´s rights at processing activity of collected data. Concerning this, you will find more information about this individual setting and contact options of provided service.

Automated decision making and profiling
We will inform you in the context of this privacy policy if we use automated decision making procedures including profiling.
For this purpose, you will receive information about the logic involved, the scope and intended effects of such processing on the data subject.

3. Processing activities

In addition to the purely informative use of our website, we offer various other options that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service or respond to your request.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Personal data will not be forwarded to third parties according to legal permission based on Art. 6 DS-GVO. For example, we may pass on your data to third parties if contract conclusions or similar services are offered by us together with partners. You will receive more information on this when you provide your data or below in the description of the offer.

Cookies
Cookies are small text files in which contain personal data. Cookies can be transmitted to a page when called up and thus enable the user to be identified. Cookies help to simplify the use of Internet pages for users.

We distinguish between cookies that are necessary for the technical functions of the website and those which are not necessary for the functionality of the website.

We want to allow you to make an informed decision for or against the use of cookies, which are not necessary for the technical functions of the website. Please note, that if you reject marketing cookies, you will receive less advertising tailored to your interests. However, the use of the website remains possible to the full extent.

We inform you here about the type and scope of the use of cookies on our pages:

The use of our website is generally possible without cookies that serve non-technical purposes. By choosing (Do-not-track, Tracking-Protection-List and restrict the storage of third-party cookies) in your browser, you can prevent being tracked through cookies. In addition, we recommend you check your settings unless you expressly wish to do so.

Please note: When deleting cookies, any up-front set objection cookies (opt-out cookies) will also be removed, so that you agree again to the used cookies.

Cookies that are mandatory for the use of the site: Session cookie

A session cookie, contains a randomly generated unique identification number, a so-called session ID. This is required to save the login status. The session cookies used on this website are deleted by the server when you end the session.

Under the links below you can find out how to manage (including disabling) the cookies on the main browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

3.1 Informational use of this website

If you only use our website for informational purposes (if you do not register or otherwise provide us with information), we will only collect the personal data that your browser transmits to our server (server log file). To enable core functions such as page navigation and access to protected areas we use essential cookies. Without these cookies, the website cannot run properly. If you wish to view our website, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety.

Data collected

• IP adresse
• Date and time of the request
• Time Zone diffrence to Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Amount of data transferred in each case
• Referrer URL (Website from which the request comes)
• Browser type
• Operating System and ists interface
• Language and version of the browser software
• Internet service provider of the accessing system

Objectives of the data processing
The PRpetuum GmbH uses the server log file to monitor the technical operation of this website. The functional cookies are required to make our online services available to you without restriction.

Legal Basis
The legal basis for the use of server log file and essential cookies is our legitimate interests according to Article 6 (1) (f) GDPR.

Recipients / Category of recipients
The recipient of the collected data is the PRpetuum GmbH.

Transmission to third countries
Personal data will not be transferred to third countries.

Storage duration
The storage period of the server logfile is 30 days.
Functional cookies are stored only for the duration of the current session.

Data subjects’ rights specific to this processing activity
If you don’t want cookies stored on your computer, you will be asked to disable the option in your browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this website.

3.2 Contact by e-mail, telephone or fax

Visitors of our website https://www.registration-principles.de have several options to send us enquiries via their e-mail programme, by telephone or fax.

Please note that e-mails are generally not encrypted form and that our customers must ensure on their own. We cannot take any responsibility for the transmission path of the inquiry between the sender and the reception on our server and therefore recommend rather using the postal way.

Data collected
• E-Mail (mandatory by e-mail)
• Phone number (mandatory by phone)
• Fax number (mandatory by fax)
• Your Message (voluntary)

Objectives of the data processing
The objectives of the data processing is to answer the request.

Legal Basis
The legal basis for processing your contact request is your consent pursuant to Article 6 (1) (a) GDPR.

Recipients / Category of recipients
The recipient of the collected data is the PRpetuum GmbH.

Transmission to third countries
Personal data will not be transferred to third countries.

Storage duration
If you have not consented to further use, we will delete your data after answering your request.

Data subjects’ rights specific to this processing activity
For further questions regarding data storage, please contact the person responsible for data processing: PRpetuum GmbH, E-mail: registration@registration-principles.de.

3.3 Registration for conference

Visitors of our website can register via the provided registration form for the free participation in our event: "Principles of Successful Patient Involvement in Cancer Research – The Way Forward". During registration, only the personal data provided during the registration process will be collected.

Data collected
• Titel (mandatory)
• Academic Titel (mandatory)
• First Name (mandatory)
• Last Name (mandatory)
• Email Adress (mandatory)
• Institution (mandatory)
• Country (mandatory)

Objectives of the data processing
We will use your data to process your registration.

Legal Basis
The legal basis for processing your contact request is your consent pursuant to Article 6 (1) (a) GDPR.

Recipients / Category of recipients
The recipient of the collected data is the PRpetuum GmbH.

Transmission to third countries
Personal data will not be transferred to third countries.

Storage duration
Your data will be deleted after the legal obligation to provide proof has expired.

4. SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. An encrypted connection is indicated by the browser's address bar changing from "http: //" to "https: //" and the lock icon in your browser bar. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

5. Rights of the data subject

You have the following rights with respect to your personal data:

• Information and access right
• Rectification right,
• Erasure right,
• Right to restriction of processing,
• Right to object to the processing,
• Right to data portability.

In this case, please contact the person responsible for data processing:

Address: PRpetuum GmbH
Hohenzollernstraße 27, 80801 München
E-mail: registration@registration-principles.de

6. Consent withdrawal or objection against the processing of your data

6.1.

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time with future effect. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.

6.2.

Insofar we base the processing of your personal data on a legitimate interest, you may object to the processing. This is the case if, in particular, the processing is not required to fulfil a contract with you, which we describe in the following description of the functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.

6.3.

You may object to the processing of your personal data for advertising and data analysis purposes at any time. About your advertising contradiction you can inform us under the following contact details: PRpetuum GmbH, Hohenzollernstraße 27, 80801 München, E-mail: registration@registration-principles.de, (see our legal notices).

7. Right to lodge a complaint

You also have the right to lodge a complaint with the competent supervisory authority.

8. Modification of this Privacy Policy

The PRpetuum GmbH, reserves the right to change or to adapt this privacy policy at any time.

9. Picture credits

All image rights according to § 15 UrhG and § 19 (a) UrhG to the graphics used are owned by PRpetuum GmbH.