Data Protection Notice for the"Raffle of 47x1 race entries for the BMW BERLIN-MARATHON " competition
This notice informs you about the processing of your personal data by SCC EVENTS GmbH (hereinafter also referred to as "SCC" or "we") and the rights to which you are entitled under data protection laws.
1.) Person responsible for data processing and data privacy officer
SCC EVENTS GmbH, Olympiapark Berlin, Hanns-Braun-Strasse / Adlerplatz, 14053 Berlin
Managing Directors: Christian Jost, Jürgen Lock
Phone: 030 / 30 12 88 – 10
Fax: 030 / 30 12 88 – 20
The data privacy officer can be contacted by post at the above address with attention to "data privacy officer" or by e-mail: email@example.com
2.) Purposes and legal basis of this data processing
During the period July 16 to August 8, 2021, SCC will conduct a competitionvia https://run-for-joy.com/story Participation in the competition requires confirmation of the Conditions ofParticipation, available at https://run-for-joy.com/terms, and participation via the online competition entry form. The data privacy notice with information regarding data processing necessary for the web-based online competition entry form is available at: https://run-for-joy.com/privacy-policy .
Your personal data will be processed for the purpose of conducting the competition in accordance with the Conditions of Participation, in particular for determining and notifying the winners. The legal basis for the processing of your personal data results from Art. 6 Para. 1 lit. b) GDPR.
The winners’ data will be processed potentially beyond the end of the competition on the basis of a consideration of interests for the fulfillment of data protection and civil law obligations of proof and accountability as well as for answering queries regarding the redemption of the voucher on the basis of the legal basis Art. 6 Para. 1 lit. f) GDPR.
3.) Recipients of the personal data
The recipient of your data is SCC EVENTS GmbH or its employees who require it for the fulfilment of the respective purposes. In order to fulfil our contractual services and legal obligations, personal data is partly processed by external service providers or, if applicable, by authorities, if this is necessary and legally permitted for the fulfilment of the aforementioned purposes. In doing so, we always observe the provisions of data protection law; in particular, processing by service providers used by us only takes place after conclusion of contracts with a corresponding confidentiality clause.
Purpose of disclosure
Transport and shipping service provider
Delivery of ordered products, postal and parcel shipment
Maintenance, care and upkeep of the IT systems (hardware and software)
Provision of contact and participation forms and published information
Conveyance of e-mails and attachments
Administration of the website and the competition entry form
Fulfilment of statutory duties to provide information and notifications
4.) Duration of data storage
All participation data will be stored until the final winner is determined and will be completely deleted no later than 4 weeks after the winner is determined. The data of the winners will be archived for two months in order to be able to answer any queries regarding the redemption or transfer of the voucher.
We store the data protection enquiries we respond to regarding information, correction, deletion or restriction of processing, as well as other enquiries from data subjects or supervisory authorities on data protection issues for 3 years for the purpose of accountability.
5.) Data protection rights for data subjects
All data subjects have the right to
information under Article 15 of the GDPR, the right to rectification of their data under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing of their data under Article 18 of the GDPR and the right to data transfer under Article 20 of the GDPR.
Right to object:
Pursuant to Article 21 of the GDPR, data
subjects also have the right to object at any time to the processing of personal data concerning them.
A) Individual right to object pursuant to Art. 21, Para. 1 GDPR.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 Para. 1 lit. f) GDPR (data processing based on a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
B) Right to object to processing of data for direct marketing purposes pursuant to Art. 21, Para. 2 GDPR.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. The processing of your data for this purpose is not intended at SCC in the context of the sweepstakes.
Please send any inquiries regarding the exercise of your data subject rights, stating your full name, by mail or e-mail to our data privacy officer: SCC EVENTS GmbH, Data Privacy Officer, Hanns-Braun-Strasse / Adlerplatz, 14053 Berlin or firstname.lastname@example.org.
Right of Appeal
If you suspect that we are processing your data unlawfully, you can, of course, seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. The right of complaint pursuant to Art. 77 GDPR is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the places mentioned above. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
6.) Data transfer to a third country or an international organisation
We sometimes transfer personal data to third countries or international organisations. You will find a list of these services and service providers, which may be used in the context of participation in the above-mentioned competition, in the further course of this document.
Third countries are countries outside the EEA where the GDPR is not directly applicable. The USA, for example, is a so-called third country. There is no adequacy decision by the EU Commission for the USA. It is therefore considered an unsafe third country. The level of data protection is not comparable to that in the EU. An adequate level of data protection cannot be ensured due to the legal situation in the USA.
In order to compensate for the existing data protection deficit in the event of a lack of an adequacy decision, we have agreed upon further appropriate guarantees for the processing of personal data with the service providers concerned in the third country or with the international organisation in addition to the standard data protection clauses, so that the data protection standards for these data transfers are compatible with the statutory data protection provisions of the EU and an adequate level of protection is guaranteed when processing the personal data.
The standard data protection clauses for our processors (C-P) are available at: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex:32010D0087
Name and address of the company
Processor or joint controller, activities/purpose of the transfer
Legal basis for data transfer to a third country or the international organisation
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
International organisation, standard data protection clauses C-P
7.) Voluntary provision of personal data
Participation in the competition is always voluntary and is neither contractually nor legally required. In the event of participation, the data must be provided that is required for the implementation of the competition in accordance with the Conditions of Participation, in particular for the determination and notification of the winners. Failure to provide the data will result in making participation in the competition impossible.
8.) Automated decision-making, performance of profiling
As a matter of principle, SCC does not use exclusively automated decision-making within the meaning of Art. 22 of the German Data Protection Act (GDPR) for the justification and implementation of the competition. The prize is determined by drawing lots.
"Profiling" is a form of automated processing of personal data evaluating the personal aspects relating to a natural person, in particular to analyse or predict aspects concerning the data subject’s performance at work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements, where it produces legal effects concerning him or her or similarly significantly affects him or he. Your data will not be processed for profiling purposes at SCC EVENTS GmbH.