It is the declared aim of the MHP Group to ensure responsible handling of personal data in all its activities. With this privacy policy, we inform you about the processing of your personal data and about your data protection rights.

1. Data controller and data protection officer

The responsible party within the meaning of the General Data Protection Regulation is:
MHP Management- und IT-Beratung GmbH
Königsallee 49
71638 Ludwigsburg
+49 (0)7141 7856-0
info(at)mhp.com

If you have any questions regarding data protection, please contact our data protection officer at dataprivacy(at)mhp.com

2. Subject of data protection

The subject of data protection is personal data. This includes all information relating to an identified or identifiable natural person (so-called data subject).

For the purposes listed under 3. we process the following personal data from you:

• First and last name
• Email address
• Company name

3. Purpose and legal basis of data processing, categories of recipients

We process your personal data for the purposes of follow-up contact after the DSAG Annual Congress.

We will store the consent you have given electronically for verification purposes. The associated processing of your data is based on legitimate interest (Art. 6 para. 1 lit. f GDPR). We must be able to prove compliance with the data protection requirements of the GDPR (Art. 5 para. 2 GDPR) and therefore have a legitimate interest in documenting the consent given to us. After revocation, your consent will generally be deleted until the expiry of the simple statutory limitation periods pursuant to §§ 195 et seq. BGB (3 years), unless a longer retention is required or permitted by law.

Within the conduction of the survey on the MHP presentation at the DSAG Annual Congress for the purposes of follow-up contact, employees within MHP will have access to your personal data. Access is limited to those persons who need it for the above-mentioned purposes.

In some cases, we commission external service providers to process this personal data. These service providers are carefully selected by us and regularly monitored; in particular with regard to their careful handling and the correct protection of the transmitted data. In addition, all service providers are obligated by us to maintain confidentiality and to comply with legal requirements. Service providers may also be other companies of the MHP Group.

4. Third country transfer

If the recipient of the data mentioned under 3. has its registered office outside the European Economic Area (EEA) in so-called third countries, we will ensure that, with the help of appropriate guarantees pursuant to Art. 44 et seq. GDPR, an adequate level of data protection is ensured at the recipient or your consent to the transfer has been obtained.

5. Duration of storage and deletion of data

We store your personal data only as long as it is necessary for the fulfillment of the purposes or – in the case of your consent – as long as you do not revoke the consent (and no other legal basis intervenes). In the event of revocation, we will remove your personal data.

Beyond this point in time, your data will only be stored within the scope of legal requirements. These may result from the laws, regulations or other legal provisions of the European Union or a member state of the European Union to which we are subject.

Regarding the purpose of the processing and the legal retention obligations, your personal data will be deleted as soon as they are no longer required for contact purposes and no legal retention obligations prevent this.

6. Automated decision making and profiling

We do not carry out automated decision-making or profiling that has legal effect on you or affects you in a similar way.

7. Rights of the data subjects

You have the right to revoke your declaration of consent at any time under info@mhp.com
with a declaration to MHP. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can exercise your right to information, rectification, objection and erasure of data at any time. To do so, contact us in the ways described above. If you wish the data to be deleted but we are still legally obliged to retain it, access to your data will be restricted. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

8. Right of appeal

You have the possibility to file a complaint with the responsible data protection supervisory authority at any time if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or your country or the data protection authority responsible for us. You can reach them at poststelle(at)lfdi.bwl.de