General information

• Last updated: 24.05.2018
• This Privacy Policy shall apply to the service "BBI JU Partnering Platform" and its applications.
• The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
• BBI JU is the body responsible for the processing of personal data.

Responsible body

We, BBI JU, assume the role of controller as per the EU General Data Protection Regulation (GDPR). In other words, we are the legal entity that shall determine the purposes and means of the processing of personal data.

How is your personal data processed?

1. General statement about the purposes of data processing

The main reason we process personal data is to fulfil our contractual obligations towards the users of the BBI JU Partnering Platform. The processing of data is required for us to be able to offer you a personal account to access the BBI JU Partnering Platform, and herewithin to offer you networking services around the annual BBI Calls.

2. Information you provide to us

This refers to data we obtain from you via the the application form and information you publish and send on the BBI JU Partnering Platform such as:

• Login details (e.g. username and password)
• Profile information (e.g. job title, company name, industry, educational background, contact options, photo)
• Topic selections and Pitches
• Messages, Meeting invitations, network invitations
• Event participation
• Administrative information and billing details

There are both mandatory entry fields (which as marked as such) and optional information you can provide.

Login and profile details

When you register to BBI JU Partnering Platform and its applications we have to record and process certain personal data as your login data and profile data. The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).

You have to fill in certain mandatory fields when you register. This information is essential for a functioning professional network, e.g.

• Username
• E-mail address to log in
• Password
• Title, first name, family name
• Job title and organisation
• Place of work and postal address of organisation

Your login data is not visible to third parties. We will not ever pass this information on to third parties under any circumstances.

As well as the mandatory information we require, you can also enter additional information to complete your profile, activate the different service features within the BBI JU Partnering Platform. These information are shared with the other users of the BBI JU Partnering Platform.

You can retract most optional information at any time for the future by deleting the respective data in your profile.

E-mail address(es)

We use the electronic mail address(es) that you have provided to us to send you regular updates about the BBI JU Partnering Platform activities, upcoming events and newsletters and/or status e-mails electronically.

You can unsubscribe to newsletters at any time, either in your notification settings in the BBI JU Partnering Platform or by clicking on the link provided at the end of e-mail newsletters.

Visibility

Generally speaking, the content you publish on the BBI JU Partnering Platform and your feedback on specfic data, for example topic selections, are visible to all users in BBI JU Partnering Platform.
For individual features the level of visibility may be more restricted (e.g. only visible to contacts). In such cases you will be informed about visibility when using the respective feature. Please be aware that even if you restrict visibility, the content and reactions that you share may become visible beyond your own network if your contacts choose to share this information with other users.

3. Information we automatically obtain through your use of BBI JU Partnering Platform

Data about you is automatically collated by means of tracking while you visit or make use of the BBI JU Partnering Platform. In the so-called "back end", at our web server level, we collect the data of users, which we use first and foremost for the provision and preservation of the security of the BBI JU Partnering Platform service. In the "front end", on your end device, we use cookies and similar tracking technologies to collect data about users to enable the provision of our service and the analysis of user behaviour and for statistical purposes.Tracking involves the processing of login data (e.g. date and time of the visit, referrer, IP address, cookie ID, location data, product and version information about the browser or app used, device ID or data) and interaction data (e.g. pages viewed or searches carried out).

The purposes of tracking and your opt-out options

Ensuring security

One reason for tracking is to ensure and preserve the legitimate interest of the protection of users, the security of user data, BBI JU Partnering Platform and related websites and applications. To this end, we save the data we record for up to 90 days in its full form. Only a limited number of our employees with the respec-tive authorisation rights have access to this data. The legal basis for this processing of personal data is Article 6 (1) f) of the EU General Data Protection Regulation (GDPR).

Provision of our service

The tracking and analysis of user behaviour helps us to review and optimise the effectiveness of our service, and to correct any errors and faults. We endeavour at all times to adapt our products and services to the needs of our users. Personalisation is an important aspect here. Analysing data obtained from tracking is necessary to make personalised services available to you in accordance with the contractual purpose of BBI JU Partnering Platform and to ensure that you gain the great possible benefit from BBI JU Partnering Platform. The implicit feedback that you provide to us through our tracking of your usage of BBI JU Partnering Platform forms an important part of understanding what content you are more or less interested in, and being able to suggest you relevant data and contacts.

4. Your rights

You have legal rights available to you with regard to data access, rectification, erasure, restriction of processing and objection to processing, as well as the right to data portability, amongst others. In addition, you can withdraw any consent you may have given to data processing at any time, and have the right to lodge a complaint with a supervisory authority.

For any question about your rights, please contact us via the dedicated online form.

Right to object

You have the right to object at any time to the processing of personal data concerning you, pursuant to Article 6 (1) f) of the EU GDPR. This shall also apply to any profiling carried out on the basis of these provisions. Please use our contact form to submit any objection.

Right of access

You have the right to demand confirmation as to whether we process your personal data. If this is the case you are entitled to receive information about this personal data.

You also have a right to access the following information:

• The reasons for the data processing
• The categories of personal data that are processed
• If possible the planned period of time that the personal data will be saved for, or if this isn't possible then the criteria used to determination this time period
• The existence of a right to rectification or erasure of your personal data and/or the right to restriction of processing by the controller, or a right to object to this processing
• The existence of a right to lodge a complaint with a supervisory authority
• All available information about the origin of the personal data if the data was not obtained from the person in question
• The existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) of the EU GDPR and – at least in some cases – insightful information about the logic involved plus the scope and aims of the repercussions of this kind of processing for the person affected

If personal data is passed on to a third country or an international organisation, you have the right as the person affected to be informed about the respective guarantees (pursuant to Article 46 of the EU GDPR) regarding this sharing of data.

Right to rectification

You have the right to demand that we correct any incorrect personal data concerning you with immediate effect. Taking the purposes of processing into account, you have the right to demand the completion of any incomplete personal data – including by means of a supplementary explanation.

Right to erasure

You are entitled to demand that we delete your personal data without delay if one of the following applies: The personal data is no longer required for the purposes for which it was collected or processed in some other way. You withdraw your consent that the processing was based on pursuant to Article 6 (1) a) or Article 9 (2) a) of the EU GDPR , and there are now no valid legal grounds for processing. You submit an objection to the processing of your data pursuant to Article 21 (1) of the EU GDPR and there are no overriding justifiable grounds for the processing, or you submit an objection to the processing of your data pursuant to Article 21 (2) of the EU GDPR. The personal data was processed unlawfully. The deletion of the personal data is required to fulfil a legal obligation in accord-ance with EU law or the law of individual member states. The personal data was recorded in relation to the offer of information society services directly to a child, pursuant to Article 8 (1) of the EU GDPR. Once you have made your request we are obliged to delete the data with immediate effect. The lawfulness of the data processing for the period between the consent and the withdrawal of this consent shall remain unaffected.

Right to restriction of processing

You are entitled to demand a restriction to the processing of your personal data in cases where you dispute the correctness of the personal data, for a period of time that allows the controller to review the correctness of that personal data. If the processing is unlawful and you reject the erasure of the personal data in favour of demanding a restriction to the use of the personal data we will fulfill this request. Processing will also be restricted if we no longer require your personal data for the purposes of processing but do require it for the establishment, exercise or defence of legal claims. Or if you have objected to processing pursuant to Article 21 (1) of the EU GDPR, for as long as is not yet ascertained whether the justifiable grounds of the controller outweigh your grounds. You will be informed in advance by us should the restriction be revoked.

Right to data portability

You have the right to receive personal data concerning you that you have made available to us in a structured, conventional and machine-readable format, and you also have the right to transfer this data to another controller without being impeded by us to whom the personal data has been made available. The condition is that a) processing is based on consent pursuant to Article 6 (1) a) of the EU GDPR or Article 9 (2) a) of the EU GDPR or on a contract pursuant to Article 6 (1) b) of the EU GDPR, and b) the processing is conducted with the help of automated processes. When exercising your right to data portability you have the right to demand that the personal data is transferred directly from us to another controlling body, provided this is technically viable.

Right to withdraw consent

If processing is subject to your consent you have the right to withdraw this consent at any time. This shall not affect the lawfulness of any processing that took place with your consent up until its withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority responsible for our company.