Privacy Policy – Hamburg Games Conference Submission

Home / Privacy Policy – Hamburg Games Conference Submission

Privacy Policy for Application HCG 2022

I. Name and contact details of controller

GRAEF Rechtsanwälte Digital Partnerschaftsgesellschaft mbB

Jungfrauenthal 8
20149 Hamburg

Telephone: +49 40 80 6000 90

II. Purposes for which the personal data are to be processed and the legal basis for the processing 

Processing is necessary for the application for a booth or for a sponsorship for the Hamburg Games Conference 2022. As the application aims at the conclusion of a contract, the legal basis for processing is Art. 6 para. 1 lit. b GDPR. 

III. Categories of processed personal data

  • Name
  • Telephone-number
  • Emailaddress

    IV. Recipients or categories of recipients of the personal data; transfer to third countries

Recipients of the personal data are employees within our organization who have to process your data according to a graduated necessity principle concept to serve the above-mentioned purposes. We also engaged a service-provider as a processor within the meaning of Art. 28 DSGVO for operating the services (Super Crowd Entertainment GmbH, Papenstraße 27a, 22089 Hamburg).

There is no data transfer outside the EU.

V. Duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration

The aforementioned personal data will be deleted as soon as they are not necessary anymore to achieve the processing purpose. If an agreement has ended, your personal data will be restricted for further processing after all claims are barred on both sides. We delete the data when the statutory retention period expires.

VI. No profiling

We do not use automated decision-making to conclude on or to perform an agreement. Your personal data will not be processed for profiling (scoring).

VII. Rights of data subjects

If personal data from you is processed, you are the data subject within the meaning of the GDPR and are entitled to rights vis-à-vis the controller. This includes the right to information, the right to correction or deletion, the right to limitation of processing, the right to data transferability and the right to contact a data protection supervisory authority.