1.General Information
We take the protection of your data very seriously and treat your personal data confidentially and in accordance with the statutory regulations. This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data in connection with our website, registration and the OMNISECURE event (Berlin, 18–21 January 2027), as well as our associated event platform.
Controller within the meaning of the GDPR:
inTIME berlinPlüschowstraße 5A14163 BerlinGermanyEmail: contact@inTIME.berlinWebsite: www.omnisecure.berlinFor all questions regarding data protection and the exercise of your rights, you can reach us at contact@inTIME.berlin or by post at the address above, marked “Datenschutz” (Data Protection).
We are responsible both for the event and for the operation of the event platform. As technologies and this website evolve, this privacy policy may be amended. We recommend that you reread it at regular intervals. Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.
2.Access Data (Server Log Files)
You can visit this website without providing any information about yourself. When you access it, access data is automatically processed for technical reasons, e.g. the requested file, date and time of access, the amount of data transferred, browser type and version, operating system, the referrer URL and the IP address. This processing serves to make the website technically available to you, to ensure its stability and security, and to improve our online offering.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing you with a technically functional, secure and user-friendly website and in taking measures to protect the website.
We only collect, use and disclose your personal data if this is permitted by law or if you consent to the data collection. Personal data is any information that can be related to you as a person, e.g. name, email address or telephone number.
4.Active Use of the Website, Registration and Event Platform
If you contact us through the contact options provided, we store your details in order to process your enquiry or to provide the services ordered. We do not pass this data on to third parties without your consent, apart from the service providers named in Section 6.
These offerings are intended only for persons who have reached the age of 18. By contacting us, registering or subscribing to the newsletter, you confirm that you are at least 18 years old.
4.1Contact Enquiries
To process and respond to your enquiries (contact form, email, telephone, post), we process your details, at least first name, last name and email address or postal address, as well as any further information you provide to us, e.g. telephone number, company, position and department.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding appropriately to enquiries); if the enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR.
4.2Registration for the Event
When you register for OMNISECURE, we process the data you provide: first name, last name, company/institution, position and department, email address, telephone number and, where applicable, the address of the company/institution and dietary requirements. We use this data to receive and process your registration, to inform you about organisational details, to carry out access controls and to hold the event. This applies to registrations via the website as well as registrations by email, telephone, post or in person. In connection with your registration, we provide you with the event platform in accordance with Section 4.3.
Legal basis: Art. 6(1)(b) GDPR (performance of the participation agreement or pre-contractual measures). If you voluntarily provide information that allows conclusions to be drawn about special categories of data (e.g. dietary requirements related to religion or health), processing is based on your explicit consent, Art. 9(2)(a) GDPR.
For payment processing, we may use payment service providers and banks (Art. 6(1)(b) GDPR).
4.3Event Platform, Visibility and Disclosure of Data to Partners
For OMNISECURE, we provide you with a digital event platform. There you can use a participant profile, view programme content and network with other participants and partners. We (inTIME berlin, Plüschowstraße 5A, 14163 Berlin, contact@inTIME.berlin) are responsible for the platform and the data processed on it. The platform is technically operated by ZUMMIT GmbH, Parkstraße 29, 22606 Hamburg, as our processor; a data processing agreement pursuant to Art. 28 GDPR is in place with ZUMMIT.
Account and profile: To use the platform, we process your registration data and the data you provide in your profile, e.g. name, email address, password and, voluntarily, profession, company or LinkedIn profile. The data required for your account and participation is processed to perform the participation agreement (Art. 6(1)(b) GDPR). All other profile information is voluntary and based on your consent (Art. 6(1)(a) GDPR).
You decide what others can see: In the platform settings, you determine whether your profile is visible to other participants and partners and which of your data (e.g. name, company, position, email address, telephone number, LinkedIn) is shared. Without your approval, your data is not visible to others and is not passed on to partners. Sharing is voluntary. You can change it at any time on the platform or withdraw it with effect for the future. Legal basis: your consent, Art. 6(1)(a) GDPR.
Contact in individual cases: Regardless of the visibility of your profile, you can send your contact details to a partner yourself in individual cases, e.g. through a contact request via the platform. Partners only scan your badge with your consent in the individual case. In these cases, the partner receives the data required for contact (Art. 6(1)(a) GDPR).
Partners process the data they receive from you under their own responsibility, e.g. to contact you. The privacy notices of the respective partner apply to this processing. The partners are listed by name on the platform.
Technical data on the platform: When the platform is accessed, technical access data (e.g. IP address, browser, operating system, date and time of access, amount of data transferred) is processed and stored for a maximum of seven days, unless a threat has been detected (Art. 6(1)(f) GDPR; legitimate interest in the stability and security of the platform). In addition, the platform stores settings such as language, last login name and saved events locally in your browser (Local Storage) so that the platform works and your preferences are retained. This data is not passed on to third parties and is not used for advertising purposes (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR). You can delete or disable Local Storage in your browser settings; in that case, not all functions may be available.
Detailed information on the event platform can be found in the event platform’s privacy policy: [URL der Plattform-Datenschutzerklärung].
4.4Download Area
If you use the download area, we process the data required for this in order to perform the contract or to provide the content.
Legal basis: Art. 6(1)(b) GDPR.
4.5Newsletter
We offer a newsletter in which we inform you about industry news, current events and offers. For this we need your email address. Further details (e.g. name) are voluntary and make communication easier for us. By subscribing, you consent to receiving the newsletter (Art. 6(1)(a) GDPR). We log the subscription and confirmation with date and time in order to be able to prove your consent.
For statistical purposes and to optimise our offering, we evaluate anonymously which links in the emails are clicked. It is not possible to identify which specific person clicked.
We process your data for this purpose until you withdraw your consent. You can withdraw it at any time and unsubscribe from the newsletter via the link at the end of each newsletter or by email to contact@inTIME.berlin. After you unsubscribe, we delete your data unless statutory retention obligations prevent this.
4.6Advertising for Our Events
We process your email address and the information about your registration in order to send you advertising by email for our own similar events. This requires that we received your email address in connection with your registration and that you have not objected to its use. We only inform you about events that are similar to the event for which you registered.
Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG (German Act Against Unfair Competition). Our legitimate interest lies in direct marketing of our services.
Here, too, we evaluate anonymously which links in the emails are clicked. We process your data for this purpose until you object.
You can object to the use of your data for advertising at any time without incurring any costs other than the transmission costs according to the basic rates: by email to contact@inTIME.berlin or via the unsubscribe link at the end of each advertising email.
5.Photo and Video Recordings at the Event
5.1What We Do
At OMNISECURE, an in-person event, photos and possibly videos are taken. Participants, speakers and contributors may be recognisable in them. These are mainly atmospheric and overview shots as well as recordings of presentations and speakers in their role on stage.
5.2Purpose, Publication and Legal Basis
We use the recordings to document the event, for reporting, and to explain and promote OMNISECURE. They are published exclusively in connection with the event, namely on our website www.omnisecure.berlin, on our LinkedIn page (https://www.linkedin.com/company/omnisecureberlin/) and, where applicable, in the newsletter and in print media.
The legal basis for atmospheric, overview and presentation photos is Art. 6(1)(f) GDPR. Our legitimate interest lies in public relations for the event and the documentation of a high-profile congress. In doing so, we take your interests into account: we do not publish recordings that show you in an unflattering or private situation.
5.3Individual Portraits: Only with Your Consent
If we want to publish a photo that shows you individually as a portrait, in particular for a post on LinkedIn, we will ask you beforehand. In this case, publication only takes place with your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future.
5.4Your Right to Object
If you do not wish to be photographed, please speak to the photo team on site. We will take this into account and will not publish any images in which you are recognisable.
You can also object to the use of a photo in which you appear at any time afterwards: by email to contact@inTIME.berlin, stating where the photo appears (e.g. a link to the page). We will then remove the photo from our channels and no longer use it. We cannot recall materials that have already been printed.
5.5Notes on Publication on the Internet
When published on the internet, in particular on LinkedIn, photos can be accessed, copied and linked worldwide. Search engines may index them. We therefore cannot guarantee the complete deletion of all copies. The operator of the LinkedIn platform in the European Economic Area is LinkedIn Ireland Unlimited Company; processing may also be carried out by affiliated companies in third countries (e.g. the USA). LinkedIn’s privacy notices also apply.
5.6Storage Period
We store the recordings for as long as they are required for the purposes stated and delete them if you object or withdraw your consent.
6.Recipients of Your Data, Service Providers and Third Countries
Your personal data is processed by us and not passed on to third parties unless stated in this policy (e.g. in Section 4.3 after your approval or your consent in an individual case). Exceptions are service providers who act on our behalf and according to our instructions. These include in particular ZUMMIT GmbH (event platform), as well as service providers for hosting, email and newsletter delivery, payment processing, photography and catering. Data processing agreements pursuant to Art. 28 GDPR are in place with them.
Data is only transferred to countries outside the EU/EEA if the requirements of Art. 44 et seq. GDPR are met, e.g. on the basis of an adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
To fulfil legal obligations (e.g. retention obligations under tax and commercial law), we also process your data in accordance with Art. 6(1)(c) GDPR. Where necessary, we also process it to establish, exercise and defend legal claims and to prevent and investigate criminal offences (Art. 6(1)(f) GDPR).
7.Storage Period
We only store your data for as long as is necessary for the respective purposes.
- Registration and participation data: until the event and its follow-up have been completed; thereafter, where statutory retention obligations apply (under commercial and tax law, up to 6 or 10 years).
- Contact enquiries: until your enquiry has been fully processed, thereafter only within the scope of statutory retention periods.
- Newsletter: until you withdraw your consent.
- Direct marketing for similar events: until you object.
- Event platform (account, profile, sharing settings): until 2 months after the event; sharing and visibility end at the latest at that point. Technical access data of the platform is deleted after seven days.
- Photos: see Section 5.6.
If data cannot be deleted due to statutory retention obligations, we restrict its processing; it is then blocked and not processed for other purposes.
8.Your Rights
Under the GDPR, you have the following rights:
- access to the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdrawal of consent given, with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected (Art. 7(3) GDPR).
Right to object under Art. 21 GDPR: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR. This also applies to the publication of photos in accordance with Section 5.2. You can object to processing for direct marketing purposes at any time without giving reasons.
To exercise your rights, including with regard to your data on the event platform, a message to contact@inTIME.berlin is sufficient. Where necessary, we coordinate with our service providers.
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information (www.datenschutz-berlin.de).
9.Provision of Data
We need the information marked as required during registration for participation; registration is not possible without it. All other information, sharing settings on the event platform, consent to individual portraits and the newsletter are voluntary.
10.Data Protection on Third-Party Websites
This website contains links to third-party websites (e.g. our partners). If you follow a link, please note that we cannot accept any responsibility for third-party content and its privacy terms. Please inform yourself about the privacy policies that apply there before submitting any personal data.
11.Changes to This Privacy Policy
We amend this privacy policy when the legal situation, technology or our offering changes. The current version on this page applies.