Participation in the Learning Journeys is subject to an application process. For each Learning Journey, we select up to 30 participants from among the applications received. The selection is based on the information provided in your application.

Where you apply for a Learning Journey, we process your personal data for the purpose of reviewing your application, selecting participants, organising and conducting the Learning Journey (including participant administration and communication with you), and matching you with the respective host company of the Learning Journey you have selected.

As part of the application process, we collect the following mandatory information:

• Your name
• Your position within your organisation
• Your area of responsibility
• Your level of decision-making authority
• Your email address
• Information relating to your organisation, including:
  • Company name
  • The market(s) in which your organisation operates
  • Industry sector
  • Company size
  • Company type

You may additionally provide the following information on a voluntary basis:

• Your LinkedIn profile
• Information regarding your prior experience relating to the subject matter of the Learning Journey
• Your motivation for participating

The provision of such voluntary information enables us and the respective host companies to make a more informed and targeted participant selection.

The legal basis for processing your personal data in connection with your application, the participant selection process and the administration of the Learning Journey is Article 6(1)(b) GDPR, as such processing is necessary for the performance of the contractual relationship established through your participation in the Learning Journey.

To the extent that organisational information is used to ensure an appropriate and targeted composition of participants, the processing is also based on our legitimate interests pursuant to Article 6(1)(f) GDPR, namely the effective organisation and delivery of a business-focused professional event.

The processing of any voluntary information provided by you is based on your consent pursuant to Article 6(1)(a) GDPR.

For the operation and administration of the application form, we use HubSpot (HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland). For internal administration and communication, we use Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland). Both service providers act as processors on our behalf pursuant to Article 28 GDPR and process personal data solely in accordance with our instructions.

HubSpot and Microsoft form part of corporate groups headquartered in the United States. Consequently, access to personal data from a third country, in particular the United States, cannot be entirely excluded. Both HubSpot and Microsoft are certified under the EU-U.S. Data Privacy Framework. This certification provides an adequate level of protection for transfers of personal data to participating organisations in the United States.

DISCLOSURE OF PERSONAL DATA TO HOST COMPANIES

Disclosure for the Purpose of Event Administration

In order to enable the respective host company to organise and conduct the Learning Journey and to communicate with you regarding the event, we disclose your first name, surname and email address to that host company.

Such disclosure is necessary for the performance of the Learning Journey and is based on Article 6(1)(b) GDPR. The recipient of the data is exclusively the host company of the Learning Journey selected by you.

Disclosure for the Host Company’s Own Marketing Communications

Where the host company wishes to use your contact details and profile-related information for its own marketing purposes, including contacting you directly regarding its products, services or events, we will obtain your separate consent through the application form.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. Providing such consent is entirely voluntary and is not a condition for participation in the Learning Journey.

You may withdraw your consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal. You may exercise this right either by contacting the respective host company directly or by contacting us, for example via email at datenschutzbeauftragter@bvdw.org.

MARKETING COMMUNICATIONS BY BVDW SERVICES GMBH AND THE GERMAN ASSOCIATION FOR THE DIGITAL ECONOMY (BVDW) E.V.

We may use your email address to provide information regarding similar events, educational and training programmes (including programmes offered by the BVDW Academy), and services offered by BVDW Services GmbH. Furthermore, personal data may be used for marketing communications by the German Association for the Digital Economy (BVDW) e.V.

Where the requirements of the existing customer exemption pursuant to Section 7(3) of the German Act Against Unfair Competition (UWG) are satisfied, such communications are based on that statutory provision. In all other cases, we will obtain your consent pursuant to Article 6(1)(a) GDPR, for example through a dedicated consent checkbox contained in the application form.

You may object to such processing at any time or withdraw any consent previously granted, each with effect for the future.

For the distribution of such communications, we use HubSpot. The information set out above regarding recipients and international data transfers applies accordingly.

STATISTICAL ANALYSIS OF PARTICIPANT DATA

We also analyse the information collected as part of the application process, including information relating to industry sector, company size and area of responsibility, in order to evaluate participant demographics and assess the effectiveness of individual Learning Journeys.

Such analyses are conducted exclusively for internal statistical and evaluation purposes. No profiling within the meaning of Article 4(4) GDPR and no automated decision-making relating to individual participants takes place.

The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in evaluating and further developing our event and educational offerings.