I consent to the creation, use,  reproduction, distribution, exhibition, and public presentation (hereinafter  referred to as „use“) of photo, video, and audio recordings made of  me during the above-mentioned event (hereinafter collectively referred to as  „data“). The consent includes the use of the data by osapiens  Services GmbH and its affiliated companies (referred to as „Controllers“  in terms of data protection law) and applies to the following purposes:

·      Use  in internal and external media and communication platforms;

·      Use  on the Controllers’ own websites, including the career website and  publication on social media channels (e.g., LinkedIn, Xing, YouTube,  Facebook, Instagram, Kununu/Glassdoor, Career Page, Twitter), and the  associated transmission to countries outside the EU;

·      Use  for public relations and advertising purposes of the Controllers  (e.g., annual reports, digital and printed brochures, advertisements, etc.).

I hereby grant the Controllers a right of  use free of charge and unrestricted in terms of space and time.

Insofar as my photo or video reveals  information about my ethnic origin, religion or health (e.g. skin color,  headgear, glasses), my consent also refers to this information.

However, this consent can be retracted at any  time with effect for the future for new acts of use. Use of the data  for purposes other than those described is not permitted.

By checking the box, I also confirm that I had  the opportunity to read the provided notes and information on the  consent declaration.

Notes and information on the declaration of consent

Your consent is voluntary and can be revoked for the future at any  time, unless otherwise agreed. In case of a non-consent or a possible later  revocation of consent there will be no disadvantages!

1.     Explanation of the intended use

During events, osapiens creates photo, video, and audio recordings in  order to document the event and publish impressions for marketing purposes.  Visitors of the event may be seen or heard in these recordings. For this  reason, osapiens requests consent for the creation and use of such  recordings.

Further information on the intended use is derived from the  declaration of consent.

2.     Legal basis of the processing

The data is processed based on the express consent pursuant to Art. 6  (1) sentence 1 letter a) and Art. 7 of the EU General Data Protection  Regulation (GDPR), taking into account Section 22 of the German Art  Copyright Act (KunstUrhG).

1.      Revocation

The consenting party may revoke the granted consent at any time  with effect for the future. The revocation does not affect the lawfulness  of the processing carried out before the revocation. Therefore, publications  that have already been made (e.g. on websites or in social media channels are  not automatically deleted) and printed materials that have  already been produced may continue to be distributed. If, due to special  circumstances, further dissemination of printed materials is to be omitted or  deletion of publications is necessary, the consenting party must inform the  person responsible of the reasons together with the objection in text form.

3.      Recipient

Recipient of the data can be anyone within the scope of the consent,  in particular journalists, press agencies, visitors to the websites, users of  social media, etc. Furthermore, service providers within the scope of  commissioned processing, in particular commissioned web hosting Companies as  well as IT and media service providers. Data published online worldwide is  also accessible in countries with a low level of data protection. Further  dissemination and use by unauthorized third parties can therefore not be  ruled out. If consent is withdrawn, complete deletion of the recordings and  data from the Internet cannot therefore be guaranteed.

Suitable search engines can be used to find data on the Internet and,  under certain circumstances, to identify the persons shown on the data. This  also makes it possible to create personality profiles by combining this data  and information with other data available on the Internet and to open up  additional possibilities for use, e.g. for advertising purposes. Due to the  possibilities of worldwide retrieval and storage of the data by other bodies  or persons, in the event of revocation of consent and despite removal of the  data from the website of the person responsible, further use by other bodies  or persons or retrieval via archive functions of search engines cannot be  ruled out.

If consent is also given for affiliated Companies, the recipients of  the data are the respective affiliated osapiens Companies.

2.      Third country transfer

If consent is also given for affiliated Companies and Companies  outside the EU, the EEA or a country without an adequate level of data  protection receive data, the Controller ensures that EU standard contractual  clauses have been concluded with the recipient.

When consenting to the publication of recordings on social media  platforms, data is regularly transferred to so-called third countries  outside the EU or the EEA, which are to be regarded as unsafe third countries  under data protection law. There is a possibility that the rights of data  subjects in third countries cannot be safeguarded or cannot be safeguarded in  full. For example, further processing by authorities and third parties cannot  be prevented in practice. It is also possible that recipients of data in  third countries will not or not fully comply with the obligations to provide  information. The Controller has no influence on how the operators of social  media platforms handle the data. Whether and for what purposes the data is  further processed by the operators is beyond the knowledge of the Controller.

4.      Storage Period

In the event of a revocation, the photo, film and sound recordings  will be deleted, provided that the cases mentioned under points 3 and 4 do  not apply. The data controller is not obligated to delete the data if the  photo and film recordings are group illustrations in which the data subject  concerned is not the focus. In all other cases, we store the data only for as  long as is necessary to fulfill the purposes pursued or due to legal or  contractual regulations and retention periods.

3.     Controller under data protection law, Data Protection Officer

All osapiens Companies are responsible for data protection.  These are the Companies named below:

osapiens Holding GmbH, osapiens Services GmbH, osapiens Hub GmbH,  osapiens assetOps GmbH, osapiens Network GmbH, osapiens BrandOS GmbH (all of  the aforementioned Companies based in Mannheim), osapiens COE Spain S.L  (seated in Madrid), oneIDentity+ GmbH (seated in Munich) and fTRACE GmbH  (seated in Cologne).

For all data protection issues, including a consent revocation, the  responsible persons can be reached centrally

at the central business address for data protection issues  Julius-Hatry-Strasse 1, 68163 Mannheim, Germany with the addition „data  protection“

or

by e-mail at dataprotection@osapiens.com

osapiens Holding GmbH, osapiens Services GmbH, osapiens Hub GmbH,  osapiens assetOps GmbH, osapiens COE Spain S.L and fTRACE GmbH have appointed  a data protection officer in accordance with legal requirements.

Data Protection Officer of these Companies is:

TÜV SÜD Akademie GmbH

Larissa Bichert, certified data protection expert

Westendstrasse  160, 80339 Munich

The Data Protection Officer can be contacted centrally and at the  above mentioned E-Mail address (dataprotection@osapiens.com).

5.       Data subject rights

The data subject has the right to request information about all  personal data processed by the controller at any time.

If the data subject’s personal data is incorrect or incomplete, the data  subject has the right to have it corrected and completed.

The data subject may also request the deletion of his/her personal  data at any time unless the Controller is legally or contractually obligated  or entitled to continue processing the data.

If the legal requirements are met, the data subject may also request  restriction of the processing of his/her personal data in accordance with  Art. 18 GDPR.

The data subject has a right to transfer the data provided by him.

The data subject also has the right to lodge a complaint with a data  protection supervisory authority at any time if he or she believes that data  processing has been carried out in violation of applicable law.