Information on data processing in accordance with Article 13 of the EU General Data Protection Regulation (GDPR) (‘data privacy statement’)
The Women and Transport & Building Feminist Cities conference is where visionaries, leaders, and changemakers converge to drive gender equality and innovation in the public transport sector across Africa. GIZ and Women Mobilize Women function as main sponsors of this event.
GIZ takes the protection of personal data very seriously. This document provides information about how your personal data are processed.
1. Contact data of the data controller
The data controller for processing purposes is the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH.
Address:
Friedrich-Ebert-Allee 32 + 36, 53113 Bonn, Germany
Dag-Hammarskjöld-Weg 1 – 5, 65760 Eschborn, Germany
Contact: Hannah.Behr@giz.de
2. Collecting your data
We process your personal data as follows:
- Given name and family name
- E-mail address
- Photos and video footage during the event
3. Purpose of data processing and legal basis
Consent
Purposes covered by your consent (Article 6(1)(a) GDPR)
For specific purposes, your personal data can only be processed on the basis of your consent. You may withdraw this consent at any time.
Withdrawal of consent is generally only applicable to the future use and processing of data. It does not affect any processing carried out prior to the withdrawal of consent, which remains lawful.
Provided you have given your consent, we process the following personal data (see above) for the following purposes:
- For being contacted to participate in a feedback survey
- Photos and video footage during the event
- Publication of photos and videos on social media
Right to revocation
You are entitled to revoke this consent for future data use at any time without giving reasons. Simply email us at Hannah.Behr@giz.de. Withdrawal of consent does not affect the lawfulness of any processing conducted on the basis of the consent up to the point of withdrawal.
Consequences of non-acceptance
You are not obliged to accept this declaration of consent. However, since subsequent activities may depend on the collection and processing of the data categories stated in the declaration, non-acceptance would preclude any use of these services/activities.
4. Disclosure to third parties
Non-disclosure
The data are not passed on to third parties unless GIZ is legally obliged or entitled to do so.
5. Transfer of data to a third country
No transfer
No data are transmitted to third countries.
6. Retention and erasure of your data
Legal retention limit
Your data will not be retained any longer
- than this in order to fulfill the purpose for which they were collected;
- than is necessary for another purpose that is compatible with the purpose for which the data are initially collected, as set out in Article 6(4) GDPR in conjunction with Section 23 of the German Federal Data Protection Act (BDSG), or
- than is necessary to comply with statutory retention periods.
7. Technical and organisational measures to protect your data
GIZ uses appropriate technical and organisational measures to protect data against unintended or deliberate falsification, destruction, loss or access by unauthorised persons. These measures are updated accordingly based on technical developments and adapted continuously in line with the given risks.
8. Your rights
In accordance with the General Data Protection Regulation, you have the right
- to obtain information about your data stored by us (Article 15 GDPR)
- to have your data stored by us rectified (Article 16 GDPR)
- to have your data stored by us erased (Article 17 GDPR)
- to obtain restriction of processing of your data stored by us (Article 18 GDPR)
- to object to the storage of your data if they are processed on the basis of Article 6(1)(1)(f) and (e), GDPR (Article 21 GDPR)
- to receive data that concern you in a commonly used and machine-readable format from the controller such that they can be potentially transmitted to another controller (right to data portability, Article 20 GDPR).
- to withdraw your consent to the extent that the data have been processed on the basis of consent (Article 6(1)(a) GDPR). The lawfulness of processing on the basis of consent given remains unaffected until receipt of the withdrawal.
- In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for GIZ is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
If you have any questions about the processing of your personal data, you can contact GIZ’s data protection officer at datenschutzbeauftragte@giz.de.