Web3 Summit

To allow us to effectively provide our services to you, we may disclose your information to selected third parties: We may permit selected third parties such as business partners, suppliers, service providers, agents and contractors to use your personal information, for the purposes set out in paragraph 2 above, who will be subject to obligations to process such information in compliance with the same safeguards that we deploy. Currently, we disclose your personal information

• to the Rocket Science Group LLC [MailChimp] for the purposes of IT operations, mainly the provision of mailing services;

• to Raphael Michel rami.io Softwareentwicklung [pretix] for the purposes of handling ticket sales and payment reconciliation;

• depending on the payment option you chose, to Stripe, banks and/or credit card companies, for the purpose of payment processing;

• to the competent courts or to appointed lawyers, to carry out a legal dispute. Use justification: contract performance, legitimate interests (to enable us to effectively provide our services to you);

To carry out legal disputes: we may transfer your personal information to the competent courts and appointed lawyers. Use justification: contract performance, legitimate interests (to represent, enforce and / or defend our legal interests);

To comply with our legal obligations: We may disclose your personal information to third parties insofar legal obligations exist on our part to pass it on, e.g. to the police authorities in the context of criminal investigations or to the data protection supervisory authorities. Use justification: legal obligation, legitimate interests (to cooperate with law enforcement and regulatory authorities);

To transfer your information when the structure of the business changes: In the event that we (or a part thereof) are (i) subject to negotiations for the sale of our business or (ii) is sold to a third party or (iii) undergo a reorganisation, any of your personal information which we hold may be transferred to that re-organised entity or third party and used for the same purposes as set out in this policy, or for the purpose of analysing any proposed sale or re-organisation. We will ensure that no more of your information is transferred than necessary. Use justification: legitimate interests (to allow us to change our business);

Your personal information may be accessed by staff or suppliers in, transferred to, and/or stored at, a destination outside the European Economic Area (EEA) in which data protection laws may be of a lower standard than in the EEA. Regardless of location or whether the person is an employee or contractor we will impose the same data protection safeguards that we deploy inside the EEA.

Certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal information to these jurisdictions . In countries which have not had these approvals, (see the full list here http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm), we will transfer your personal information subject to European Commission approved contractual terms that impose equivalent data protection obligations directly on the recipient.

Where we use the service provider Rocket Science Group LLC [MailChimp], your personal information will be transferred to the USA, which have not been approved by the EU Commission to provide an essentially equivalent level of data protection. As Rocket Science Group LLC is subject to the EU-US Privacy Shield., this safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

We will retain your personal information for as long as is necessary for the processing purpose(s) for which it was collected and any other permitted linked purpose (for example certain transaction details and correspondence may be retained until the time limit for claims in respect of the transaction has expired or in order to comply with regulatory requirements regarding the retention of such data). So if information is used for two purposes we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period one that period expires.

We restrict access to your personal information to those persons who need to use it for the relevant purpose(s). Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised (and the anonymised information may be retained) or securely destroyed. By way of example:

1. (a) use to perform a contract: in relation to your personal information used to perform any contractual obligation with you, we may retain that personal information whilst the contract remains in force plus a further 6 years to deal with any queries or claims thereafter; and

2. (b) where claims are contemplated: in relation to any information where we reasonably believe it will be necessary to defend or prosecute or make a claim against you, us or a third party, we may retain that information for as long as that claim could be pursued.

Your rights

If you have any questions in relation to our use of your personal information, you should first contact us as per paragraph 7.4 below. Under certain conditions, you may have the right to require us to:

• (a) provide you with further details on the use we make of your information;

• (b) be provided with access to any data held about you by us, generally within 1 month of your request;

• (c) update any inaccuracies in the personal information we hold (please see paragraph 5.3 below);

• (d) You can ask us to erase Personal Data in certain circumstances and we will take reasonable steps to inform other controllers that are processing the data that you have requested the erasure of any links to, copies or replication of it.

• (e) object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights (please see paragraph 7.4 below); and

• (f) restrict how we use your information whilst complaints are resolved and also restrict processing in certain other circumstances.

Your exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). If you exercise any of these rights we will check your entitlement and respond in most cases within a month. If you are not satisfied with our use of your personal information or our response to any exercise of these rights you have the right to complain to your data protection authority.

If we process your personal information on the basis of legitimate interests (use justification), you have the right to object to the data processing at any time. Unless we demonstrate overriding compelling legitimate grounds for the processing of the personal information within the meaning of Art. 21 GDPR, we will comply with your objection. Please contact us as set out in paragraph 7.4 below If you object to the data processing according to this paragraph 7.2, we process your personal information collected in this context to answer your inquiry. Your personal data will then be processes in order to fulfil our legal obligations.

Data Controller

Web 3.0 Technologies Stiftung is responsible for and is the “data controller” of your personal information processed by us under this Privacy Policy.

We can be contacted in relation to your rights or any questions you may have in respect of this Privacy Policy or our processing of your personal information at the following addresses: