Privacy Policy for Attendees

You can register for events organized by TUM Venture Lab Healthcare on this website.

The following explains which data is collected as part of the registration for an event and during participation in an event, and for which purposes this data is processed.

If you have any questions regarding an event and, in particular, regarding the processing of your personal data in connection with the registration and participation in an event (including the exercise of your data subject rights), you can contact us directly using the details below.

1. Controller

The controller within the meaning of data protection law is:

TUM Venture Labs Management gGmbH (on behalf of TUM Venture Lab Healthcare) Lichtenbergstr. 6 85748 Garching b. München Germany

If you have questions regarding data protection, you can contact us using the contact details above, or our data protection officer, Alexander Stolberg, at stolberg@unternehmertum.de.

2. Registration for an Event

If you register to attend an event, we will generally process the data you provide during registration in order to enable your attendance in the event, in particular to send you a registration confirmation and, where applicable, for identification at event entry. The categories of data processed include master data (name, company, position), contact data (email, telephone number), event-related data (booked sessions, participation times, interactions), communication data (messages within the platform) and technical data (IP address, log files).

The legal basis for this is Art. 6 (1) lit. b) GDPR; the processing of your data is necessary for the performance of the contract regarding your participation in the event.

If we collect additional data that is not strictly necessary for the performance of the contract with you, such data collection serves the optimization of the event or your event experience, for example to adapt and optimize the event according to the interests of the attendees and the target group, as well as for the preparation, evaluation and analysis of the event.

The legal basis for this processing is Art. 6 (1) lit. f) GDPR, our overriding legitimate interest in the optimization, evaluation and analysis of the event.

If, as part of the registration process, you also give your explicit consent for the processing of certain data for specific purposes, the legal basis for this processing is your consent, which may be revoked at any time, pursuant to Art. 6 (1) lit. a) GDPR.

We use Typeform (TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain) as a technical service provider to run the online registration process. Typeform processes your registration data exclusively on our behalf and according to our instructions as a processor within the meaning of Art. 28 GDPR.

3. Contact

If you contact us by email, telephone or via a contact form in order to ask questions about the event or request information, the information you provide will be processed and stored for the purpose of handling the respective enquiry. The information requested in the course of such contact is required in order to process your enquiry, address you correctly and provide you with a response.

As far as your enquiry relates to the conclusion or performance of a contract, the processing is carried out for the performance of pre-contractual measures or for the performance of a contract (Art. 6 (1) lit. b) GDPR). Otherwise, the processing is based on our legitimate interest in the proper handling of enquiries and efficient communication with attendees and prospective attendees (Art. 6 (1) lit. f) GDPR). This interest includes, in particular, responding to enquiries, clarifying organizational matters and ensuring the smooth running of the event.

4. Application Documents and Distribution to the Jury

If you apply to participate in the pitch competition, you will submit application documents, in particular a pitch deck and, where applicable, further supporting materials ("Application Documents"). Please note that the Application Documents should not contain confidential information, as they will be shared with third parties as described below.

We will share your Application Documents with the members of the jury we have selected for this competition ("Jury Members"), who are external experts, investors and/or partners from our network, for the purpose of evaluating and scoring the applications and selecting the winner(s) of the competition. Jury Members review the Application Documents in their own capacity and are not our employees; each Jury Member is responsible for the further handling of the Application Documents once shared.

The categories of data processed for this purpose are the content of the Application Documents (which may include your name, company, role and business/pitch-related information) as well as master data and contact data collected during registration.

The legal basis for this processing is Art. 6 (1) lit. b) GDPR, as the sharing with the Jury Members is necessary to carry out the pitch competition you applied for, and, in the alternative, Art. 6 (1) lit. f) GDPR, our legitimate interest in conducting a fair and well-informed evaluation of applications using external expertise from our network.

We ask Jury Members to treat the Application Documents confidentially and to use them solely for the purpose of the evaluation. Before receiving any Application Documents, each Jury Member is required to sign a confidentiality and purpose-limitation undertaking towards us. However, since Application Documents are, per the application requirements, non-confidential, we cannot guarantee how each individual Jury Member handles or further uses the information contained in them.

5. Sharing of Registration Data Among Co-Organizers

Where an event is jointly organized with one or more co-organizing partners, the registration data described in Section 2 (master data, contact data, event-related data) may be shared among all organizers of the event for the purposes of organizing, conducting and following up on the event, including joint communication with attendees. The co-organizers of a given event will be named as part of the event registration.

The legal basis for this sharing is Art. 6 (1) lit. b) GDPR, insofar as it is necessary for the performance of the contract regarding your event participation, and Art. 6 (1) lit. f) GDPR, our and the co-organizers' legitimate interest in the joint organization, evaluation and follow-up of the event.

Each organizer that further processes your data under its own responsibility (for example, to invite you to its own future events pursuant to Section 7) acts as an independent controller for that further processing.

Where we and one or more co-organizers jointly determine the purposes and means of processing your registration data for a given event, we act as joint controllers within the meaning of Art. 26 GDPR. In such cases, we conclude an arrangement with the co-organizer(s) setting out the respective responsibilities for compliance with the GDPR; the essence of this arrangement is made available to you upon request. Regardless of the terms of that arrangement, you may exercise your rights under Section 10 against each of the joint controllers.

6. Attendance at an Event

When attending an event, data may be collected and processed. During admission control, the data relating to the person of the ticket holder stored on the ticket may be collected and processed. Where applicable, data relating to the time of entry and, where applicable, the time of leaving the event may also be stored.

The legal basis for this is Art. 6 (1) lit. b) GDPR; the processing of your data is necessary for the performance of the contract regarding your attendance at the event.

If, in the context of attending the event, you provide your data, in particular by reading an RFID tag or scanning the QR code on your name badge at an exhibition stand, this data will be transmitted by us to the respective operator of the exhibition stand at which you provided your data. In this case, the further processing and use of your data lies with the operator of the exhibition stand as the controller.

6.1 Photography

Photo and video recordings may be made during the event. These photo and video recordings may show attendees and make them identifiable. These photo and video recordings may be used for public relations purposes and for documenting the event. The publication of such recordings may take place both offline (print) and online, in particular on our website or on our pages on various social media platforms (e.g. LinkedIn).

The legal basis for this processing is Art. 6 (1) lit. f) GDPR, our overriding legitimate interest in documenting the event and using photo and video recordings of the event for public relations purposes. You will be informed separately on site about such recordings.

6.2 Feedback After an Event

After attending an event, you may be contacted by email in order to obtain your feedback on the event. You may object to such contact at any time by contacting us using the contact details provided above. If you provide your feedback on the event via the website, the information you provide will be used exclusively for the evaluation of the event and the optimization of future events.

The legal basis for contacting you to request your feedback is Art. 6 (1) lit. f) GDPR or Art. 6 (1) lit. a) GDPR, if explicit consent has been obtained from you in individual cases. Our overriding legitimate interest is the evaluation of the event and the optimization of future events.

7. Invitations to Further Events

If you have registered for an event, we may use the email address provided during registration to send you invitations to similar events organized by us by email, provided that you have not objected to such use. You may object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic tariffs by using the unsubscribe link contained in every email or by contacting us using the contact details provided above.

We have a legitimate interest in informing existing attendees about comparable offers and maintaining existing business relationships. In doing so, it is ensured that communication is limited to similar events and that you are given the opportunity to object to such use at any time. The legal basis is Art. 6 (1) lit. f) GDPR in conjunction with Section 7 (3) German Act Against Unfair Competition (UWG). You are already informed about this use and your right to object at the point of data collection, i.e. as part of the registration form.

8. Data Retention

Your personal data will only be processed for the period necessary to achieve the purpose of the processing and for the subsequent follow-up of the event. Once the purpose no longer applies, the data will be deleted or anonymized, unless further statutory retention obligations apply.

9. Transfer to Third Countries

To the extent that personal data is transferred to countries outside the European Union or the European Economic Area, this will only take place in compliance with the statutory requirements and on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses. In addition, transfers to the United States are based on the EU-U.S. Data Privacy Framework, provided that the recipient is certified under this framework. Furthermore, additional measures may be implemented where necessary to ensure an adequate level of data protection.

10. Your Rights

You have the right to request information at any time about the personal data stored about you. You also have the right to rectification of inaccurate data, deletion of your data or restriction of processing, provided that no statutory retention obligations prevent this. You may object to the processing of your data based on legitimate interests and assert your right to data portability.

If you have given consent to the processing of your data, you may withdraw such consent at any time with effect for the future.

Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise these rights, you may contact us or, where applicable, our data protection officer at any time without formal requirements.