T-Digital contest in VOXXED DAYS THESSALONIKI 2023

TERMS & CONDITIONS

By participating in the contest, you take into account and acknowledge the following information about data processing and contest rules:

1. 1. Deutsche Telekom Cloud Services EPE (“T-Digital”) will process your name, surname. Your data will only be used for the purpose of my participation and for evaluation of the contest. Your data will not be stored and will be deleted after the contest ends. More detailed information about processing of your data is available by T-Digital team on Voxxed Days event and here.
   2. To participate in the contest, you need to fill in the paper ticket, provide your name and surname and drop the paper ticket into the Contest Box.
   3. The draw for the contest winner will take place on Saturday, 25th November 2023 at around 18:00 at the main stage during the closing session of the Voxxed Days Thessaloniki event.
   4. The contest winner will be drawn randomly from all participants, who filled in and drop the paper ticket from the Contest Box.
   5. To receive the prize, the winner must be present at the time his/her name is called.
   6. If the called participant is not present at the time the name calling, the prize will be forfeited, and a runner-up will be selected from the remaining participants. This process may be repeated until the selected winning participant is present at the time his/her name is called.
   7. The prize will be provided to the winner on Saturday 25th, upon the announcement around 18:00, during the Closing Session of the event.

PRIVACY NOTICE FOR EVENT PARTICIPANTS

This Privacy Notice for Event Attendees (“Notice“) provides information about how we process your personal data if you choose to attend an event (whether in person or online) that we organize directly or at which we are a partner or co-organiser (“Event“).

This Notice was issued and amended on 21 November 2023. We will update and amend it from time to time. You will be notified of any material changes. The most current version of the Notice can always be found at … (“Website“).

We process your personal data with due care in accordance with all relevant legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR“).

This Notice applies exclusively to the processing of personal data carried out by us. This Notice does not address the processing and privacy practices of other third parties, for which we are not responsible.

1. 1. WHO PROCESSES YOUR PERSONAL DATA? 

1. 1. We, Deutsche Telekom Cloud Services EPE, with its registered seat at 9 Fragkoklisias Str., Marousi 15125, Attica, and Karolou Ntil 33, Thessaloniki 546 23 (“Controller“, “we“, “us” or “our“), process your personal data as the Controller.
      1. 1. If you would like to learn more about the processing and protection of personal data or have any further questions or comments, you can contact us by email at dtcs.greece.privacy@eu.telekom.com.

• • WHOSE DATA DO WE PROCESS?

• • We process your personal data, i.e., the data of the Event participants (“you“, “data subject” or “your“). We obtain the personal data we process about you directly from you. For the purposes set out below, we do not process personal data of persons under the age of 16.

• • WHY DO WE PROCESS YOUR PERSONAL DATA, WHICH DATA DO WE PROCESS ABOUT YOU AND BASED ON WHICH LEGAL BASIS?

• • The main purpose of the Events is to support, improve and develop our business and to support business of other members of Deutsche Telekom Cloud Services group. To achieve this purpose, we may process your personal data for several partial purposes based on various legal bases. Kindly note that not all purposes may be applicable for you. Concrete purpose will depend on the fact, whether the Event is organized by us or not, and what kind of activities we perform during the Event. More detailed information can be found in the table below.

Purpose of data processing	Detailed description of the purpose	Categories of processed data	Legal basis for data processing
Registration for the Event	If you decide to participate in the Event we organize, you may need to register as a participant in advance.	In order to register, we may need basic information from you such as your first name, last name, email, telephone contact or address. We may require this information particularly for online Events.	Article 6(1)(b) GDPR – performance of the contract and taking steps necessary prior contract conclusion
Participation in the Event and activities during the Event	During the Event, we may take photographs or video footage which we may publish on social media (e.g. LinkedIn) or we may invite you to take part in various support activities during the Event (e.g. quizzes and questionnaires). For this purpose, we will process data about you that is relevant to the running of the Event.	In addition to your contact details (name, surname, address, email and telephone contact details), we may process your activities at the Event, information you provide to us when carrying out activities during the Event (e.g., completed questionnaires, quizzes).	Article 6(1)(b) GDPR – performance of the contract  Article 6(1)(f) GDPR – legitimate interest in promoting the Event and spreading awareness about our organization
Participation in competitions related to the Event and evaluation of competitions	To encourage your interest in the Event and our organization, we may from time to time run a competition during the Event. If you choose to participate, we will process the personal data about you required to enter the competition, to fulfil the conditions of participation in the competition, to evaluate the results of the competition and to contact you in the event of you winning.	The specific scope of the personal data we process depends on the type of competition we run and the competition you enter, but in the most cases, we will process your contact details (name, surname, address, email, and telephone contact details) and data relating to your participation in the competition.	Article 6(1)(b) GDPR – performance of the contract
Obtaining feedback on the Event and our organization	Our objective is to improve ourselves and to develop our business. Thus, we are interested in your opinion on us and on the Event. We may request you to provide us with your feedback on us, Event or the related activities. Feedback can be collected by various means, including electronically, via email.	For this purpose, we will process your contact data (name, surname and email) and the content of your feedback. If the feedback will be collected on anonymous basis, no personal data about you will be processed.	Article 6(1)(f) GDPR – legitimate interest to find out your opinion on us, our activities and our organization and to develop our business
Solving technical problems and providing technical support during the Event	We strive to make the Event run as smoothly and as smoothly as possible so that you have the best possible experience when attending. Exceptionally, however, there may be a technical issue that needs to be resolved (particularly in the case of online Events), for which we may need to process some of your personal data.	The exact scope of the data processed depends on the specific problem, but in the most cases, we will process your contact details (name, surname, email, telephone contact) and possibly technical information about the equipment you are using to participate in the Event for this purpose.	Article 6(1)(f) GDPR – legitimate interest in ensuring the technically smooth running of the Event and in rectifying any problems that may arise
Compliance with other legal obligations	We are under an obligation to process your personal data in order to comply with the legal obligations to which we are subject (e.g., tax and accounting obligations). We may also be under a duty to disclose your data to public authorities where we are under such a duty under applicable law.	We will process personal data about you that is necessary for us to comply with our legal obligations.	Article 6(1)(c) GDPR – compliance with legal obligations
Proving, exercising and defending our legal claims	In the event of a dispute, we are entitled to process your personal data for the purpose of proving our claims.	As part of this purpose, we may process any personal data that is necessary to achieve that purpose, even if your personal data was originally collected for one of the other purposes listed above. This will include your contact details (name and surname, address, telephone number, email), information relating to your suggestions, complaints and requests, information relating to the Event, etc. The scope of the personal data processed may be broader, depending on the specific legal claim.	Article 6(1)(f) GDPR – legitimate interest in proving our legal claims in relation to the Event

• • Where we process your personal data on the basis of our legitimate interest under Article 6(1)(f) GDPR, you are entitled to object to such processing under Article 21 GDPR. If you choose to object to processing, we ask you to do so by sending an email to dtcs.greece.privacy@eu.telekom.com.

• • If the processing of your personal data is a contractual requirement under Article 6(1)(b) GDPR and you choose not to provide us with this personal data, this may result in the inability to enter into a contractual relationship with you, i.e., the inability to provide you with Event-related services or other complications related to the performance of our contractual obligations to you.

• • If we are required by law to process personal data, you may be under a duty to provide us with that personal data. If you refuse to do so, this may have various legal consequences for both you and us, including adverse consequences (e.g., inability to perform the relevant act, inability to cooperate further, etc.).

• • WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

• • We take the protection of your personal data very seriously, so we try to limit the scope of recipients as much as possible. In particular, our employees have access to your data, provided that this is necessary for the performance of their work or for the provision of the service. They process your personal data based on authorisations and in accordance with our internal data processing instructions. At the same time, our employees are bound by a contractual duty of confidentiality.

• • We further disclose your personal data, to the extent necessary to the following categories of recipients outside our organization.

• • Property and personnel related companies within Deutsche Telekom AG Group that help us to provide key administrative, legal, accounting and organizational support activities. A list of Deutsche Telekom AG Group members can be found here:https://www.telekom.com/en/company/worldwide.

• • Companies assisting us in organizing and promoting the Event as our subcontractors and other intermediaries where they have taken appropriate technical, contractual, and organizational measures to ensure that your personal data is processed in accordance with the law. When we use processors for processing of your personal data, we will always check in advance whether the processor in question meets the organizational and technical requirements to ensure the security of the processing of your personal data.

• • Please note that our subcontractors may use other suppliers to provide and receive certain services that require the processing of your personal data. Such services may include, for example, cloud services, web hosting, various IT services, including data analytics and IT infrastructure, customer support, payment gateway and payment institution services, email services, accounting services, tax and legal advisor services, etc.

• • We may share your personal data with other recipients if we believe that access to and processing of your personal data is necessary to: (i) comply with legal obligations and/or court orders; (ii) prevent unlawful acts or conduct that is contrary to goodwill; (iii) protect our interests, property or safety, or protect the interests, property or safety of our users or the public, but only if it is in accordance with applicable law. Where possible, we will inform you of such processing of your personal data.

• • DO WE TRANSFER YOUR PERSONAL DATA TO COUNTRIES OUTSIDE THE EU/EEA?

• • As a standard practice, we do not transfer your data outside the European Union and the European Economic Area. However, some of our partners may have subcontractors located in third countries, or process personal data in third countries in other ways. In this case, we endeavour to ensure that your personal data is only transferred to countries that are considered to have an adequate level of data protection in accordance with the relevant decision of the European Commission, or that have adequate safeguards in place to protect your personal data. We generally use standard contractual clauses for transfers to third countries or require other reasonable safeguards and appropriate measures to be met. Regardless of the country in which your personal data is processed, we take appropriate technical, legal, and organizational measures to ensure that the level of protection is the same as in the European Union and the European Economic Area. If you would like to learn more about the international transfer of your personal data and the relevant safeguards, we have in place to govern the transfer of your personal data, you can contact us at dtcs.greece.privacy@eu.telekom.com.

• • IS YOUR PERSONAL DATA SUBJECT TO AUTOMATED DECISION-MAKING AND PROFILING?

• • Your personal data is not subject to automated individual decision-making or profiling.

• • IS YOUR PERSONAL DATA PROCESSED SECURELY?

• • We take all reasonable and appropriate security measures to protect us and you from unauthorized access, unauthorized alteration, disclosure, or destruction of the personal data we process. Measures include encryption, firewalls, secure devices, and access rights systems where appropriate. If, despite the security measures, a security breach occurs that is likely to have a negative impact on your privacy, we will notify you of the breach as soon as possible. If you have any questions, please feel free to contact us at dtcs.greece.privacy@eu.telekom.com.

• • HOW LONG DO WE STORE YOUR PERSONAL DATA?

• • We only retain your personal data for as long as it is legally permitted and necessary for the purposes for which it was collected. However, this does not preclude that we may continue to process your personal data on another legal basis for a longer period, mainly to comply with legal obligations.

• • Information about your registration for a specific Event, information about the activities you have performed at the Event (e.g., results from quizzes and questionnaires, information about competitions) will be stored for few days or maximum for 6 months (depending on the Event and concrete data processing purpose). Exceptionally, the above-mentioned information will be processed to the extent necessary even after the end of the processing period, mostly to comply with legal obligations (e.g., obligations under tax and accounting regulations for a period of 10 years) or if this is necessary to prove legal claims in accordance with our legitimate interests. If you would like information regarding the specific retention period of your personal data, please do not hesitate to contact us at dtcs.greece.privacy@eu.telekom.com.

• • WHAT ARE YOUR RIGHTS?

Your right	What does it mean?
Right of access	You have access to your personal data that we process. This means that you can contact us and ask us to confirm whether or not your personal data is being processed and, if so, you have the right to request access to your data, which we will provide to you in the form of a “register” (in particular, we will indicate the purpose, the category of personal data, the category of recipients of the personal data, the retention period or the criteria for determining the retention period).
Right to rectification	You have the right to request the rectification of inaccurate personal data concerning you.
Right to erasure	You can also ask us to erase the personal data we have processed about you. We will accept such requests unless we have a right not to erase your personal data.
Right to restriction of processing	You have the right to ask us to restrict processing if: you have requested the rectification of your personal data; you have objected to the processing until we have considered your request; the processing was unlawful, but you do not want us to delete your personal data; or we no longer need your personal data but your personal data is necessary for the defence of your legal claims.If you have requested that we restrict the processing of your personal data, we may only process your personal data with your consent if it is necessary in connection with legal claims, to protect someone else’s rights or where there is an important public interest.
Right to object to data processing	If we process your personal data based on our legitimate interest or for direct marketing purposes, you may object to such processing. We may further process your personal data if we demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms or for the establishment, exercise or defence of legal claims.
Right to data portability	You have the right to receive your personal data in a structured, commonly used and machine-readable format for the purpose of transferring the personal data to another controller.
Right to withdraw consent to data processing	If we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time. Withdrawal of your consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Right to file a complaint	If you believe that the processing of your personal data does not comply with the relevant data protection legislation, you may file a complaint with the competent data protection supervisory authority (the Hellenic Data Protection Authority: https://www.dpa.gr/en).
Right related to automated decision-making and profiling	You have the right not to be subject to automated decision-making, including profiling, which has legal effects or a similarly significant effect on you. We do not use automated decision-making or profiling for the above data processing purposes. However, if you have been the subject of an automated decision and you disagree with the outcome, you can contact us using the details below and ask us to review the decision in a non-automated way.

You can exercise your rights as set out above free of charge by sending an email to dtcs.greece.privacy@eu.telekom.com. Please note that we may require confirmation of your identity depending on the nature of your request.