Privacy Policy XFAIR.app

General

We take the protection of your personal data very seriously and treat it confidentially and in accordance with legal data protection regulations. This privacy policy applies to our XFAIR.app for iOS and Android (hereinafter referred to as "APP").

Furthermore, we encrypt our data for transmission to ensure that your data is not read by unauthorized persons during transmission. We use a modern and permissible Internet security standard.

We would like to point out that data transmission on the Internet may have security gaps.

Responsible Party

The responsible party for data processing within the scope of this APP is:

XFAIR GmbH
Elisabeth-Schiermann-Bogen 1
85716 Unterschleißheim
Phone: +49 (0)89 3090968-0
Email: feedback@xfair.com
Website: www.xfair.com

Data Protection Officer

You can reach our data protection officer at:

Markus Scheid
Elisabeth-Schiermann-Bogen 1
85716 Unterschleißheim
Email: markus.scheid@xfair.com

Purposes of Processing and Types of Data

With XFAIR.app you have all important information about your event at your fingertips.

The APP offers the following main functions:

Login with your EMS account
General information about the event
Information about your hotel booking
Overview of your appointments in your personal calendar
Access to meeting room calendar
Phone book with all contacts registered for the event
Chat function for sending and receiving chat messages
Document download
Overview of all emails sent to you from the system (e.g. registration summary)
Link to the registration website
Link to XFAIR.lead (Lead Capture App)
Link to XFAIR.catering (Catering App)
Link to XFAIR.check-IN (Check-IN/OUT App)

As part of your use of the app, we automatically process certain data that is required for using the app:

Email and password: this information is required to authenticate you as an EMS user and app user.
App ID/UUID: the ID is automatically generated when the app is installed and sent to our server and is required for unique identification of the mobile device.
Event ID: this information is required for access to the corresponding event
Person ID: this information is required for user identification
PIN: this information is required for app registration
Token for push notifications: this token is necessary so that the correct receiving device is addressed when a push notification is sent.
First and last name: This information is required to display the logged-in user within the app menu and on the check-in/check-out screen
App user image: This information is required to display the user's photo within the app menu. If no photo is stored in EMS, the user's initials will be displayed.
Information such as device type, operating system version, model number, as well as the extended unique app name, app version

Depending on the app configuration, the following additional data may be processed:

Phone Book Module:

Personal data (first name, last name, photo, email, company and address, mobile number, attendance days, attendance status)

Calendar & Personal Calendar Module:

Appointment booking data (date, time, subject, meeting room, etc.)

Hotel Information Module:

Hotel booking data (hotel, hotel address, arrival, departure, etc.)

Chat Module:

Chat messages (message text, date and time of sent and received messages, recipients and senders)

Messages Module:

Emails (overview of your emails sent to you in EMS, read status)

Legal Basis for Storing Personal Data

The processing of personal data is carried out for the purpose of contract fulfillment according to Art. 6 Para. 1 lit. b GDPR.

General Storage Period for Personal Data

The storage period for personal data is based on the term of the main contract concluded with the responsible party.

What Data Protection Rights Do You Have?

When processing your personal data, you have the following data protection rights:

Right of Access (Art. 15 GDPR)

To request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected from us.

Right to Rectification (Art. 16 GDPR)

To request immediate correction of incorrect or completion of your personal data stored by us.

Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)

To request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims.

Right to Restriction of Processing (Art. 18 GDPR)

To request restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing according to Article 21 GDPR.

Right to Data Portability (Art. 20 GDPR)

To receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller.

Right to Object (Art. 21 GDPR)

To object to the processing of your personal data, insofar as there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

Right to Withdraw Consent (Art. 7(3) GDPR)

To withdraw your once given consent to us at any time. As a result, we may not continue the data processing based on this consent for the future.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

To lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

Amendment of this Privacy Policy

We reserve the right to adapt these data protection provisions at any time in compliance with legal requirements.

As of May 2022