Privacy Policy XFAIR.lead

General

We take the protection of your personal data very seriously and treat it confidentially and in accordance with legal data protection regulations. This privacy policy applies to our mobile iPhone and Android apps (hereinafter referred to as "APP").

For security reasons and to protect the transmission of data, this APP uses an HTTPS connection. This connection encrypts communication to the web service and protects your data.

We would like to point out that data transmission on the Internet may have security gaps.

Responsible Party

The responsible party for data processing within the scope of this APP is:

XFAIR GmbH
Elisabeth-Schiermann-Bogen 1
85716 Unterschleißheim

Phone: +49 (0)89 3090968-0
Email: feedback@xfair.com
Website: www.xfair.com

Data Protection Officer

You can reach our data protection officer at:

Markus Scheid
Elisabeth-Schiermann-Bogen 1
85716 Unterschleißheim

Email: markus.scheid@xfair.com

Purposes of Processing and Types of Data

A user account in our EMS (Event Management System) is required to use the APP.

With XFAIR.lead you can not only capture the business card information of a person, but also the data for qualifying the person as a lead.

The APP offers the following main functions:

• Login with your EMS account
• Scanning business cards, vCards or trade fair tickets
• Qualifying leads with a customizable data capture form
• Adding notes and additional images
• Immediate access to all captured leads and editing contacts in the app's history

When you use our APP, we process the following data from you:

• Email and password: this information is required to authenticate you as an EMS user and app user.
• App ID/UUID: the ID is automatically generated when the app is installed and sent to our server and is required for unique identification of the mobile device.
• Event ID: this information is required for access to the corresponding event.
• Person ID: this information is required for user identification.
• PIN: this information is required for app registration.
• First and last name: This information is required to display the logged-in user within the app menu.
• Information such as device type, operating system version, model number, as well as the extended unique app name and app version, are absolutely necessary for end-user support.

Legal Basis for Storing Personal Data

The processing of personal data is carried out for the purpose of contract fulfillment according to Art. 6 Para. 1 lit. b GDPR.

General Storage Period for Personal Data

The storage period for personal data is based on the term of the main contract concluded with the responsible party.

What Data Protection Rights Do You Have?

When processing your personal data, you have the following data protection rights:

Right of Access (Art. 15 GDPR)

To request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected from us

Right to Rectification (Art. 16 GDPR)

To request immediate correction of incorrect or completion of your personal data stored by us

Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)

To request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims

Right to Restriction of Processing (Art. 18 GDPR)

To request restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing according to Article 21 GDPR

Right to Data Portability (Art. 20 GDPR)

To receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller

Right to Object (Art. 21 GDPR)

To object to the processing of your personal data, insofar as there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

Right to Withdraw Consent (Art. 7(3) GDPR)

To withdraw your once given consent to us at any time. As a result, we may not continue the data processing based on this consent for the future

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

To lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose

Amendment of this Privacy Policy

We reserve the right to adapt these data protection provisions at any time in compliance with legal requirements.