Privacy notice

1. Controller

The controller responsible for the processing of personal data through this website and its RSVP function is:

Phone: +49 351 2138-0
Email: info@wfs.saxony.de

The Transatlantic Executive Dinner is jointly hosted with the Arizona Commerce Authority. Personal data may be made available to authorised persons involved in organising and delivering the event where this is necessary for invitation management, attendance planning, catering or event administration.

Data Protection Officer

The Data Protection Officer of Wirtschaftsförderung Sachsen GmbH can be contacted at:

Phone: +49 351 2138-180
Email: info@wfs.saxony.de

2. Personal data processed

When you submit an RSVP, we process the information you provide through the registration form:

• first and last name;
• business email address;
• company or organisation;
• job title;
• optional dietary requirements or allergy information;
• consent information and timestamps; and
• the date and time of registration.

Dietary and allergy information is optional. Please provide only information that is necessary for catering or your safe participation in the event.

3. Purposes and legal bases

The personal data submitted through the RSVP form is processed for the purposes of administering invitations and registrations, communicating with attendees, planning attendance and organising the event.

Where the RSVP form requests your consent, the processing is based on Article 6(1)(a) GDPR.

Dietary or allergy information may constitute health data and therefore special-category personal data within the meaning of Article 9 GDPR. Where such information is provided, it is processed only for catering and attendee-safety purposes and on the basis of your explicit consent pursuant to Article 9(2)(a) GDPR.

Providing dietary or allergy information is voluntary and is not required to register for the event.

4. Recipients and service providers

Access to RSVP information is restricted to authorised persons who require the information for the organisation and delivery of the event.

The RSVP database is operated using Supabase as technical infrastructure. The database for this event is hosted in the Frankfurt (eu-central-1) region.

Personal data is not publicly accessible through this website.

5. Transfers outside the European Economic Area

The Arizona Commerce Authority is established in the United States. Where personal data is transferred to or accessed by recipients outside the European Economic Area, such transfers will be carried out in accordance with the requirements of Chapter V GDPR and on the basis of an applicable transfer mechanism.

6. Retention

Personal data submitted through the RSVP form will be retained only for as long as necessary for the administration and delivery of the event and any directly related follow-up.

Data will be deleted once it is no longer required for these purposes, unless a longer retention period is required by applicable law.

Dietary and allergy information will be deleted once it is no longer required for catering or attendee-safety purposes.

7. Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, alteration, disclosure or loss.

RSVP submissions are transmitted through a server-side endpoint using encrypted connections. The browser does not write directly to the database. Privileged database credentials are retained exclusively on the server, public read access to RSVP records is disabled, and RSVP form contents are not recorded in application logs.

8. Cookies and similar technologies

This website does not use analytics, advertising trackers, embedded maps, embedded videos or non-essential cookies.

The links to Google Maps and Apple Maps are external links. The respective provider's privacy policy applies once you leave this website.

As the website does not currently store or access information on a user's device for non-essential purposes, no consent banner is displayed. Section 25 TDDDG requires consent for non-essential storage/access on a user's terminal equipment, while technically necessary access can be exempt.

9. Your rights

Under the GDPR, you may have the right to:

• obtain information about personal data processed about you;
• request rectification of inaccurate data;
• request erasure of your personal data;
• request restriction of processing;
• receive personal data in a portable format where the statutory requirements are met; and
• withdraw consent at any time with effect for the future where processing is based on consent.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Requests can be sent to info@wfs.saxony.de.

You also have the right to lodge a complaint with a competent data-protection supervisory authority. The competent supervisory authority for Saxony is the Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden.

10. Changes to this Privacy Notice

This Privacy Notice may be updated where the operation of the website or the processing of personal data changes. The current version is identified by the date stated above.