Information pursuant to Article 13 of the GDPR regarding the taking of photographs

I. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:


ITQ GmbH
Parkring 4
85748 Garching near Munich
Telephone: +49 89 321 981-70
Fax: +49 89 321 981-89
Email: info@itq.de
Website: www.itq.de
Authorised representatives: Dr Rainer Stetter, Dr Bernd Spiegelberger

The data protection officer for the data controller is:

Wolfgang Steger, Solicitor, certified Data Protection Officer (DSB) – TÜV
Am Neuen Weg 21
82041 Oberhaching
Telephone: +49 178 771 4857
Email: steger@ra-steger.info

II. Purposes for which personal data is to be processed

Public relations and press relations · Advertising & marketing (print, digital, outdoor advertising) · Company website & landing pages · Social media channels (Instagram, Facebook, LinkedIn, YouTube, TikTok, etc.). Internal communications and training materials.

III. Legal basis for data processing

Article 6(a) of the GDPR, where you have given your consent; Article 6(b), insofar as the processing is strictly necessary for the performance of a contract (organisation of the event), and Article 6(f) of the GDPR, insofar as the processing is necessary for the pursuit of the organisation’s objectives and there is no reason to believe that the data subject’s legitimate interest in preventing the processing outweighs this.

IV. Recipients/Categories of recipients

Viewers of the images (customers/prospective customers, employees, business partners); service providers commissioned by ITQ GmbH (e.g. photographers, video production companies) as well as, where applicable, external service providers who are contractually bound to maintain confidentiality and comply with the GDPR, and who act exclusively on behalf of ITQ GmbH, and partner companies.

V. Categories of personal data

Photographs of you, category (student/lecturer, etc.), country of origin, form of address and title, first name and surname, email address, telephone number, institution (name of university or company), degree programme and semester, age, etc.

VI. Transfer to a third country

Not relevant

VII. Duration of storage

In principle, for as long as the purpose set out in point 3 is being pursued

VIII. Rights of data subjects

As a data subject, you have the following rights under the GDPR:

  • Information (Article 15)
  • Correction (Art. 16)
  • Deletion (Art. 17)
  • Restriction of processing (Art. 18)
  • Objection to processing (Art. 21)
  • Data portability (Art. 20)

Withdrawal of consent, where applicable (Article 7(3))

IX. Right to withdraw consent

You may withdraw your consent at any time with effect for the future. Please address your withdrawal to the data controller mentioned above or to the data protection officer.

X. Right to lodge a complaint with a data protection authority

You have the right to lodge a complaint (Article 77 of the EU GDPR in conjunction with Section 19 of the BDSG) with the Bavarian State Office for Data Protection Supervision

Promenade 18, 91522 Ansbach, Germany

Telephone: +49 981 180093-0

Fax: +49 981 180093-800

Email: poststelle@lda.bayern.de