TICKET

Privacy policy

General Information

1. Name and Contact Details of the Controller

This privacy notice applies to data processing by:
GPM Deutsche Gesellschaft für Projektmanagement e. V. (hereinafter “GPM”)
Am Tullnaupark 15
90402 Nuremberg
Phone: +49 911 433369-0
Email: info@gpm-ipma.de

The company’s Data Protection Officer for GPM can be reached at dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, attn. Dr. Christian Lenz, or at datenschutz@dhpg.de or 02261-8195-0.

2. Rights of Data Subjects

You have the right to:

  • request information pursuant to Art. 15 GDPR about your personal data processed by us. If we process your data, you can, in particular, request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed (especially in the case of recipients in third countries), the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, or to object, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if they were not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
  • request pursuant to Art. 16 GDPR the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us.
  • request pursuant to Art. 17 GDPR the erasure of your personal data stored by us, unless processing is required, in particular, for exercising the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims.
  • request pursuant to Art. 18 GDPR the restriction of processing your personal data if you contest the accuracy of the data, if processing is unlawful but you oppose its erasure and we no longer need the data, yet you require them for establishing, exercising, or defending legal claims, or if you have objected to processing pursuant to Art. 21 GDPR and it is not yet determined whether our legitimate grounds override your interests.
  • receive pursuant to Art. 20 GDPR your personal data that you have provided to us, in a structured, commonly used and machine-readable format, or request its transmission to another controller, provided that the processing is based on your consent or a contract and is carried out by automated means.
  • withdraw your consent pursuant to Art. 7(3) GDPR at any time with effect for the future. This results in us no longer continuing the data processing based on this consent.
  • lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace, or at our company’s registered office.

3. Right to Object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1) Sentence 1 lit. e or f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the first case, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or unless the processing serves to establish, exercise, or defend legal claims.
In the latter case, you have a general right to object, which we implement without requiring a particular situation to be specified. If you wish to exercise your right to withdraw or object, an email to info@gpm-ipma.de. is sufficient.


4. Disclosure of Data

Your personal data will not be disclosed to third parties for any purposes other than those listed below. We only share your personal data with third parties if:

  • you have given your explicit consent pursuant to Art. 6(1) Sentence 1 lit. a GDPR,
  • the disclosure is necessary for establishing, exercising, or defending legal claims pursuant to Art. 6(1) Sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
  • a legal obligation exists for the disclosure pursuant to Art. 6(1) Sentence 1 lit. c GDPR, or
  • it is legally permissible and necessary pursuant to Art. 6(1) Sentence 1 lit. b GDPR for managing contractual relationships with you.

In addition, our processors receive your personal data for processing on our instructions, insofar as this is necessary for fulfilling the contract. Our processors have no independent right to use your data.

If our event takes place at the premises of a cooperation partner, that partner may carry out admission or security checks in individual cases. For this purpose, it is necessary for us to provide the participant list to the partner. Our legal basis is Art. 6(1) Sentence 1 lit. b) GDPR. The partner only uses the data for admission checks to our event. Afterward, the participant list must be destroyed by the partner. You can find more information about data protection under the link to the cooperation partner’s data protection information specified on the registration form.

5. Data Security

During your visit to our website, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser, generally 256-bit encryption. If your browser does not support 256-bit encryption, we switch to 128-bit v3 technology. You can see whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol or by the use of “https” before the address of our (sub)website. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

6. Third Countries

We only transfer data to third countries in accordance with legal provisions. The permissibility of data transfer to third countries is governed by Art. 44 et seq. GDPR. If we transfer your data to a third country, you will be informed of this in the specific data protection information for the respective processing operation, along with details of the relevant legal provisions.
 

Specific Privacy Information for Data Processing on the Website

1. When Visiting the Website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • date and time of access,
  • name and URL of the retrieved file,
  • website from which access occurs (referrer URL),
  • the browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

We process the aforementioned data for the following purposes:

  • ensuring a smooth connection to the website,
  • ensuring comfortable use of our website,
  • evaluating system security and stability, and
  • for further administrative purposes.

The legal basis for data processing is Art. 6(1) Sentence 1 lit. f GDPR. Our legitimate interest lies in operating our website and presenting our organization. Your data will be deleted once they are no longer required for the stated purposes, at the latest after 6 months.

2. When Using Our Contact Options

If you have any questions, we offer you the opportunity to contact us using the details provided. Through these contact options, we process the data that you submit by using the respective communication method. Data processing for the purpose of contacting us is based on Art. 6(1) Sentence 1 lit. f GDPR, stemming from our legitimate interest in communicating with our customers and responding to incoming inquiries. The personal data collected will be deleted once your inquiry has been dealt with. If your inquiry is aimed at concluding a contract, Art. 6(1) Sentence 1 lit. b) GDPR serves as the legal basis. In this case, we store your data for the duration of the statutory retention periods.

3. When Subscribing to Our Newsletter

If you have expressly consented pursuant to Art. 6(1) Sentence 1 lit. a GDPR, we will use your email address to regularly send you our newsletter. To receive the newsletter, it is sufficient to provide an email address and your name. We use your name so that we can address you personally in the newsletter. You can also voluntarily choose your GPM region and the topics of the newsletter to receive corresponding information. Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to info@gpm-ipma.de. We store your data until you withdraw your consent.

Mailingwork

We use the “mailingwork” tool from mailingwork GmbH, Birkenweg 7, 09569 Oederan, to send and analyze our newsletter. mailingwork processes the data only on our instructions and has no independent right to use it.

Newsletter Analysis

We use analysis tools in our newsletters to see whether a newsletter has been opened and which links were clicked. This enables us to optimize future newsletters and provide you with individualized newsletter information. You can find more information at: mailingwork.de.
Tracking takes place only with your consent pursuant to Art. 6(1) Sentence 1 lit. a GDPR, which you grant when signing up for the newsletter. You may withdraw this consent at any time by, for example, unsubscribing via the link at the end of each newsletter. Alternatively, you can email your unsubscribe request at any time to info@gpm-ipma.de.
Once you unsubscribe from the newsletter, your data will be deleted.

8. Cookies, Analysis Tools, Plugins, and Other Third-Party Elements

We use cookies, analysis tools, plugins, and other third-party elements on our website. Cookies are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.). Cookies do not harm your device, nor do they contain viruses, trojans, or other harmful software. Cookies store information related to the specific device used. However, this does not mean we can directly identify you. Analysis tools evaluate user behavior on the website and enable the operator to record and assess visits to their own website. Plugins and other third-party elements are used to integrate content or other services from such providers into a website.

a) Required Cookies and Similar Tools

Our use of required cookies and similar tools is aimed at providing website services and making our offering more convenient for you. We process your personal data collected by these cookies and tools based on our legitimate interest in presenting our organization and the services offered on the website you have accessed, as well as to enhance user-friendliness. The legal basis for processing is Art. 6(1) Sentence 1 lit. f GDPR. Most browsers automatically accept these cookies and similar tools. However, you can configure your browser so that no cookies or similar tools are stored on your computer or a notification always appears before any such cookie or tool is placed. Completely disabling them may mean the website does not display correctly or that you cannot use all the functions of our website. You can find specific function descriptions, potential data recipients, information about any data transfer to a third country, and the storage periods in the following notes on each required cookie or similar tool and the associated processing operations.

(1) Managing Consent Settings

We use cookies to obtain and manage website users’ consent for data processing. This processing is necessary for us to fulfill a legal obligation (Art. 6(1) Sentence 1 lit. c GDPR). Using cookies, the following data are processed:

  • Your IP address
  • Date and time of consent
  • URL from which the consent was sent

This cookie is stored in the browser for 12 months, ensuring your cookie preference is retained for subsequent page requests.

b) Third-Party Cookies, Analysis Tools, Plugins, and Other Third-Party Elements

The following third-party cookies, analysis tools, plugins, and other third-party elements that we use are only employed with your explicit consent, and thus on the basis of Art. 6(1) Sentence 1 lit. a GDPR. You can withdraw your consent at any time with future effect. To do so, you can click on the security icon at the bottom left of the website and make the desired changes.

If you do not grant or withdraw consent, the website may not display correctly or you may not be able to use all the website functions. We use the third-party cookies, analysis tools, plugins, and other third-party elements to ensure the design of our website meets users’ needs and to continuously optimize it. In addition, we use tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offering for you. Details on each function, potential data recipients, information about any data transfer to a third country, and storage periods can be found in the following notes on each data processing operation that uses third-party cookies, analysis tools, plugins, and other third-party elements.

(1) Google Analytics (GA4)

For the purpose of user-focused design and continuous optimization of our pages, we use Google Analytics, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”).
Google Analytics uses cookies to enable analysis of your use of our websites. The information generated by these cookies about your website usage is generally transferred to a Google server in the USA and stored there.

With Google Analytics 4, IP anonymization is activated by default. Because of IP anonymization, Google truncates your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other data.
During your website visit, your user behavior is recorded as “events” (e.g., scrolls, page views, clicks, session start, page views).

The following data are collected:

  • Your approximate location (region)
  • Your IP address (truncated)
  • Technical information about your browser and devices (e.g., language settings, screen resolution)
  • Your internet service provider
  • The referrer URL (the previously visited page)

The information is used to evaluate use of the website, compile reports on website activities, and provide other services related to the use of the website and the internet for market research and user-focused website design.

If data are processed outside the EU/EEA and do not meet the European standard for data protection, we have concluded EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is headquartered in California, USA. A transfer of data to the USA and access by U.S. authorities to data stored by Google cannot be excluded. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as under EU/EEA law, and in some circumstances you may not have legal remedies against access by authorities. The transfer of your data to the USA takes place on the basis of Art. 49a GDPR.

The data we send that are linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached are automatically deleted once a month.

For more information on the terms of use of Google Analytics and data privacy at Google, see https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

(2) Google Tag Manager

We use Google Tag Manager (hereinafter “Tag Manager”) from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”). Tag Manager is a tool that helps globally organize website tags. Tags are small snippets of code generated by analytics tools (e.g., Google Analytics).

Tag Manager itself does not set cookies. It simply serves as a management tool for data generated by other services. For details on the data provided by these tools, please see the corresponding notes in this privacy notice.

A transfer of data to Google cannot be excluded. Nor can a transfer of data to companies based in the USA be excluded. Likewise, U.S. authorities may be able to access data stored by Google, even if they are on servers located in the EU.

If data are processed outside the EU/EEA and do not meet the European standard for data protection, we have concluded EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is headquartered in California, USA. A transfer of data to the USA and access by U.S. authorities to data stored by Google cannot be excluded. The USA is currently regarded as a third country from a data protection perspective. You do not have the same rights there as in the EU/EEA. You may not have any legal remedies against governmental access.

For the storage duration of data processed with Tag Manager, please refer to the notes on the respective analytics tools in this privacy notice.

For more information on data protection, please see Google’s privacy notices at https://safety.google/intl/de_de/security-privacy/.

(3) YouTube

We use social plugins from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “YouTube”) on our website to embed videos that supplement its content. YouTube cookies are only used with your explicit consent on the basis of Art. 6(1) Sentence 1 lit. a GDPR. You can withdraw your consent at any time with future effect. To do so, you can change your settings via the relevant button under each video. Failure to grant consent or withdrawing consent may mean you are unable to view the videos.

These plugins are embedded using what is known as the “two-click” method to best protect visitors to our website. This means that when you load the webpage, your personal data (in particular your IP address) is not automatically transferred to YouTube. Instead, you must first activate the embedded “buttons” and videos by clicking on them. By doing so, you consent to a connection being established to the YouTube servers, and data being transmitted.

We also use the extended data protection mode with “youtube-nocookie” to transmit as little data as possible. Google uses the collected data for its own purposes. If you are logged in to Google at the same time, this information is assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Information is also transferred to the parent company Google Inc. in the USA, as well as other Google entities and Google partners outside the EU. Google is certified under the Data Privacy Framework, meaning that there is an adequacy decision by the European Commission under Art. 45(1) GDPR for transfers to Google in the USA. You can find YouTube’s privacy policy and terms of use at https://policies.google.com/privacy?hl=de

 

(4) Google Ads

We use the Google Ads tool on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). In addition, targeted advertising can be shown based on user data available to Google (e.g. location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms triggered the display of our advertisements and how many resulted in clicks.

In the process, cookies may be set and your IP address may be processed. It is possible that the processed data will be transferred to the USA. We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this. Google is certified under the EU-U.S. Data Privacy Framework, meaning that an adequacy decision by the EU exists for the transfer of personal data to Google in the USA.

For more information on data protection in the context of using Google Ads, please visit: https://policies.google.com/technologies/ads?hl=en

9. Current Validity and Changes to this Privacy Notice

This Privacy Notice is currently valid as of December 2024. Due to the further development of our website and offers or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Notice. The most recent Privacy Notice can be accessed and printed out at any time on the website at gpm-ipma.de/impressum-datenschutz-1.

 

Logo der GPM Deutsche Gesellschaft für Projektmanagement e. V.
Logo für das 34. IPMA Worldcongress in Berlin 2025
Logo der International Project Management Association
Shaping the future with project management Signet
Logo für den 60. Geburtstag der IPMA