The privacy policy of The Storytelling Company GmbH is aligned with the terminology used in the European Directive and the General Data Protection Regulation (GDPR). Our aim is to make our privacy policy easily comprehensible for the general public, as well as our customers and business partners. To facilitate understanding, we would like to provide an explanation of the terms used in this document.

a) Personal data

Any information relating to an identified or identifiable natural person (“data subject”).

b) Data subject

Any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Any operation or set of operations performed upon personal data, such as collection, storage, retrieval, use, transmission, restriction, erasure, etc.

d) Restriction of processing

Marking of stored personal data with the aim of limiting their future processing.

e) Profiling

Automated processing of personal data to evaluate personal aspects relating to a natural person.

f) Pseudonymization

Processing of personal data such that they can no longer be attributed to a specific person without additional information.

g) Controller

The natural or legal person who determines the purposes and means of the processing of personal data.

h) Processor

A party that processes personal data on behalf of the controller.

i) Recipient

A natural or legal person to whom personal data is disclosed.

j) Third party

Any person or body other than the data subject, controller, processor, and persons authorized by the controller or processor. Data transfer to third countries is only done under strict legal conditions such as standard contractual clauses, adequacy decisions, or explicit consent.

k) Consent

Freely given, informed, and unambiguous indication of the data subject’s agreement to the processing of their personal data.

The Storytelling Company GmbH

August-Everding-Strasse 25

81671 Munich

Tel.: +49 89 12 11 66 0

E-Mail: events@storytellingcompany.com

Website: www.storytellingcompany.com

The website of The Storytelling Company GmbH uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string by which websites and servers can be assigned to the specific web browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific web browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, The Storytelling Company GmbH can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

Cookies allow us to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. The website user who allows cookies, for example, does not have to enter access data each time the website is accessed, as this is taken over by the website and the cookie stored on the user’s computer system.

You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the web browser used, and thus permanently deny the setting of cookies. Furthermore, cookies already set may be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be entirely usable.

The website of The Storytelling Company GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server’s log files.

Collected may be:

• the browser types and versions used,

• the operating system used by the accessing system,

• the website from which an accessing system reaches our website (so-called referrer),

• the sub-websites which are accessed via an accessing system on our website,

• the date and time of access to the website,

• an Internet protocol address (IP address),

• the internet service provider of the accessing system,

• and other similar data and information that may be used in the event of attacks on our information technology systems.

This information is needed to:

• deliver the content of our website correctly,

• optimize the content of our website as well as its advertisement,

• ensure the long-term viability of our information technology systems and website technology,

• and provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

Therefore, The Storytelling Company GmbH analyzes anonymously collected data and information statistically, with the aim of increasing data protection and data security. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

The website of The Storytelling Company GmbH contains information that enables a quick electronic contact to our company, as well as direct communication with us, which also includes a general address of the so-called electronic mail (email address). If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller is stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as this is granted by the European legislator or other legislators in laws or regulations.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Every data subject has the right to:

• confirmation as to whether personal data concerning them is being processed,

• access to the stored personal data and a copy of this information,

• rectification of inaccurate personal data,

• erasure (“right to be forgotten”) of personal data,

• restriction of processing,

• data portability,

• object to processing of personal data,

• withdraw consent to processing at any time.

This site uses Google Fonts provided by Google. When a page is loaded, your browser loads the required fonts into its browser cache to display texts correctly. For this purpose, the browser must connect to Google servers, which may inform Google that your IP address was used to access our website.

Google Fonts are used in the interest of a consistent and attractive presentation of our website. This represents a legitimate interest within the meaning of Art. 6 (1)(f) GDPR.

More information can be found at:

https://developers.google.com/fonts/faq

and

https://policies.google.com/privacy.

Art. 6 (1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. Where processing is necessary for the performance of a contract, the processing is based on Art. 6 (1)(b) GDPR. If we are subject to a legal obligation, processing is based on Art. 6 (1)(c) GDPR. If processing is necessary to protect a legitimate interest of our company or a third party, and this is not overridden by the interests or fundamental rights of the data subject, Art. 6 (1)(f) GDPR is the basis.

The criteria for the duration of storage of personal data is the respective statutory retention period. After expiration of that period, the data is routinely deleted, provided it is no longer necessary for the fulfillment or initiation of a contract.

The provision of personal data may be partly required by law or result from contractual provisions. For example, when concluding a contract, it may be necessary for the data subject to provide us with personal data, which we must subsequently process. A refusal to provide the personal data may mean that the contract cannot be concluded.

You can contact us at any time using the contact details provided on our site. We would like to inform you that in this case we will store your transmitted personal data for the purpose of processing your request and, if necessary, send it to you. Forward internally to the appropriate contact person. This processing report on our legitimate interest (Art. 6 para. 1 lit. f GDPR in new contractual relationships, as well as on Art. 6 para. 1 lit. b GDPR within the framework of the pre-contractual measures. As soon as the purpose of the processing ceases, we check the deletion of the data in this context, taking into account legal retention periods.