Data Protection Notice for ZF Global Technology Day

These notices on data processing explain how ZF Friedrichshafen AG (hereinafter referred to as "ZF," "we," or "us") processes your personal data for planning and organization.

At ZF, we take our responsibility to protect your personal data seriously. As used in these data processing notices, "personal data" means any information that relates to you as an identified or identifiable individual. We respect your right to privacy and will only process your personal data in accordance with applicable data protection laws.

To give you full transparency, this document provides detailed answers on the following questions that you may have regarding the processing of your personal data during your participation in ZF Global Technology Day:

• Who is responsible for processing my data?
• Contact details of the data protection officer
• What data will be processed?
• For what purpose will the data be processed?
• On what legal basis is the data processed?
• Am I obliged to provide my data?
• Who will receive my data?
• Will my data be transferred to third countries?
• For how long will my data be stored?
• Will an automated decision be made about me based on the data I provide?
• What are my data protection rights?

1. Who is responsible for processing my data?
   The controller of data processing activities and, therefore, responsible for your personal data processed during the ZF Global Technology Day is:
   
   ZF Friedrichshafen AG
   Global Communications
   Löwentaler Straße 20
   88046 Friedrichshafen
   
   If you have any questions regarding the processing of your personal data during ZF Global Technology Day, please do not hesitate to contact Elke Hilger, VCME, elke.hilger@zf.com
   
2. Data Protection Officer
   For data protection questions, you can also reach out to our Data Protection Officer at the followin
   ZF Friedrichshafen AG,
   Data Protection Officer,
   Löwentaler Straße 20,
   88046 Friedrichshafen
   
   or via e-mail to privacy@zf.com.
   Data Protection Notice for ZF Global Technology Day
   
3. What data will be processed?
   For the performance of ZF Global Technology Day, we will process the following personal
   data about you

• Participation
• Arrival date(s)
• Departure date(s)
• Function
• Salutation
• Title
• First name
• Last name
• Email address
• Mobile Number
• Corrections
• Accommodation
• Clothing size
• Food preferences
• Photographs and video recordings

1. For what purpose will the data be processed?
   Your personal data named above will be processed by us for ZF Global Technology Day as follows:
   Your data, Participation, Arrival date(s), Departure date(s), Function, Salutation, Title, First name, Last name, Email address, Mobile Number, Corrections, Accommodation, Clothing size, Food preferences, Photographs and video recordings, are required for the communication in connection with you in relation to the ZF Global Technology Day 2024 event, as well as for their delivery and organization.
   
   
2. On what legal basis is the data processed?
   Processing based on your consent Your personal data may be processed when you voluntarily give us your prior written consent to do so (Article 6 (1) lit. a GDPR in conjunction with § 26 (2) BDSG). In any case, you can decide freely whether you want to give us your prior consent or not, and we will make this very clear whenever asking you for your consent.
   
   Special categories of personal data according to Art. 9 (1) GDPR
   Special categories of personal data according to Art. 9 (1) GDPR can be processed on the basis of Art. 9 (2) (b) GDPR in conjunction with § 26 (3) BDSG. Data Protection Notice for ZF Global Technology Day Processing based on legitimate interests Processing of your personal data is necessary for the purposes of the legitimate interests pursued by us in accordance with Art. 6 (1) lit. f GDPR.
   
   
3. Am I obliged to provide my data?
   Within the scope of ZF Global Technology Day, you must provide the personal data required for the performance of the same. Otherwise, you cannot participate in ZF Global Technology Day. If you participate in group discussions, please note however that this is completely voluntary and not a condition for your participation at the ZF Global Technology Day.
   
   
4. Who will receive my data?
   The ZF-internal recipients of the Data are the Communications Department. In addition, IT service providers of ZF are involved. IT service providers are contractually obliged in accordance with the statutory data protection laws to use the data only in accordance with ZF's instructions and for the purposes of ZF in compliance with the contractual provisions. IT service providers can also be other group companies of the worldwide ZF Group, which guarantee IT support for ZF systems 24/7. The Video Conference system Microsoft Teams is operated by Microsoft Corporation acting as IT service provider on our behalf. To this end, ZF Group has entered into a data processing agreement with Microsoft Corporation in accordance with Art. 28 GDPR, and Microsoft Corporation receives the videoconferencing data insofar as this is provided for in this agreement.
   
5. Will my data be transferred to third countries?
   There is no data transfer for third countries. To the extent that IT services provided by our external or internal IT service partners involve a transfer of personal data to third countries, ZF ensures that the data is only transferred to countries that have adequate data protection standards in accordance with the requirements of the EU Commission or, if this is not the case, the recipient has contractually entered into EU standard contractual clauses accepted by the EU Commission with ZF, which ensure the protection of the data and the legality of the data flow in accordance with EU law requirements.
   
   Further information, including a copy of the EU standard contractual clauses, can be obtained from the ZF Group Coordinator for Data Protection via e-mail to privacy@zf.com. Data Protection Notice for ZF Global Technology Day.
   
   
6. For how long will my data be stored?
   The Data you have disclosed on the ZF website during your registration will be deleted after your participation in the ZF Global Technology Day 2024 event.
   
   
7. Will an automated decision be made about me based on my data?
   There will be no automated decision-making based on your data.
   
   
8. What are my data protection rights?
   Subject to and depending on applicable data protection laws, you can exercise the
   following rights vis-à-vis ZF at any time:

• Right of access to and information about my personal data
• Right to correct my personal data
• Right to delete my personal data
• Right to restrict the processing of my personal data
• Right to data portability of my personal data
• Right to object to the processing of my personal data
• Right to withdraw my consent to the processing of my personal data at any time,
  where processing is based on my consent. The withdrawal of consent shall not
  affect the lawfulness of processing based on consent before its withdrawal.
  You can exercise these rights at any time by contacting
  Elke Hilger, VCME,
  elke.hilger@zf.com.
  
  Alternatively, you can also contact our Data Protection Officer, Löwentaler Straße 20,
  88046 Friedrichshafen, via privacy@zf.com .
  
  In addition, you have the right to lodge a complaint with the responsible data protection
  authority at any time about how ZF processes your personal data.