With this information, we are providing details in accordance with Art. 13 GDPR about the processing of personal data by the Agentur für Innovation in der Cybersicherheit GmbH (Cyberagentur) in connection with the implementation of challenges or similar innovation competitions (hereinafter referred to as “competitions”) organised by Cyberagentur.
1. Who is responsible for data processing and who can you contact?
RESPONSIBLE BODY:
Agentur für Innovation in der Cybersicherheit GmbH
Große Steinstraße 19
06108 Halle (Saale)
Phone: +49 345 78288032
E-Mail: kontakt@cyberagentur.de
DATA PROTECTION OFFICER:
Agentur für Innovation in der Cybersicherheit GmbH
Data Protection Officer
Große Steinstraße 19
06108 Halle (Saale)
E-Mail: datenschutz@cyberagentur.de
2. What personal data do we use?
We process the personal data you provide within the scope of the competition, insofar as this is necessary for this purpose.
The following types of data may be processed:
- Personal master data: surname, first name
- Contact details: address, email address
- General log data from IT systems, web applications and software such as time, date, sender, IP address, upload data in the award portal, from email communication, from files (PDF, Word, Excel), connection data
- Bank details (only for payments)
In addition, there may be situations in which we process personal data that is not mentioned here. In such cases, we will provide separate information on data protection as required and inform you in advance, if required by law.
3. Websites
If you use websites to provide your (personal) data, you will be informed separately about the processing of your data when using the website. Please read the data protection information provided on the website. Bitte lesen Sie die auf der Webseite hinterlegten Datenschutzhinweise.
4. What are the purpose and legal basis for processing?
Personal data will only be processed for the purpose of conducting the competition.
The processing takes place from the submission of your data until the end of the competition on the basis of Art. 6 para. 1 lit. b) and c) DSGVO. Legal obligations to process personal data may arise from the German Commercial Code (HGB) and tax laws, among other things.
If we intend to process your personal data beyond this, we will inform you in advance and obtain your consent if necessary.
5. Who has access to your personal data and to what extent?
Within our company, employees will have access to the documents and data you submit to the extent necessary to carry out the competition or to fulfil legal obligations.
The data will be processed exclusively within the EU.
6. Is there an obligation to provide personal data?
Participation in the competition is neither contractual nor legally required. If you wish to participate, you must provide your name and contact details. Without this information, you will not be able to participate in the competition.
7. How long will the data be stored?
We only store personal data for as long as is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes. Personal data that is processed on the basis of payments of any kind (expense allowances, prize money, etc.) will be stored in accordance with the budgetary retention periods of the Federal Budget Code (BHO), the periods applicable to the storage of written documents under the German Commercial Code (HGB) and the relevant tax and public procurement regulations.
If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.
8. What are your rights?
All data subjects have the right to information under Art. 15 GDPR, the right to rectification of their data under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing of their data under Art. 18 GDPR, the right to data portability under Art. 20 GDPR and the right to object to processing (Art. 21 GDPR). The right to information and the right to erasure may be subject to restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG).
You have the right to lodge a complaint with the data protection supervisory authority (Art. 13 para. 2 lit. d) GDPR). The data protection supervisory authority responsible for us is:
The Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153, 53117 Bonn
Phone: +49 (0)228-997799-0, E-Mail: poststelle@bfdi.bund.de
Date: 14.08.2025