Privacy Policy according to Art. 13 GDPR for Events

Name and contact details of the responsible body:

WHU - Otto Beisheim School of Management, Burgplatz 2, 56179 Vallendar,, +49 (0)261 6509-0

Contact details of the data protection officer:

Dr. Dornbach Consulting GmbH, Susanne Kamm, Anton-Jordan-Straße 1, 56070 Koblenz,, +49 (0)261 9431-442

Purpose and legal basis of data processing:

Photo and video recordings as well as interviews of events,
Art. 23 para. 1 no. 3 Art Kunsturhebergesetz (German law regulating art and copyright), Art. 6 para. 1 sentence 1 lit. a GDPR, Art. 7 GDPR
Art. 6 para. 1 sentence 1 lit. f GDPR

Legitimate interests that are pursued:

Marketing purposes, documentation of events

Storage duration or criteria for determining the duration:

as long as it is necessary to fulfil the purpose

Recipients or categories of recipients of the data (if data transmission takes place):

WHU website, WHU social media channels (incl. YouTube), intranet.

References to the rights of data subjects

The data subject shall have the right to obtain confirmation from the controller as to whether personal data relating to the person are being processed; if this is the case, he or she shall have the right of access to such personal data and to the information specified in Art. 15 GDPR.

The data subject has the right to ask the data controller to immediately rectify any inaccurate personal data concerning him or her, and, if necessary, to complete any incomplete personal data (Art. 16 GDPR).

The data subject has the right to demand that the data controller deletes personal data relating to him or her immediately if one of the reasons specified in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to deletion).

The data subject has the right to require the controller to restrict the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has objected to the processing for the duration of the controller's investigation.

The data subject shall have the right to object at any time to the processing of personal data concerning him or her for reasons relating to his or her particular situation. The controller will then no longer process the personal data unless he or she can prove compelling grounds for processing worthy of protection which outweigh the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to appeal to a supervisory authority if he or she considers that the processing of his or her personal data infringes the GDPR (Art. 77 GDPR). The data subject may assert this right with a supervisory authority in the Member State of his/her place of residence, workplace or place of presumed infringement. In Rhineland-Palatinate, the competent supervisory authority is the competent authority: The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Prof. Dr. Dieter Kugelmann, Hintere Bleiche 34, 55116 Mainz, phone: +49 (0) 6131 208-2449, fax: +49 (0) 6131 208-2497, website:, e-mail: