Data protection notes for participating in the Eurovision Song Contest televoting

The following information is intended to provide you as a participant in Eurovision Song Contest televoting (telephone voting) with an overview regarding processing of your personal data by us and about your rights under data protection law.

Who is responsible for data processing and who is my contact?

The data controller is

digame mobile GmbH

Schanzenstrasse 38

D-51063 Cologne

Germany

You can contact our Company Data Protection Officer at

[email protected]

What sources and data will we use?

We will process only the personal data which we receive when you cast your vote either by telephone or by SMS text message using connections provided by your landline or mobile network provider.

When doing so, we will only gather the following categories of data from you:

• Your mobile telephone number (MSISDN – Mobile Station Integrated Services Digital Network Number)
• The date and time at which you participated in televoting
• The name of your landline or mobile network provider
• The type network provider contract which you have (prepaid, contract).

What will your data be processed for (purpose of processing) and what is the legal basis for this?

We will process personal data in compliance with the regulations of the EU General Data Processing Regulation (GDPR) and the German Federal Data Protection Act (BDSG) and taking into consideration the balance of interests (Art. 6 Para. 1 (f) GDPR).

Who will my data be transferred to?

Inside the company your data will be made accessible to the departments which need it to fulfil our contractual and legal obligations. Service providers and vicarious agents working for us may also receive data for such purposes if they undertake to maintain, in particular, confidentiality and integrity. Such recipients could, for example, be IT service or telecommunications providers.

There will be no transfer of personal data to recipients outside of our company. While we are not the organizer of the Eurovision Song Contest televoting – this is the European Broadcasting Union, Ancienne Route 17A, CH-1218 Grand-Saconnex (Geneva), Switzerland – under data protection law we are, however, the data controller as defined by Art. 4 (7) GDPR with regard to the televoting. This is because we will only provide the European Broadcasting Union with the anonymized results of the televoting.  

Will data be transferred to a third country or an international organization?

There will be no transfer of your above-mentioned personal data to third countries.

How long will my data be stored?

We will process and store your personal data for as long as required to fulfil our contractual and legal obligations.

Once the data is no longer required to fulfil contractual or legal obligations, it will regularly be erased unless its further processing – for a fixed period of time – is required for the following purposes:

• Fulfilment of commercial- and tax-law related storage obligations,
• The German Commercial Code (HGB), Tax Code (AO), Money Laundering Act (GwG). These laws generally specify storage periods for archiving and documentation purposes ranging from two to ten years.

What data protection rights do I have?

Every televoting participant has the right to information as per Article 15 GDPR; the right to rectification as per Article 16 GDPR; the right to erasure as per Article 17 GDPR; the right to restriction of processing as per Article 18 GDPR, the right to object as per Article 21 GDPR and the right to data portability as per Article 20 GDPR.

Over and above this, you have a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Any consent which you give to processing of your personal data by us may be withdrawn at any time. Please note that the withdrawal of consent will only apply for the future. Processing which took place before the withdrawal of consent will not be affected by it.

Am I obliged to provide data?

You must provide the above-mentioned personal data in order to be able to participate in televoting.

Does any automated decision-making take place?

As a matter of principle we do not use any fully automated decision-making processes as defined by Art. 22 GDPR when entering into, performing or terminating a business relationship. We also do not use profiling.

Do I have a right to object?