Data Protection Regulation for the THE OSTEOLOGY-EFP VIRTUAL LIVE SURGERY DAY according EU-GDPR

1. General Regulations
Osteology Foundation reserves the right to amend the existing data protection regulations in strict
accordance with prevailing legal norms at any time.

1.1. Personal Data:
Your voluntarily transmitted personal details (through submission in the online forms) will be collected,
saved and processed in accordance with the most recent legislation on data protection (EU-GDPR 2018).

1.2. Registration and bookings:
A registration to the OSTEOLOGY-EFP VIRTUAL LIVE SURGERY DAY is not possible without
collecting, saving and processing your personal data. This is solely for the purpose of organising and
realising the event. Your data will only be passed on to third parties, who are directly involved in running
the event and when the organisational process makes it necessary.

1.3. Links to other websites:
Our online forms may contain links to other websites. Osteology Foundation is not responsible for the
data you provide on other websites. Our partner companies are also bound to act according to EUGDPR, 
the implementation however rests with each company individually. Our data protection guidelines
are solely applicable to data controlled by Osteology Foundation.

2. Information Obligation acc. Art 12-14 EU-GDPR (EU-DSGVO)
We are pleased to provide you with all information on the type, purpose and scope of the processing
activities of your personal data.

2.1. Controller:
Osteology Foundation, Landenbergstrasse 35, 6002 Luzern
T: +41 41 368 44 44 | F: +41 41 492 67 39
E-Mail: info@osteology.org
Management of the Controller: Dr. Kristian Tersar
Data Protection Coordinator: Basil Gürber
The data are collected in the frame of the OSTEOLOGY-EFP VIRTUAL LIVE SURGERY DAY.

2.2 Organising Partner
In order to organise the event, the Osteology Foundation partners with the European Federation of
Periodontology (EFP), Doctor Arce 14, office nº 36, ES-28002 Madrid
European Federation of Periodontology sets the following Privacy Statement:
European Federation of Periodontology – as data controller and/or processor, informs that any personal
data provided by the participant, or any data received by third parties, will be used in connection to the
participation at the congress: To provide information regarding any other compatible activities organized
by European Federation of Periodontology or by its partners, to answer the contact requests and to send
the required information, to send newsletters, to carry out promotional and marketing activities in
connection to our services. Data treatment shall mean any operation, or set of operations, carried out with
or without the help of electronic or automated means, and must guarantee the confidentiality and security
of the participant’s personal data. European Federation of Periodontology as data controller and/or
processor may avail itself of its associates to carry out any of the following procedures: press releases,
communications to clients, data processing and computer-based consultation

2.3 Marketing Partner
In order to market the event, the Osteology Foundation partners with Geistlich Pharma AG, 
Bahnhofstrasse 40, CH-6110 Wolhusen. Geistlich Pharma AG sets the following Privacy Statement:
Geistlich Pharma AG – as data controller and/or processor, informs that any personal data provided by
the participant, or any data received by third parties, will be used in connection to the participation at the
congress: To provide information regarding any other compatible activities organized by Geistlich Pharma
AG or by its partners, to answer the contact requests and to send the required information, to send
newsletters, to carry out promotional and marketing activities in connection to our services. Data
treatment shall mean any operation, or set of operations, carried out with or without the help of electronic
or automated means, and must guarantee the confidentiality and security of the participant’s personal
data. Geistlich Pharma AG as data controller and/or processor may avail itself of its associates to carry
out any of the following procedures: press releases, communications to clients, data processing and
computer-based consultation

2.4. Service Provider / Fulfilment Agency:
In order to organise the event, the Osteology Foundation is supported by the following Agency:
Newsroom Communication AG – Eigerstrasse 2 – CH-3007 Bern
Newsroom Communication AG sets the following Privacy Statement:
Newsroom Communication AG – as data controller and/or processor, informs that any personal data
provided by the participant, or any data received by third parties, will be used in connection to the
participation at the congress: To provide information regarding any other compatible activities organized
by Newsroom Communication AG or by its partners, to answer the contact requests and to send the
required information, to send newsletters, to carry out promotional and marketing activities in connection
to our services. Data treatment shall mean any operation, or set of operations, carried out with or without
the help of electronic or automated means, and must guarantee the confidentiality and security of the
participant’s personal data. Newsroom Communication AG as data controller and/or processor may avail
itself of its associates to carry out any of the following procedures: press releases, communications to
clients, data processing and computer-based consultation.

2.5. Purposes of Processing:
Depending on the participant the bookings of the data subject and his participant status, the data are
processed for one or more of the purposes listed below.

Processing Purpose Data Categories
Participant Management
(Registration, Additional Bookings)
• name
• contact data
• address data/invoice data
• registration data
General Organisation and Accounting • name
• contact data
• registration data
• bank data (only if necessary)
• credit card data (only if necessary)
Marketing & Development • name
• address data
• contact data
• statistical data

2.6. Legal Basis for the data processing purposes:

Processing Purpose Legal Basis
Participant Management • Binding completion of the registration for the participation of the
selected congress
• Consent of the data subject (sensitive data)
General Organisation
(Accreditation & Compliance,
Accounting)
• Fulfilment of contract and law
• Legitimate interest of the controller
Marketing & Development • Legitimate interest of the controller (see point 4.1.-4.2.)

2.7. Third Party Data Recipients – Categories:
The recipients only receive the data they require, not your full data record. Your data will only be
forwarded when the organisational process makes it necessary – in accordance with your bookings – and
when a legal basis exists.

Processing Purpose Data Categories Recipient Categories
Participant Management
(Registration, Additional
Bookings)
• name
• contact data
• address data/invoice data
• registration data
Service providers (fulfilment agents)
Management of Data
Exhibitors and Partners
• name & country
• contact data
• company data
Service providers (fulfilment agents)
General Organisation /
Accounting
• name
• contact data
• registration data
• bank data (only if necessary)
• credit card data (only if
necessary)
• Responsible authorities,
• Bank
• fiscal office
• tax consultant
• service providers (fulfilment agents)
Marketing /Promotion • name
• Surname
• City
• Country
• Online mailing provider
• Organising Partner
• Marketing Partner

3. Data Subject Rights
We are pleased to inform you about your rights according to EU-GDPR:

3.1. Data Subject Rights acc. Art 15-21 EU-GDPR:
• Right of access by the data subject
• Right to rectification
• Right to erasure/”Right to be forgotten”
• Right to restriction of processing
• Right to data portability
• Right to object (at legitimate interest of the controller)

Detailed descriptions can be found here:
http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN
© European Union, http://eur-lex.europa.eu/, 1998-2018′

3.2. Right to withdraw consent acc. Art. 7 EU-GDPR:
Each data subject has the right to withdraw his/her given consent(s) at any time. The withdrawal of the
consent does not affect the legality of the processing carried out based on the declaration of consent until
the withdrawal. A withdrawal of the consent before the congress will automatically cancel the registration
– fees according to terms and conditions may apply. In any case, the data will be stored for a period of
minimum 5 years for audit on behalf of the Monaco fiscal authorities, even though the participant data will
not be used.

4. Description of other Purposes – Legitimate Interests of the Controller acc. Art 6 (1) f) EU-GDPR

4.1. Advertising/Marketing:
Processing data of the data subject to inform him/her about the above-mentioned event, as well as future
and topic-related events.

4.2. Development:
Processing data of the data subject to develop the programme as well as the organisation and
implementation of the above-mentioned event, future and topic-related events.