Data protection information according to Art. 13, 14 EU General Data Protection Regulation (GDPR) for the Quick Check CDR & Digital Ethics

The following data protection information is intended to explain to you in an understandable, transparent and clear manner how your personal data is processed by us in connection with the questionnaire Quick Check CDR & Digital Ethics. Should you nevertheless have any questions of understanding or other queries regarding data protection at PwC, please feel free to contact our data protection officer at DE_Datenschutz@pwc.com or the other contact details given below.

Responsible

The person responsible for the processing of your personal data within the meaning of Art. 4 para. 7 EU Data Protection Regulation (DSGVO) is

PricewaterhouseCoopers GmbH auditing company
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main

e-mail: webkontakt_anfragen@de.pwc.com

Switchboard: +49 69 9585-0
fax: +49 69 9585-1000

Data protection officer

PwC has appointed a data protection officer pursuant to Art. 37 GDPR. You can reach the PwC data protection officer, Dr. Tobias Gräber, at the following contact details:

e-mail contact: DE_Datenschutz@pwc.com
Phone: +49 69 9585-0

Address for postal contact:

PricewaterhouseCoopers GmbH WPG
Dr. Tobias Gräber, data protection officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main

Purpose of the processing and legal basis for the processing

• Result delivery via email: If PwC has collected your contact information as part of the "Quick Check CDR & Digital Ethics" questionnaire, your contact information (last name and email address) will be used to evaluate and electronically send the results of the Quick Check CDR & Digital Ethics.
• Contact via email (optional): If you additionally consent to the transfer of contact information and result by PwC Germany to PwC Netherlands (Thomas R. Malthusstraat 5, Amsterdam 1066 JR, Contact: Thomas Galestien) and PwC Switzerland (Birchstrasse 160, CH-8050 Zürich, Contact: Jürg Niederbacher) this data will be used to contact you for the purpose of contacting you with current advisory and service information, news from your industry, announcements of upcoming events, information on PwC studies and other marketing information by PwC Germany, PwC Netherlands and PwC Switzerland. This data is only collected with your consent. We will process your data for the purpose stated in the declaration of consent. As long as this consent exists, PwC is permitted to process this data in accordance with Art. 6 para. 1 lit. a) GDPR. You have the right to revoke the given declaration of consent to PwC at any time, in whole or in part, with effect for the future. To do so, please send an email to Daniela Hanauer or write a letter to PricewaterhouseCoopers GmbH WPG, for the attention of Daniela Hanauer, Bernhard-Wicki-Straße 8, 80335 Munich. The revocation does not affect the lawfulness of processing your personal data between consent and revocation. Your consent is voluntary. Neither the refusal of consent, nor the subsequent revocation of the granted consent is associated with disadvantageous consequences for you.

Categories of recipients of data and transfers to third countries

We are using a web-based service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 United States ("Google") to conduct this survey. Google will store the information you provide in this survey, including any personal information you provide in the survey form. The processing will take place in countries outside the European Union and the European Economic Area.

PwC determines the questions asked, the processing of your answers, the graphic appearance of the site and evaluates the content of the survey.

By using a web-based service from Google to conduct the survey, the service provider Google also processes personal data as part of the service provision. PwC has no influence on this further processing of personal data by Google. Google is solely responsible for this data processing. You can find Google's data protection regulations and general terms and conditions at https://www.google.com/intl/de/policies/ and under "Further regulations" at the end of this page. Please note that Google may collect a large amount of personal data. PwC has no influence on this data processing.

Data subjects' rights/your rights under data protection law

You have the following rights against PwC under the applicable data protection legislation with regard to the personal data concerning you.

• Right to information: You can request information from PwC at any time about whether and which personal data about you is stored by PwC. The provision of information by PwC is free of charge for you. The right to information does not exist, or exists only to a limited extent, if and to the extent that the information would disclose information that requires confidentiality, e.g. information that is subject to professional secrecy.
• Right of rectification: If your personal information held by PwC is incorrect or incomplete, you have the right to request that PwC correct it at any time.
• The right to deletion You have the right to request PwC to delete your personal data if and to the extent that the data is no longer needed for the purposes for which it was collected or, if processing is based on your consent, you have revoked your consent. In this case, PwC must stop processing your personal data and remove it from its IT systems and databases.
  • There is no right to deletion, provided that
  • the data may not be deleted due to a legal obligation or must be processed due to a legal obligation
  • the data processing is necessary for the assertion, exercise or defense of legal claims.
• Right to limit processing: You have the right to request that PwC limits the processing of your personal data.
• Right to data transferability: You have the right to receive from PwC the data you provide in a structured, common, machine-readable format and the right to have this data transferred to another responsible party. This right exists only if
  • you have provided us with the data on the basis of a consent or on the basis of a contract concluded with you;
  • the processing is carried out by means of automated procedures.
• Right to object to the processing: If the processing of your data by PwC takes place on the basis of Art. 6 Para. 1 letter f) GDPR, you can object to the processing by PwC at any time.You can assert all of the rights of data subjects described above against PwC if you send your specific request to the following contact details:

By e-mail: DE_Datenschutz@pwc.com

By mail:

PricewaterhouseCoopers GmbH WPG
Dr. Tobias Gräber, Data Protection Officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main

Right of appeal to a data protection supervisory authority

In accordance with Art. 77 DSGVO, you have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

Duration of data storage

Your data will be stored as long as they are required for the provisioning of Quick Check results to your specified email address and you have not revoked your consent. Insofar as there are legal obligations to retain data, the data will be stored for the duration of the legally prescribed retention period.