Data Policy

Data Policy for the Knorr-Bremse Circular Technology Award 

UnternehmerTUM GmbH and Knorr-Bremse AG are jointly responsible for organizing the Knorr-Bremse Circular Technology Award (Art. 26 GDPR).
In addition, UnternehmerTUM GmbH, Knorr-Bremse AG, and the Heinz Hermann Thiele Family Foundation act jointly as controllers for the selection and implementation of any proof-of-concept (PoC) process.
The central point of contact for data protection inquiries in connection with the award and PoC is: UnternehmerTUM GmbH, email: stolberg@unternehmertum.de

In particular, we process:
● Contact and company data of applicants
● Application documents (pitch decks, descriptions, videos)
● Communication data
● Evaluation and decision-making information in the context of the Award and PoC process
● Photo and video recordings in the context of the Award event and related formats (e.g., award ceremony)
● Metadata (e.g., file properties, upload/submission times)

Purposes: Organization and implementation of the award, selection of winners, communication, documentation, and public relations, as well as—in the case of a PoC—review, selection, and implementation of a proof-of-concept project.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in conducting the award process and, if applicable, the PoC process, documentation, and public relations).
 

Personal data may be shared, where necessary, with:
● External jury members and experts
● IT, event, and communications service providers
● The Heinz Hermann Thiele Family Foundation in connection with the evaluation and decision-making process for the award, as well as the review and implementation of PoC projects
● Media and social media platforms in the context of public relations (e.g., LinkedIn, YouTube, Instagram)
 

We will provide a current list of key processors upon request.

When publishing on social media platforms or press portals, data may be transferred to third countries (in particular the USA). In such cases, we base the transfer on the EU Standard Contractual Clauses (SCC) – unless an adequacy decision exists – and carry out transfer impact assessments (TIA) where necessary. A copy of the guarantees or references to their availability are available on request. Please note: Content that is made publicly available on the internet may be accessible worldwide.

● Application and judging documents: generally up to 36 months after the end of the award year (for documentation and follow-up purposes), followed by deletion/anonymization, provided there are no legal obligations to the contrary.
● PoC/contract documents and related correspondence: up to 10 years after completion (statutory retention periods/defense of legal claims).
● Photo/video recordings for PR/documentation purposes: generally 3 years; in the case of archival documentation, longer if there are overriding interests; social media posts are removed in a timely manner whenever possible.
● Accounting/tax documents: according to statutory periods (usually 6 or 10 years).

Subject to the legal requirements, you have the right to information, correction, deletion, restriction of processing, data portability, and the right to object to processing on the basis of Art. 6 (1) lit. f GDPR. If the processing is based on your consent, you can revoke this at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

The joint controllers jointly determine the purposes/means of processing (Award/PR; in the case of the PoC, also the family foundation). The practical distribution of responsibilities can be summarized as follows: (i) UnternehmerTUM: application platform, communication, central point of contact for data subjects; (ii) Knorr-Bremse: judging, event organization, PR in its own channels; (iii) Family foundation (PoC only): review/management of the PoC. The parties ensure a consistent level of data protection and inform each other about data subject requests, data protection incidents, and deletion concepts. Data subject rights can be asserted with either party; the preferred point of contact is UnternehmerTUM (see above). We will provide the essential contents of the agreement upon request.

Please address any questions or concerns regarding data protection to:

UnternehmerTUM GmbH: stolberg@unternehmertum.de  

or

Knorr Bremse AG: privacy@knorr-bremse.com