Data Processing Agreement
1. Roles of the parties
The organizer of an event ("Organizer" or "Controller") is the Controller of personal data processed in connection with registration for the Organizer's events. The Organizer determines the purposes of the registration processing and the personal data collected from participants.Life Science Network gGmbH ("LSN" or "Processor") acts as the Processor of such registration data on behalf of the Organizer.
LSN is separately a Controller for personal data that it processes for its own purposes, including the operation, administration, security and management of Science Events user accounts and the Science Events platform. Such processing is governed by the Science Events Privacy Policy and is not subject to this Data Processing Agreement.
2. Subject matter and duration
This Data Processing Agreement ("DPA") applies to the processing of personal data carried out by LSN on behalf of the Organizer through Science Events in connection with event registration.The processing continues for as long as the Organizer uses Science Events for event registration and, where applicable, for the period necessary to delete or return personal data after termination of the service.
3. Nature and purpose of processing
LSN processes registration data on behalf of the Organizer for the purpose of providing and operating the Science Events registration functionality, including:
- collecting and storing event registrations;
- making registration information available to the Organizer;
- facilitating event administration;
- sending registration-related communications where configured by the Organizer;
- providing technical support; and
- maintaining the security and proper functioning of the service.
4. Categories of personal data
The personal data processed may include information selected by the Organizer as part of the event registration form, such as:
- name and contact details;
- professional or organizational information;
- registration and attendance information;
- information provided in response to questions included in the registration form; and
- payment-related information where applicable.
The Organizer is responsible for ensuring that the data it requests through the registration form is appropriate and lawful for its purposes.
5. Categories of data subjects
The data subjects may include:
- event participants and registrants;
- speakers and presenters;
- organizers and other persons involved in an event; and
- other persons whose information is submitted through the event registration process.
6. Instructions from the Organizer
LSN will process registration data only in accordance with the Organizer's documented instructions, including instructions provided through the Science Events service, this DPA, or other instructions agreed between the parties.The Organizer is responsible for ensuring that its instructions and processing activities comply with applicable data protection law.
If LSN believes that an instruction infringes applicable data protection law, LSN will inform the Organizer.
7. Responsibilities of the Organizer
The Organizer is responsible for:
- determining the purposes and legal basis for processing registration data;
- providing appropriate privacy information to event participants;
- determining which registration fields are necessary;
- ensuring that the information collected is lawful and appropriate;
- responding to requests from data subjects concerning the Organizer's processing; and
- determining appropriate retention periods for registration data.
8. Confidentiality
LSN will ensure that persons authorized to process registration data are subject to appropriate confidentiality obligations.9. Security
LSN will implement appropriate technical and organizational measures designed to protect registration data against unauthorized access, alteration, disclosure, loss or destruction.These measures include appropriate access controls, authentication mechanisms, security practices and measures designed to protect the infrastructure used to operate Science Events.
10. Subprocessors
The Organizer authorizes LSN to use subprocessors for the provision and operation of Science Events.The subprocessors currently used by LSN that may process personal data on behalf of event organizers are:
- Heroku / Salesforce — hosting and operation of the Science Events application and infrastructure;
- Amazon Web Services (AWS) — cloud infrastructure and related technical services; and
- Stripe — payment processing for event registrations and related payments.
LSN may engage additional subprocessors where necessary to provide the service. LSN will ensure that relevant subprocessors are subject to appropriate data protection obligations.
Where required by applicable law, LSN will provide information about changes to subprocessors and an appropriate opportunity to object.
11. Assistance with data subject rights
Taking into account the nature of the processing, LSN will provide reasonable assistance to the Organizer in responding to requests from data subjects exercising their rights under applicable data protection law.The Organizer remains responsible for responding to such requests.
12. Personal data breaches
LSN will notify the Organizer without undue delay after becoming aware of a personal data breach affecting registration data processed on behalf of the Organizer.LSN will provide information reasonably available to it that is necessary for the Organizer to comply with its obligations concerning the personal data breach.
13. Data protection impact assessments and regulatory assistance
Taking into account the nature of the processing and the information available to LSN, LSN will provide reasonable assistance to the Organizer with:
- data protection impact assessments;
- consultations with supervisory authorities; and
- other reasonable compliance obligations directly related to LSN's processing as Processor.
14. International transfers
Where registration data is transferred outside the European Economic Area, LSN will ensure that an appropriate transfer mechanism under applicable data protection law is in place.15. Deletion or return of data
At the end of the provision of the relevant services, LSN will delete or return registration data in accordance with the Organizer's instructions, unless applicable law requires LSN to retain the data.16. Audits and compliance information
LSN will make available information reasonably necessary to demonstrate compliance with its obligations as Processor under applicable data protection law.Where legally required, LSN will cooperate with reasonable audits or inspections relating to the processing covered by this DPA.
17. Liability
The liability of the parties in connection with this DPA is subject to the liability provisions applicable to the parties' underlying agreement, except to the extent that applicable law requires otherwise.18. Order of precedence
If there is a conflict between this DPA and another agreement concerning the processing of registration data, this DPA takes precedence with respect to data protection matters, unless the parties expressly agree otherwise.19. Changes to this DPA
LSN may update this DPA where necessary to reflect changes to Science Events, applicable law, or the services provided.Where changes materially affect the Organizer's obligations or rights, LSN will provide reasonable notice where required.
20. Acceptance
This DPA applies when an Organizer uses Science Events to create and manage an event involving the collection of participant registration data.By creating an event and using the registration functionality, the Organizer agrees to this DPA.
Last updated: September 23, 2026.