Privacy Policy
1. Data controller
The data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (DSGVO) is
Paulaner Brauerei Gruppe GmbH & Co KGaA
Ohlmüllerstrasse 42
81541 Munich
Germany
info@paulaner.de
You can contact our Data Protection Officer at datenschutz@paulaner.de or by post, marking your correspondence ‘For the attention of the Data Protection Officer’
1.2 When you contact us by email or via a contact form, we will store the data you provide (your email address, your surname and first name where applicable, and your message) in order to answer your questions. We will delete the data collected in this context once storage is no longer necessary, or restrict its processing if statutory retention obligations apply.
1.3 If we use external service providers for specific functions of our service or wish to use your data for marketing purposes, we will provide detailed information below regarding the relevant processes. We will also specify the criteria for the retention period.
2. Subject of the processing
This privacy policy provides information on the nature, scope and purpose of the
processing of personal data in connection with participation in the application and
selection process for the “Match of your Life” competition, including registration,
evaluation, community voting, casting, publication of content and related
communications.
Application and profile data may also include details of personal characteristics,
motivation, self-assessments or sports-related preferences. This information is provided
voluntarily and does not, in principle, constitute medical or health-related data within
the meaning of Article 9 of the DSGVO, as it is not used to determine a state of health or
make a medical diagnosis.
Where participants voluntarily provide information in individual cases that constitutes
special categories of personal data within the meaning of Article 9 of the DSGVO,
such data shall be processed solely on the basis of explicit consent in accordance
with Article 9(2)(a) of the DSGVO.
3. Entry requirements
Entry to the competition is restricted to persons aged 18 or over.
Minors are not permitted to enter.
4. Categories of data processed
The following personal data in particular will be processed as part of the competition:
a) Personal details
- First name
- Surname
- Email address
- Date of birth / Age
- Town/city / Country
- Gender
b) Application and profile details
- Information on athletic qualifications
- Information on personal and psychological characteristics
- Responses from structured questionnaires
- Evaluation, scoring, and ranking data (e.g., scores, clusters, shortlists)
c) Media content
- Uploaded photos
- Uploaded videos (e.g., motivational or challenge videos)
d) Communication Information
- Email Communication
- Invitations, notifications, and organizational information
5. Purposes of data processing
Personal data is processed for the following purposes:
a) Conducting and administering the competition
including participant registration, communication during the application
and selection process, verification of eligibility requirements,
and the organizational management of the competition.
b) Selection of suitable participants
including the evaluation of submitted applications, the creation of rankings, shortlists,
and short-listing, as well as the conduct of jury and casting decisions.
c) Organization and conduct of auditions
including the planning, invitation, conduct, and follow-up of live or
digital auditions, as well as the necessary communication for these purposes.
d) Editorial and media coverage of the competition
including the publication of photos and videos provided by participants or created as part
of the competition, as well as accompanying editorial coverage of the competition,
provided that the participants have given their consent.
6. Legal Basis
The processing is carried out on the following legal grounds:
- Art. 6(1)(a) DSGVO
(Consent, in particular for: - Uploading and publishing photos and videos
- Participating in community voting
- AI-supported analysis of media content
- Use of media content for further communication and marketing purposes)
- Art. 6(1)(b) DSGVO
(Conduct of the application and selection process) - Art. 6(1)(f) DSGVO
(Legitimate interest in the efficient, transparent, and secure conduct of the competition)
7. Use of AI for media analysis
To assist in the review of submitted media content (images and videos),
we use AI-powered analysis tools. These are used to efficiently and consistently
pre-screen entries as part of the competition.
The analysis is primarily used for automated preliminary screening to determine whether
the submitted content meets the minimum criteria set by the organizer. This includes,
in particular, verifying that the content depicts only the participating individual
and does not infringe upon any apparent third-party rights (in particular copyright,
right of publicity, trademark, or other intellectual property rights). In addition, technical
parameters such as file format, video length, and image and sound quality are analyzed.
Only the submitted media content is transmitted. No processing of personal data
(e.g., name, email address) or content evaluation data by the AI takes place.
As part of the analysis, visual or acoustic features (e.g., facial outlines, movement patterns, or
background noise) may be processed for technical reasons to verify compliance with the criteria.
There is expressly no biometric facial recognition for identity verification, no profiling
within the meaning of Article 22 of the DSGVO, and no fully automated decision-making.
The results of the AI analysis serve solely as a tool to assist with the preliminary selection.
The final decision regarding selection for the live casting or further participation in the
competition is always made by a human jury at its sole discretion.
The processing is based on Article 6(1)(a) of the DSGVO (consent), Article 6(1)(b) of the DSGVO
(performance of the participation agreement in accordance with the terms and conditions
of participation), and Article 6(1)(f) of the DSGVO (legitimate interest in the efficient, secure,
and legally compliant handling of the selection process).
The processing of media content by the AI systems used takes place exclusively on servers within
the European Union. A contract for data processing in accordance with Art. 28 DSGVO has been
concluded with the provider of the analysis system to ensure an adequate level of data protection.
8. Community Voting and Publication
Provided that participants give their express consent, submitted content may be published
as part of a community vote.
- The participant's first name is displayed during the community vote
- In addition, the photo submitted by the participant is published
- No other personal data is made public
In addition, selected photos and videos—subject to appropriate consent—may be used in connection
with the “Match of Your Life” contest as well as for other marketing, communication,
and campaign purposes.
9. Recipients and data processors
To organize the competition, we engage carefully selected service providers, particularly
in the areas of hosting, IT operations, and AI-powered media processing and technical analysis.
These service providers process personal data exclusively on our behalf and in accordance
with data processing agreements pursuant to Article 28 of the DSGVO.
10. Data transfers to third countries
No personal data is transferred to countries outside the EU/EEA in connection with the
“Match of your Life” contest in Germany.
11. Retention period
Participants’ personal data will generally be stored only for as long as is necessary for the organization,
conduct, and follow-up of the “Match of your Life” competition as well as for related purposes.
The retention period depends on the specific purpose of the processing and on the applicable legal
retention requirements. Once the respective purpose of processing no longer applies, the personal data
will be deleted or anonymized, provided that no legal retention obligations or overriding legitimate
interests preclude deletion. Unless there are legal retention obligations or legitimate interests requiring
longer storage, the following retention periods generally apply:
- Master data, as well as application and profile data
(e.g., registration data, information on athletic qualifications, personal information,
responses to questionnaires):
Data will be stored for the duration of the contest and for up to 6 months
after the contest ends to ensure proper administration, follow-up, documentation,
and handling of any inquiries or legal matters.
- Evaluation and selection decision data
(e.g., jury evaluations, scores, rankings, clusters, shortlists):
Data will be stored for the duration of the contest and for up to 6 months
after the contest ends, to the extent necessary for auditability,
internal documentation, or the defense against potential legal claims.
- Media content (photos and videos) uploaded by participants as part of the
contest or created during auditions:
Storage for the duration of the contest and beyond until the respective consent
is revoked, but no longer than 24 months after the contest concludes,
provided that and to the extent that such content is used for
documentation, communication, or marketing purposes.
- Communication data
(e.g., email correspondence, invitations, notifications):
Data will be stored for the duration of the communication and for up to 6 months
after the competition ends, unless there is a further legal requirement to do so.
If the processing of personal data is based on consent, the relevant data will be stored
until consent is withdrawn or until the respective purpose of processing no longer applies.
Withdrawal does not affect the lawfulness of the processing carried out prior to withdrawal.
Upon expiration of the aforementioned retention periods or upon revocation of consent,
the personal data will be deleted or anonymized without delay, provided that there are
no conflicting legal retention obligations.
12. Withdrawal of Consent
Consent that has been given may be withdrawn at any time with future effect.
The withdrawal does not affect the lawfulness of the processing carried out prior to the withdrawal.
13. Rights of affected individuals
Participants have the right to:
- Right of access (Art. 15 DSGVO)
- Right to rectification (Art. 16 DSGVO)
- Right to erasure (Art. 17 DSGVO)
- Right to restriction of processing (Art. 18 DSGVO)
- Right to data portability (Art. 20 DSGVO)
- Right to object to processing (Art. 21 DSGVO)
14. Right to file a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular
with the authority in the jurisdiction where the data subject or the controller is located.