Privacy Notice for Volunteers of DreamHack events

We are committed to protecting your privacy and your right to informational self-determination. We kindly ask you to take a moment and read this Privacy Notice. The information provided here will help you understand how we process your personal data when you apply to volunteer in our events, such as the DreamHack festivals.

 I. Who Are We?

If we speak of “us” or “we” in this Privacy Notice, we refer to ourselves as ourselves as controller, as defined below. Our contact details are:

Dreamhack AB

Telefonvägen 30

126 26 Hägersten

Sweden

Company Registration Number: 556845-8763

https://about.dreamhack.com/

Our data protection officer (“DPO”) is:

Dr. Christian Rauda

GRAEF Rechtsanwälte Partnerschaftsgesellschaft mbB

Jungfrauenthal 8

20149 Hamburg

II. Joint Controllerships

What does joint controllership mean?

We, DreamHack AB, are part of the ESL Group (as defined below).

We, our parent company ESL Gaming GmbH (“ESL”), and our sister companies (each of them a “Subsidiary” and together with the parent company, “ESL Group”) cooperate closely together regarding the provision of our products and services. This means that we, ESL and the respective Subsidiaries may jointly determine if and how personal data of yours is processed or may act as data processors of ours. The ESL Group is comprised by us and the following entities:

Is there a contract between us and our Subsidiaries?

Yes. We and the ESL Group have concluded an Intercompany Data Protection Agreement that legitimizes any data flows between us and ESL, and between us and the Subsidiaries or between the Subsidiaries and ESL. It also contains rules for joint controllerships between us as well as the Standard Contractual Clauses provided by the European Commission to legitimize data flows from us, ESL, and Subsidiaries established within the EU to Subsidiaries established outside of the EU or the EEA.

III.           Your Rights

 You have certain rights concerning the processing of your personal data by us, which are the following:

Right of information: You have the right to be provided information regarding the processing of your personal data by us.

Right of access: You have the right to obtain confirmation as to whether we are processing your personal data and, if this should be the case, access to the personal data.

Right to rectification: You have the right to obtain rectification of inaccurate or incomplete personal data concerning you.

Right to erasure (“right to be forgotten”): Under certain circumstances you have the right to obtain the erasure of personal data concerning you.

Right to restriction: Under certain circumstances you have the right to obtain the restriction of processing.

Right to data portability: Under certain circumstances you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller.

Right to object: Under certain circumstances you have the right to object to the processing of personal data concerning you.

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of the EU of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Right to withdraw consent: If a processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to not be subject to a decision based solely on automated processing: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

We provide certain options for you to control your personal data, for example,  if you have created an account, you can at any time delete it via your profile by following this link: https://account.eslgaming.com/account/close . You can also choose to make your profile private and select what personal data you would like it to be visible to others.

If you want to exercise your rights or if you have any questions for us regarding the processing of your personal data, please fill in the Dreamhack Data Protection webform available HERE.

We and ESL share the system that allows us to respond to your requests when you exercise one of your rights under the GDPR or when you have any questions or comments regarding the protection of your personal data. Therefore, we and ESL jointly process certain personal data, depending on the request, such as your email and name, to help each other out to answer your request or to get directly in touch with you for this purpose.

IV. Recipients / Categories of Recipients

Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Also, your personal data can be either processed by other parties on our behalf (data processors) or transferred to and processed by other controllers. In both cases, and when such processing occurs outside the EU or EEA third countries, we have taken adequate precautions to protect your personal data.

We may disclose your personal data for legitimate interests, to respond to requests from governmental authorities, to establish, exercise or defend against legal claims, to protect vital interests of others, in connection with the sale, assignment or other transfer of all or part of our business, and as otherwise allowed under applicable laws.

V. Data Processing.

Registering as a volunteer for DreamHack events.

1. What

We process your personal data when you register to volunteer for one of our events, including (but is not limited to) your name, nickname, contact details (e.g. address, email, phone number, mobile number), date of birth and profile picture.

Such personal data will be collected through the DreamHack crew portal, which you can access using your ESL ID. For further information regarding the processing of your personal data when creating an ESL Account, please refer to the following privacy notice: https://esl.com/privacypolicy/

We may also collect and process certain personal data from publicly available sources (e.g., social media), as permitted by applicable laws.

1. Why

Such personal data is processed to register your participation as a volunteer in our events, to verify your identity and to communicate with you regarding important topics related to your participation in the event or events.

1. Legal Basis

The legal basis for processing the personal data are our legitimate interests and to comply with our legal obligations.

1. How long

Your data is stored as strictly needed to comply with the applicable statutory storage periods required by law.

Events

1. What?

When you offer to volunteer on our events, we may offer assistance to you regarding the planning of your participation in such event. This can include questions as your preferred meals, e.g., at the location where the event is held and your emergency contact information. If you have any health conditions that require you to follow a certain diet (e.g., allergies) and other health-related conditions relevant to your participation in our events and you choose to share this information with us, we will process this personal data of yours to plan and conduct the event.

You can also choose to provide us with your t-shirt size, since as part of the event planning, we may provide you with event-related garments.

1. Why?

The personal data is processed to help you plan your participation as a volunteer in the events in consideration of your individual health-based needs (e.g. ordering meals that do not contain ingredients to which you are allergic) and having a contact person designated by you in case an  emergency should occur.

1. Legal Basis

The legal basis for processing the personal data is your consent in accordance with Art. 9 para. 2 let. a) GDPR.

1. How Long?

Personal data that is processed based on your consent will be stored for as long as you do not withdraw your consent. You can at any time withdraw your consent. If you want to declare your withdrawal, please fill in the Dreamhack Data Protection Webform available HERE. Please note that the withdrawal does not affect the lawfulness of processing of the data based on the consent before its withdrawal.

1. Changes to this Privacy Notice

We regularly review our Privacy Notice to make sure is kept up-to-date and compliant with new legislation, rules or case law. We reserve the right to make any changes. You can check when the Privacy Notice was last amended by looking at the date at the end of the document.

VII.         Contact

If you require further information regarding the processing of your personal data, you can contact us via the Dreamhack Data Protection webform available HERE.