15–18 JULY 2027

Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section entitled “Information on the Controller” in this Privacy Policy.

How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, information you enter into a contact form.
Other data is collected automatically by our IT systems, or after you have given your consent, when you visit the website. This primarily includes technical data (e.g. your internet browser, operating system or the time you accessed the page). This data is collected automatically as soon as you access this website.

What do we use your data for?
Some of the data is collected to ensure that the website functions properly. Other data may be used to analyse how visitors use the website.

What rights do you have regarding your data?
You have the right to obtain, free of charge and at any time, information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. Under certain circumstances, you also have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding these and any other questions relating to data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be statistically analysed. This is primarily done using so-called analytics programmes.

Detailed information about these analytics programmes can be found in the following Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of our hosting provider(s). This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access records and other data generated through a website.

External hosting is carried out for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR).

Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Our hosting provider(s) will only process your data to the extent necessary to fulfil their service obligations and will follow our instructions with regard to this data.

We use the following hosting provider:

teuto.net Netzdienste GmbH
Niedernstr. 26
33602 Bielefeld
Germany

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a legally required data protection agreement that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is any information that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purposes this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Data Controller

The controller responsible for data processing on this website is:

artevent GmbH
Markus Ossevorth
Managing Director
Pappelallee 27
10437 Berlin
Germany

Phone: +49 (0)30 4465 1699
Email: info@artevent.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar information).

Data Retention Period

Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies.

If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining your personal data (e.g. retention periods required under tax or commercial law). In the latter case, deletion will take place once those grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have given your consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or, where special categories of personal data pursuant to Art. 9(1) GDPR are processed, on the basis of Art. 9(2)(a) GDPR.
In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR.

If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) TTDSG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR.
Furthermore, we process your data where this is necessary to fulfil a legal obligation, on the basis of Art. 6(1)(c) GDPR.

Data processing may also be carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.
The specific legal basis applicable in each individual case is explained in the following sections of this Privacy Policy.

Information on Data Transfers to the USA and Other Third Countries

Among other things, we use tools provided by companies based in the USA or other third countries that do not offer an adequate level of data protection.

If these tools are active, your personal data may be transferred to and processed in these third countries.

Please note that a level of data protection equivalent to that guaranteed within the EU cannot be ensured in these countries. For example, US companies may be required to disclose personal data to security authorities without you, as the data subject, having any effective legal recourse against such disclosure.

It therefore cannot be ruled out that US authorities (e.g. intelligence agencies) may process, analyse and permanently store data held on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of any data processing carried out prior to the withdrawal remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.

THE RELEVANT LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING.

IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, either for yourself or for a third party, in a commonly used, machine-readable format.
If you request the direct transfer of your data to another controller, this will only be carried out where technically feasible.

Access, Rectification and Erasure

Within the scope of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to request the rectification or erasure of this data.
You may contact us at any time regarding these and any other questions relating to personal data.

4. Data Collection on This Website

Cookies

Our website uses so-called “cookies”. Cookies are small data files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third-party companies into websites (e.g. cookies used to process payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website features would not function without them (e.g. the shopping cart function or video playback). Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies that are necessary for carrying out electronic communication processes, providing certain functions you have requested (e.g. the shopping cart function) or optimising the website (e.g. cookies used to measure website traffic) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified.

The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services.

Where consent has been requested for the storage of cookies and similar recognition technologies, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG). Consent may be withdrawn at any time.

You can configure your browser to notify you whenever cookies are set, to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies in certain cases or altogether, and to activate the automatic deletion of cookies when you close your browser. Please note that disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in this Privacy Policy.

Consent with Borlabs Cookie

Our website uses the consent management technology provided by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser or the use of specific technologies, and to document this consent in compliance with data protection regulations.

The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as “Borlabs”).

When you visit our website, a Borlabs cookie is stored in your browser, recording the consent you have given or the withdrawal of that consent. This data is not shared with the provider of Borlabs Cookie.
The collected data is stored until you request its deletion, delete the Borlabs cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

For further details on how Borlabs Cookie processes data, please visit:
https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs Cookie consent management technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Hostname of the accessing device

  • Time of the server request

  • IP address

This data is not combined with data from other sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimisation of its website. For this purpose, server log files must be collected.

Contact by Email, Telephone or Fax

If you contact us by email, telephone or fax, your enquiry, including all personal data resulting from it (such as your name and the content of your enquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data with third parties without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract.

In all other cases, processing is based either on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you send us through contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.


5. Analytics Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, time spent on the website, operating systems used and the users’ origins. This data is assigned to the respective user’s device. It is not assigned to a user ID.
Furthermore, Google Analytics allows us to record, among other things, your mouse movements, scrolling activity and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and employs machine learning technologies in its data analysis.

Google Analytics uses technologies that enable users to be recognised for the purpose of analysing their behaviour (e.g. cookies or device fingerprinting). The information collected by Google about your use of this website is generally transferred to a Google server in the USA and stored there.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. You may withdraw your consent at any time.

The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. Further details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser Plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information about how Google Analytics handles user data can be found in Google's Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have concluded a Data Processing Agreement with Google and fully implement the strict requirements imposed by the German data protection authorities when using Google Analytics.

6. Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No additional data is collected, or such data is only collected on a voluntary basis. We use this information exclusively to send you the requested updates and do not share it with third parties.

The processing of the data entered into the newsletter subscription form is based exclusively on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and email address, as well as their use for sending the newsletter, at any time, for example by clicking the “Unsubscribe” link included in the newsletter. The lawfulness of any data processing carried out prior to the withdrawal remains unaffected.

The data you provide for the purpose of subscribing to our newsletter will be stored by us or our newsletter service provider until you unsubscribe. Once you unsubscribe or the purpose for storing the data no longer applies, your data will be deleted from the newsletter mailing list.

We reserve the right to delete or block email addresses from our newsletter mailing list at our own discretion, within the scope of our legitimate interests pursuant to Art. 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter mailing list, your email address may be stored by us or our newsletter service provider on a blacklist, if necessary to prevent future mailings. The data stored on the blacklist will only be used for this purpose and will not be combined with other data.

This serves both your interests and our legitimate interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR).
Storage on the blacklist is not subject to a time limit. You may object to this storage if your interests outweigh our legitimate interests.

7. Plugins and Tools

YouTube with Enhanced Privacy Mode

This website embeds videos from YouTube. The operator of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in Enhanced Privacy Mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. However, the sharing of data with YouTube partners is not necessarily excluded by Enhanced Privacy Mode. For example, YouTube connects to the Google DoubleClick network regardless of whether you watch a video.
As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after you start a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). This enables YouTube to obtain information about visitors to this website. Among other things, this information is used to compile video statistics, improve user experience and prevent attempts at fraud.
Further data processing operations may be triggered after you start a YouTube video, over which we have no control.
YouTube is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
For further information about data protection at YouTube, please refer to its Privacy Policy:
https://policies.google.com/privacy?hl=en

Vimeo

This website uses plugins from the video platform Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages featuring a Vimeo video, a connection to Vimeo's servers is established. This informs the Vimeo server which of our pages you have visited. Vimeo also receives your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo's servers in the USA.
If you are logged into your Vimeo account, you allow Vimeo to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo uses cookies and comparable recognition technologies (e.g. device fingerprinting) to recognise website visitors.
Vimeo is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses and, according to Vimeo, on “legitimate business interests”. Further details can be found here:
https://vimeo.com/privacy

For further information on how Vimeo handles user data, please refer to its Privacy Policy:
https://vimeo.com/privacy

Google Fonts (Local Hosting)

This website uses so-called Google Fonts, provided by Google, to ensure consistent font presentation. Google Fonts are installed locally on our servers. No connection to Google's servers is established in this process.

For further information about Google Fonts, please visit:
https://developers.google.com/fonts/faq

You can also find further information in Google's Privacy Policy:
https://policies.google.com/privacy?hl=en

Adobe Fonts

This website uses web fonts provided by Adobe to ensure consistent presentation of certain typefaces. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”).
When you access this website, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser establishes a connection to Adobe's servers in the USA. This enables Adobe to identify that this website has been accessed via your IP address. According to Adobe, no cookies are stored when providing these fonts.
The storage and analysis of data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring a consistent presentation of fonts on its website.
Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Further details can be found here:
https://www.adobe.com/de/privacy/eudatatransfers.html

For more information about Adobe Fonts, please visit:
https://www.adobe.com/de/privacy/policies/adobe-fonts.html

Adobe's Privacy Policy can be found here:
https://www.adobe.com/de/privacy/policy.html

Font Awesome

This website uses Font Awesome to ensure consistent presentation of fonts and icons. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.
When you access a page, your browser loads the required fonts into its browser cache so that text, typefaces and icons can be displayed correctly. To do this, the browser you are using must establish a connection to Font Awesome's servers. This enables Font Awesome to identify that this website has been accessed via your IP address.
Font Awesome is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring a consistent presentation of fonts and icons on our website.
Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies

8. eCommerce and Payment Providers

Processing of Customer and Contract Data

We collect, process and use personal customer and contract data for the establishment, substantive arrangement and modification of our contractual relationships.
We collect, process and use personal data relating to the use of this website (usage data) only to the extent necessary to enable users to access the service or to bill them for its use.
The legal basis for this processing is Art. 6(1)(b) GDPR.
The customer data collected will be deleted upon completion of the order or termination of the business relationship and expiry of any applicable statutory retention periods. Mandatory statutory retention periods remain unaffected.

Data Transfers upon Conclusion of a Contract for Online Shops, Retailers and Shipping of Goods

If you order goods from us, we will share your personal data with the transport company responsible for delivery and the payment service provider commissioned to process the payment.
Only the data required by the respective service provider to fulfil its task will be shared.
The legal basis for this is Art. 6(1)(b) GDPR, which permits the processing of data necessary for the performance of a contract or for taking steps prior to entering into a contract.
If you have given your consent in accordance with Art. 6(1)(a) GDPR, we will also share your email address with the transport company responsible for delivery so that it can inform you by email about the shipping status of your order. You may withdraw your consent at any time.

Data Transfers upon Conclusion of a Contract for Services and Digital Content

We only transfer personal data to third parties if this is necessary for the performance of a contract, for example to the bank or financial institution responsible for processing payments.
No further transfer of data takes place unless you have expressly consented to it. Your data will not be shared with third parties without your explicit consent, for example for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data necessary for the performance of a contract or for taking steps prior to entering into a contract.


9. Our Own Services

Handling of Applicant Data

We offer you the opportunity to apply to us (e.g. by email, by post or via an online application form). Below, we provide information about the scope, purpose and use of the personal data collected from you as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection laws and all other statutory provisions, and that your data will be treated as strictly confidential.

Scope and Purpose of Data Collection

When you submit an application to us, we process the personal data associated with it (e.g. contact and communication details, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide whether to establish an employment relationship. The legal basis for this is Section 26 BDSG under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contractual relationship) and, where you have given your consent, Art. 6(1)(a) GDPR. You may withdraw your consent at any time. Within our company, your personal data will only be disclosed to individuals involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.

Data Retention Period

If we are unable to offer you a position, you decline a job offer or withdraw your application, we reserve the right to retain the data you have submitted for up to six months from the conclusion of the application process (rejection or withdrawal of the application), on the basis of our legitimate interests (Art. 6(1)(f) GDPR). The data will then be deleted and any physical application documents destroyed. This retention period is primarily intended to allow us to provide evidence in the event of legal proceedings. If it is evident that the data will be required after the six-month period (e.g. due to pending or anticipated legal proceedings), deletion will only take place once the purpose for continued retention no longer applies.
Longer retention may also take place if you have given your consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the Applicant Pool

If we are unable to offer you a position, we may have the option of adding you to our applicant pool. If you are added, all documents and information from your application will be transferred to the applicant pool so that we can contact you if suitable vacancies arise.
You will only be added to the applicant pool with your express consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and is not connected to the ongoing application process. You may withdraw your consent at any time. In this case, your data will be permanently deleted from the applicant pool, unless statutory retention obligations apply.
Data in the applicant pool will be permanently deleted no later than two years after consent has been given.