Information on the processing of personal data as part of the “Qatar Airways x Australia” Germany competition.

The following describes how Qatar processes your personal data as part of the competition.You have acknowledged that information that is accessible worldwide on the Internet can be accessed using search engines and that there are special archiving services whose aim is to permanently document the status of certain websites at certain dates. This can mean that information published on the Internet can still be found elsewhere even after it has been deleted from the original site.

Data processing by Qatar: Responsible party

Qatar Airways, based at P.O. Box 25550, Doha, Qatar (“Qatar”), is responsible for processing your personal data as part of the competition. Qatar has appointed a data protection officer who can be contacted at dpo@qatarairways.com.qa. Data categories/guarantee

The following categories of data will be processed by Qatar for the competition:

Your first and last name, address, email address, date of birth and passport details.

Purpose of processing Qatar needs your personal data to carry out and process the competition, namely to pay out the prizes to the determined winner. In the event of problems with the processing, Qatar needs your address or email address to contact you.

To ensure that you are of legal age and therefore eligible to participate, Qatar requires appropriate confirmation in the form of your date of birth. You have the option of refraining from providing your personal data or providing Qatar with incomplete information.

However, this may mean that the prize cannot be sent properly or can only be sent with a delay or that participation in a travel prize is excluded.

Legal basis for processing

The legal basis for processing your personal data is the concluded contractual relationship (Art. 6 para. 1 lit. b) GDPR.

Recipients

Only Qatar employees who are responsible for conducting the competition within the scope of their duties have access to your personal data.

In addition, Qatar may use third-party companies for IT maintenance or service services, which may have access to your personal data as part of this activity.

We will not pass on your personal data to authorities or courts unless we are compelled to do so by applicable law or a court order or court decision.

Qatar assures you that it

• will treat your personal data in accordance with the aforementioned provisions, guidelines and applicable laws and with contractual obligations;

• will only use your personal data for the legitimate business purposes for which this data was collected; • will act transparently with regard to the purpose for which your personal data was collected;

• has restricted access to sensitive personal data so that access is only granted to those who are professionally or contractually obliged to maintain confidentiality.

Automated decision-making and profiling Your personal data will not be used by Qatar for automated decision-making.

Likewise, Qatar will not create profiles from your personal data. How long will your personal data be stored? Subject to statutory retention periods, your personal data will be deleted immediately, at the latest within 90 days after the expiry of the mutual contractual rights in connection with this competition.

Excluded from this are the data that you have given us for the receipt of our newsletter.

Your personal data will also be deleted if you have revoked your consent to processing, unless there are mandatory statutory retention periods.

Your rights

You can revoke your consent at any time without giving reasons with effect for the future by sending an email to dpo@qatarairways.com.qa.

You can contact Qatar either in writing (Qatar Airways Group, Q.C.S.C., Qatar Airways Tower 1, PO Box 22550, Doha, State of Qatar) or by email dpo@qatarairways.com.qa to exercise the following rights:

• Access to your data in order to control and verify it,

• Obtain a copy of your personal data,

• Rectification, erasure or restriction of processing, this also includes the right to complete incomplete or incorrect data by providing additional information; if you request erasure of your data, you must clearly express this;

• Right to object to the processing