Information on the Processing of Your Personal Data
within contact form, email and telephone contact information
The information below provides you with an overview of the processing of your data (hereinafter "data") by the Arvato Systems Group as well as your data protection rights.
Who Is Accountable (Data Controller) for the Processing of My Data?
The respective company of the Arvato Systems Group with which you have a business relationship is responsible for processing your personal data and addressee of your rights as a data subject. The Arvato Systems Group acts under the joint responsibility of all companies solely for the purpose of conducting marketing activities and pre-contractual measures. We process personal data in accordance with the provisions of the European Data Protection Regulation (hereinafter "GDPR") and the Federal Data Protection Act (hereinafter "BDSG").
You can contact our data protection officer via the postal address of the respective legal entity noting "Attn: Data Protection Department" or via the e-mail address: datenschutz@arvato-systems.de, phone: +49-5241-80 70785.
What Are the Purposes of My Data Being Processed and What Is the Legal Basis?
The purposes of processing personal data are determined at the time of collection on the basis of legal permissions.
You have the option of contacting us by way of a contact form on our website, by email, by telephone, or by chat using the designated email address and phone number. If you take advantage of this option, the information you enter in the contact form, your email address, and/or your phone number is disclosed to us. Depending on the reason you are contacting us (questions about our products and services, pursuing your rights as a data subject, e.g., submitting a request for information), your contact details are processed (with the assistance of service providers). If necessary for processing your request, this information may be shared with third parties (e.g., partner companies).
The legal basis for processing your contact details follows from Art. 6(1)(f) GDPR. We have legitimate interests in processing your request and in continued communication. If the purpose for your establishing contact with us is to enter into a contract with our company, the legal basis for processing your contact details follows from Art. 6(1)(b) GDPR.
Am I Obligated to Provide Data?
It is unavoidably necessary for personal data to be collected for the processing purposes outlined above pursuant to contractual and legal requirements. Without this data, we will generally be unable to perform processing.
Who Receives My Data?
In order to ensure sufficient data security during the transmission of forms, we use in certain cases the service reCAPTCHA of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. This serves above all to differentiate whether the input is made by a natural person or misused by mechanical and automated processing. The service includes the transmission of the IP address and any other data required by Google for the reCAPTCHA service to Google. The differing data protection provisions of Google Ltd. apply here. Further information on the data protection guidelines of Google Ltd. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/.
We use service providers (contract processors) who are bound by instructions and who only have access to your data to the extent and for the period necessary for the provision of the services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same data protection standard as the European Union. However, such a level of data protection can be guaranteed with a suitable guarantee. When selecting service providers, Arvato Systems takes the necessary steps to contractually ensure an equivalent level of data protection.
How Long Will My Data Be Stored?
Your contact details are deleted once your request has been processed and further communication has been discontinued. This does apply if the purpose of your establishing contact with us is to conclude a contract or you wish to exercise your right as a data subject (e.g., request information). In this case, the data will be further processed on a new legal basis and deleted as soon as the processing purpose and the legal retention periods are fulfilled.
What Rights Do I Have Respecting My Data?
You have the right to request access to your personal data, which are currently stored by us. Where these data are incorrect or not up to date, you have the right to request rectification. In addition, you can request erasure and/or restriction of your data where the criteria are set out in Art. 17 and 18 of the GDPR are met. Where our processing of data provided by you is based on your consent or is subject to a contract, you may request a copy of these data in a structured, common, and machine-readable format (right to data portability).
You have the right to object to the processing of your data, Art. 21 GDPR.
If you have given us consent to process your personal data for specific purposes, you have the right to withdraw this consent at any time with effect for the future.
If you wish to exercise your rights or have general questions regarding data protection within the Arvato Systems Group, you may contact us at any time via the above contact details. You also have the option of contacting a data protection authority and filing a complaint.
Is My Data Processed by Means of Automated Decision-Making, Including Profiling?
Your collected data is not utilised for automated decision making or profiling.
Conclusion / Version Information
In the course of further development of Arvato Systems services, changes to this privacy policy may become necessary. We, therefore, recommend that you read this privacy policy again from time to time.