Information on the Processing of Your Personal Data

The following information provides an overview of how the Arvato Systems Group processes your personal data (hereinafter “Data”) and your data protection rights.

The individual companies of the Arvato Systems Group* (hereinafter “Company”) are jointly responsible for the processing of your personal data. We process personal data in accordance with the provisions of the European General Data Protection Regulation (hereinafter “GDPR”) and the German Federal Data Protection Act (hereinafter “BDSG”).

You can contact our Data Protection Officer at the relevant legal entity's mailing address with the addition “Data Protection Department,” by email at datenschutz@arvato-systems.de, or by phone at +49-5241-80 70785.

The purposes for processing personal data are determined at the time of collection, based on the legal grounds for processing. 

You can contact us via the website contact form, email, or phone. If you use this option, the data entered in the contact form, your email address and/or phone number, and your inquiry will be transmitted to the company. Depending on the nature of your inquiry (e.g., questions about the company’s products and services, or the exercise of your data subject rights, such as the right to access), your contact data will be further processed (including with the assistance of service providers). To the extent necessary for handling your inquiry, your contact data may be forwarded to third parties (e.g., partner companies).

The legal basis for the processing of your contact information is Article 6(1)(f) of the GDPR. The legitimate interests lie in the handling of your specific inquiry and in further communication. If your contact is aimed at entering into a contract with the company, the legal basis for the processing of your contact information is Article 6(1)(b) of the GDPR. 

To achieve the processing purposes described above, your personal data is essential for contractual and legal reasons. Without this data, we will generally not be able to process it. 

To ensure adequate data security when submitting forms, we use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in certain cases. To do this, reCAPTCHA analyzes the visitor’s behavior based on various characteristics (e.g., IP address, mouse movements, time spent on the page) and also uses other Google services for this purpose. The data collected in this process is transmitted to Google and evaluated there. It cannot be ruled out that data may also be transmitted to servers operated by Google LLC in the United States.

We use service providers (data processors) who are bound by our instructions and who are granted access to your data only to the extent and for the duration necessary to provide the respective services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country where a level of data protection equivalent to that of the EU or the EEA cannot be guaranteed. However, such a level of data protection can be ensured through appropriate safeguards. When selecting service providers, Arvato Systems takes the necessary steps to ensure, through contractual means, an equivalent level of data protection.

After your request is processed and further communication ends, your contact information will be delet-ed. This does not apply if your contact is intended to conclude a contract with the company or if you exercise your data subject rights, such as the right to access. In this case, the data will be further pro-cessed on a new legal basis and deleted as soon as the purpose of processing has been fulfilled and the statutory retention periods have expired.

You have the right at any time to request information about the personal data we have stored about you in accordance with Article 15 of the GDPR. If data about you is incorrect or no longer up to date, you have the right to request its correction. You also have the right to request the erasure or restriction of the processing of your data in accordance with Articles 17 and 18 of the GDPR. 

If you have provided us with data and the processing is based on your consent or on a contract concluded with you using automated means, you have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format (right to data portability). 

You may object to the processing of your data in accordance with Article 21 of the GDPR.

If you have given us consent to process personal data for specific purposes, you may revoke this consent at any time with future effect.

If you wish to exercise your rights or have general questions regarding data protection within the Arvato Systems Group, you can contact us at any time using the contact details provided above. In addition, you have the option to contact a data protection authority and file a complaint there. A list of data protection authorities and their contact details can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links.
/anschriften_links-node.html

No automated decision-making or profiling takes place based on the data collected from you.

As Arvato Systems' services continue to evolve, changes to this privacy notice may be necessary. We therefore recommend that you review this privacy notice from time to time.