Welcome to European Championships Munich 2022.
We appreciate your interest in our event. We, European Championships Munich 2022 (hereafter referred to as „Munich 2022“, „we“, or „our“) abide by the principles of the European Data Protection Regulation (GDPR) in our processes and workflows.
This is to inform you to what purpose and on which legal basis we process your personal data (PII) and which rights you have concerning this data processing.
Please take the time to read our privacy notice as it contains important information about how we handle your personal data.
Who is responsible for processing my personal data?
Olympiapark München GmbH, Spiridon-Louis-Ring 21, 80809 Munich, phone +49 89 3067 0, facsimile at +49 89 3067 3333, e-mail firstname.lastname@example.org is the controller for data processing as outlined in Art. 4 No. 7 GDPR, unless otherwise stated.
Who can I contact if I have questions about the processing of my personal data or if I believe that the processing of my data by Munich 2022 violates data protection laws?
If you think that our processing of your data violates your data privacy rights, please contact us at email@example.com.
Why am I being informed about the processing of my personal data?
The protection of your personal data is your fundamental right. Therefore, we’re obliged to process your personal data lawfully, fairly and in a transparent manner. We take into account the data protection requirements of the General Data Protection Regulation, which requires us, among other things, to inform you about which personal data we process, for what purposes, and for how long we do so.
What is subject of data privacy?
Personal data, as outlined in Art. 4 No. 1 GDPR, is subject to data privacy under the Data Protection Laws of Germany and the European Union.
What is personal data?
Personal data concerns all matter of information which make use of you as an identified or identifiable person (hereafter referred to also as PII), for example your first name, surname, email address, or usage data such as the IP address or your usage behaviour.
All personal data is used exclusively for the purposes outlined in this privacy notice.
What is the content of this notice?
We have outlined the most important information concerning our typical data processing purposes and clustered it by parties concerned.
The word „data“ in this document pertains solely to personal data in accordance with the data protection laws of Germany, and the European Union.
Information regarding our typical data processing purposes, categorised by relevant parties.
Website visitors - What data do we process if you only visit our website?
When you visit our page featuring information about Munich 2022, we only process the necessary data in order to display the website in its best possible form on your device. In principle, use of the website is possible without the usage of personal data.
Therefore, we claim, „in principle”, because we process your IP address in the short term, in order to make it possible for you to view the website. The IP address, also called internet protocol address, symbolizes a network location through which a web server or various devices can be addressed and reached. It takes two IP addresses – ours and yours – in order for the data packets (which make up our website) to be put back together on your end and show up as the actual website.
Server protocol data
Description and extent
In order to meet your data request, our web server must know your IP address, or rather, „process” it. Every time our site is accessed, our system automatically collates data and information about the operating system of your device. The following data is processed:
- information regarding your type of browser and which version you are running
- your operating system
- your internet service provider
- your IP address
- access time and location
- websites which access our website through your system
- websites which your system accesses from our website or services
This data is collated and saved automatically in a web protocol file called log file. This data is not linked to any personal data.
Temporary storage of your data on our system is necessary in order to deliver our website packages to your device. This requires us to store your data for the length of your session on our servers.
Furthermore, processing your data in the log files is necessary in order to guarantee that our website functions properly. The data also helps us optimize our web offer, as well as ensuring the security of the information technology of our systems. Your data is not analysed for marketing purposes. This is the reason our interest in processing your data is legitimate.
The legal basis for the temporary storage of your data and creation of log files is our legitimate interest in ensuring the security of the information technology of our systems.
The data is erased as soon as it is no longer needed for these purposes. In the case of data collected in order to display the website this happens when the session is terminated.
Log files are deleted after a maximum of 14 days. Storage past that time frame is possible. In that case your IP address is deleted or scrambled, so that association with your device is no longer possible.
Objection and purge options
The collection of data for the presentation of the website, as well as the processing of log file data, is mandatory for our online presence. Therefore, you cannot object to the processing of this data.
Strictly necessary cookies – functional cookies and performance cookies
Description and scope
When you access one of our web pages, cookies are stored on your system. A cookie contains a unique set of symbols which enables us to clearly identify your unique browser the next time you access our website.
The use of these cookies serves the improvement of quality and content on our website. These cookies tell us how our website is used and how we can continually optimize our offer. This is the reason our interest in processing your data is legitimate.
The legal basis for the processing of your data by using strictly necessary cookies as well as the collating and usage of performance analysis is our legitimate interest in improving the quality and content on our website.
Objection- and purge options in your browser settings
Below please find information regarding the settings of the most common browser types:
- Microsoft Edge
- Google Chrome
Storage, objection and purge options
If cookies are deactivated for our website, it may cause various functions of our online offer to cease to function.
Marketing and analysis
Google Universal Analytics – general information
We use Google Universal Analytics on our site. Google Universal Analytics is a service of Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, in Ireland („Google”). We apply Google’s service by using “cookies”. Cookies are text files which are saved on your device and which enable usage analysis of our websites and services. The cookies' collated information regarding your usage of our website and services is transmitted and stored on a Google server in Ireland. We have activated IP-anonymizing on our websites and services. Therefore, your IP address is truncated by Google. Only in rare exceptions is your IP address transmitted to a Google server in the USA.
We use data, which is collated by your Google Client ID, as well as other data generated by Google's Web Analytics applications, in order to analyse your interactions with our services and websites. Additional information regarding Google's operating procedures can be found here.
We have tasked Google with analysing your net usage data of our websites and services using web analytics, in order to generate reports about your activity on our website and to give us additional information regarding your usage of our website, as well as the internet usage of related services. Google Analytics’ Demographic and Interest Reporting for example gives us analyses relating to age, gender, and interests of our users. The IP address transmitted to Google Analytics in this process is not linked to other Google data.
Objection and purge options
You can object to the collection, storage, and use of information, and the processing of information by Google Web Analytics, at any time and in perpetuity via the following channels, and revoke the original consent you have given via our banner.
You can deactivate the storage of cookies by changing your browser settings to reject cookies outright, or to notifying you as soon as cookies are set. To do this, you must change the settings in your browser menu, as outlined above under "Objection and purge options in the browser settings". We would like to point out that some areas of our website may then no longer function properly, or only to a limited extent.
Privacy Cockpit settings
You can also change the cookie usage settings which you set via our banner at any time with our "Privacy Cockpit". You can switch off the relevant cookies or the use of Google's Web Analytics by moving the slider in the "Marketing and Analysis" tab.
Download and install of browser plugins
You can prevent the acquisition and storage of cookies and the transmission of your usage data collated by our website and services to Google (including your IP address), as well as their processing by Google, by clicking on this link and installing the offered browser plugin.
The legal basis for the storage of Google Analytics cookies is based on your consent. They are stored for an unlimited period of time, unless you make use of your opt-out options.
We use the Google Analytics Remarketing functions in conjunction with the overarching device functions of Google DoubleClick. These functions enable us to connect the relevant advertising target groups determined by Google Analytics Remarketing with the overarching functions of Google DoubleClick. This way, personalized individual marketing messages, determined by your earlier usage and surfing habits on a particular device (i.e. your smartphone), can be displayed for you on a different device (i.e. your tablet or PC).
If you have given Google the corresponding consent, Google will connect your web and app browser history with your Google account. This way every single one of your devices can display the same personalized advertising messages. To support this function, Google Analytics stores your Google-authenticated ID, which is temporarily linked to our Google Analytics data, in order to identify and determine target groups for advertising messages across all devices.
You can prevent overarching remarketing and targeting permanently by deactivating personalized advertising in your Google account. Please use the following link.
The legal basis for the collating of garnered data in your Google account takes place solely based on your consent, which you can give to or withdraw or revoke from Google directly.
For data collection operations that are not merged into your Google account, for example, because you do not have a Google account or have opted out of the merge, the collection of the data is based on our legitimate interest. Our legitimate interest results from the fact that we have an interest in the anonymized analysis of website visitors for advertising purposes. Further information on this function used by us can be found in Google's data protection information.
AdWords und Conversion-Tracking
We use Google AdWords, which is a Google online advertising program. Within the framework of Google AdWords, we use their so-called “conversion tracking” by setting a conversion tracking cookie each time you click on an ad placed for us by Google. This cookie expires after 30 days and does not serve to identify you personally. If you visit certain pages of our website before the cookie expires, we, as well as Google, can recognize that you were redirected to our site by clicking on our ad. We, as a Google AdWords customer, then receive a specific cookie. This cookie is unique, can only be assigned to us, and cannot be tracked via the websites of other AdWords customers. AdWords customers who have opted for conversion tracking can then use the information obtained by these unique conversion cookies to create conversion statistics. As a customer, we only determine the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. We do not receive any information with which we could personally identify users.
Objection and purge options
If you do not wish to participate in tracking, you can object by deactivating the Google conversion tracking cookie via your internet browser under “user settings”. You can also set your browser to inform you each time a cookie is set and only allow specific cookies, exclude the acceptance of specific cookies or general cookies, and also activate the automatic purge of all cookies when closing your browser.
You can also change your settings for the use of marketing cookies made via our banner at any time via the "Privacy Cockpit" - by switching off the relevant cookies, or the general use of Google conversion tracking, by changing the slider.
The functionality of this website may be limited after disabling cookies.
Purpose and legal basis
If you opt out of conversion tracking, you will then not be included in the conversion tracking statistics. The conversion cookie will not be stored on your device without your explicit permission. We use the statistical information obtained by this cookie according to Art. 6 (1) lit. f DSGVO. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
Additional Google tools
We use other Google tools in connection with our marketing and analysis. Specifically, we use the following:
Google Tag Manager
We use Google Tag Manager in conjunction with marketing and analysis to manage the Google tools. This is a tag management system that allows us to quickly and easily update tracking codes and related code fragments, commonly known as "tags", on our websites.
Google Display Network – We use Google Display Network to measure the effectiveness of ad impressions of Google Display Network advertising, and to understand why individual advertising links to our website were not clicked. This helps us better understand the success rate of our advertising campaigns. You can find more information about this here.
Google Optimize – By displaying slightly different variantions of the website to different user groups depending on so-called profile matching, Google Optimize allows us to analyze user behavior as part of A/B testing. This lets us analyze our presence on the Internet, improve our web offerings, and create an interesting user experience for you.
The legal basis for the data processing is based on your consent. The data will be stored for an unlimited period of time, unless you make use of your opt-out options.
You can object to the use of your data as described above by changing the applicable settings in your browser under User Settings. Conversely, you can deactivate your settings made via our banner with the "Privacy Cockpit" -- either by switching off the relevant cookies, or the use of tracking tools, by moving the slider under the tab "Marketing and Analysis”.
Social Media Tracking Tools
We also use other tracking tools on our websites that allow us to provide you with a more personalized and interactive web experience by advertising on your social media channels. This allows you to receive more relevant and therefore more interesting advertising. For this purpose, we use cookie-based tools offered by social media platform providers. Specifically, this concerns the tracking tools of the following providers:
· Facebook Ireland Ltd, with registered offices at 4 Grand Canal Square Grand Canal Harbour Dublin 2 in Ireland. Facebook Ireland Ltd. is a subsidiary of Facebook Inc. with its registered office at 1601 S California Ave, Palo Alto 94304 in California, USA More information about the tool we use can be found here. Additional information on data processing by Facebook can be found here.
· LinkedIn Ireland Unlimited Company, with registered offices at Wilton Place, Dublin 2 in Ireland. LinkedIn Ireland Unlimited Company is a subsidiary of LinkedIn Corporation, having its principal place of business at 2029 Stierlin Court, Mountain View 94043, California, USA For more information about LinkedIn's privacy practices, click here.
For more information about the tool we use and how you can opt-out of tracking, please click here.
For more information about the tool we use and how you can opt out of tracking, please click here.
In order to be able to use the tools of the aforementioned providers, we integrate so-called tracking pixels into our websites. These tracking pixels are transparent, pixel-sized images with tracking function, which in turn load a small library of tracking functions. These functions allow us to track your activities on our websites, such as the URLs and domains you have visited, the devices you have used, and most importantly, advertising conversions. Advertising conversions, or conversion rate, is a metric that allows us to measure the success of our advertising activities. For example, the conversion rate describes the percentage of visitors to our websites who register for one of our products after interacting with our advertising. The advertising conversion rates are based on the cookies set by the aforementioned providers and enable us to compare our website visitors with the corresponding user accounts on various social media platforms.
Social media buttons (recommendation buttons) – Facebook and Twitter
We maintain a social media presence. It is part of our online media presence. Our aim is to inform and exchange information with interested parties in a target group-oriented manner. Social media enables us to establish electronic contact quickly and therefore to communicate directly via the media of your choice.
Recommendation buttons from Facebook and Twitter are integrated on our website. The links to these platforms are integrated in such a way that your data is only sent to the respective service when you click on the recommendation button (so-called Shariff solution).
We have no influence on what data is sent to Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) or Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland) after clicking on it. You use these platforms and their functions at your own risk. This applies in particular to the use of the interactive functions, such as commenting on, sharing or evaluating our contributions, as well as liking our company site. Most interactive functions are reserved for registered and logged in users.
You are entitled to the following rights regarding the processing of your data: right of access; right of rectification; right to purge; right to restriction of processing; right to object; right to data portability, and the right to complain about unlawful processing of your personal data to the relevant data protection authority.
We do not have full access to your personal data. Therefore, you should contact the provider of the respective platform(s) directly when making a claim. Providers have access to the personal data of their users and can take the appropriate measures as well as provide information. We are happy to support you if you need further assistance. Please contact firstname.lastname@example.org for this purpose.
Objection on Facebook
For a detailed presentation of respective data processing and the possibilities of objection (opt-out), we refer to the following linked information:
Objection on Twitter
For a detailed presentation of respective data processing and the possibilities of objection (opt-out), we refer to the following linked information:
Shared responsibility – Joint Controllership
According to the case law of the European Court of Justice, we are jointly responsible controllers in the cases listed below.
Shared responsibility – joint controllership with Facebook
As the operator of a fan page on the social network Facebook, we are, together with the operator of this network, responsible, and liable under data protection laws. Facebook is a service which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. When visiting our fan page, your personal data is processed by those responsible, i.e. by us and by Facebook.
Agreement with Facebook
In connection with statistical analysis, we use the filters provided to us by Facebook to specify the categories of data according to which Facebook provides us with anonymized statistics. The following criteria or categories are available to us in anonymized form for evaluating your activities on our Facebook page, provided that you as a user have provided the relevant information:
- Age range
- Place of residence (city and country)
- Mobile or stationary page view (YouTube to include individual device types)
- Interactions in context with posts (e.g. reactions, comments, shares, clicks, views, video usage time)
- Time of use
Data sharing in the context of Facebook interactions
If you interact with our fan page during your visit, Facebook will also have access to your data. It is therefore also possible that Facebook Inc. at 1601 Willow Road in 94025 Menlo Park, California, i.e. in the USA, has access to your data. Facebook Inc. is located in a third country in which the level of data protection is lower than in the EU.
Shared responsibility – joint controllership with Instagram
We are responsible for the content on our Instagram company page. The Instagram service is a product provided by Facebook Ireland Limited ("Facebook"). As the operator of an Instagram company page, we are jointly responsible with the operator of the social network Facebook Ireland Ltd. When visiting our Instagram page, personal data is processed by the responsible parties.
Instagram is an online platform which enables the sharing of photos and videos. Users can edit photos and videos and add filters. Other users can in turn share these photos and videos, comment on them or mark them with a "Like". Users can also get in touch with each other by writing private messages.
As the person responsible for this site, we have entered into various agreements with Facebook, which, among other things, regulate the conditions for use of the Instagram page.
There is a possibility that your data may also be processed outside the UK or the European Union by Facebook Inc. in the USA. We ourselves do not pass on any personal data.
The joint controller agreement with Facebook essentially means that you can assert your data subject rights directly against Facebook. However, should our assistance be required, please feel free to contact us at any time.
Provision of statistical evaluation – Instagram Insights
The Instagram page is a company page featuring the Instagram Insights function. This means that part of the data collected by Facebook during use is made available to us as a statistical evaluation in anonymized form. However, this statistical evaluation only relates to the audience, content and activity on our Instagram page. Specifically, the evaluation includes the following data:
- Number of "likes" of our photos and videos.
- Number of comments on our photos and videos
- Number of people who have seen a photo or video
- Number of times a photo or video was shared
- Number of times a photo or video was reported as spam
- Number of times a click indicated that the user no longer likes the page
- Age, gender, location, and language of visitors in aggregate form
Visibility of personal data for us and other users
When using certain interactive functions on Instagram (e.g. the comment function or the "Like" button), comments or likes are visible to other users and to us as the provider of the Instagram page. Thus, a direct user assignment can be made based on the disclosed personal data.
We have no influence on interactive functionalities and visibility of comments, likes or other activities on our Instagram page. We are therefore not the responsible party in terms of data protection laws. The type, scope and duration of the processing and storage of personal data in this regard are determined by Facebook, so Facebook is ultimately responsible for this.
It is always possible to visit our Instagram page without leaving comments or clicking "Like".
Please note that the interactive functions of Instagram are generally only possible after registration. Data relating to this may also be processed by Facebook but does not fall within our area of responsibility.
Contacting us via private message or comment
It is possible to contact us through our Instagram page either by private message or by comment. You can contact us with questions about us, our Instagram page, or other inquiries.
When you contact us, we are furnished with your username, your actual request and other personal data, if applicable. We have to store this data in order to be able to answer your inquiry. Comments are public and visible to all other Instagram users.
We delete the data generated in the course of your inquiry/contact six months after the last message. If there are legal storage obligations, the data will be stored for the duration of the legally required storage obligation. A public comment can only be deleted by you.
Purpose of data processing
The first purpose of processing personal data in connection with our Instagram presence is to compile statistics on visitor flows. This allows us to better understand how users interact with our site and the products and services presented. It allows us to better design our company page and adapt our products and services to the needs of users. Furthermore, we process users' personal data in order to be able to communicate with you directly via media of your choice.
Lawfulness of data processing
We operate this Instagram page in order to present ourselves to Instagram users and to communicate directly with them. The processing of your personal data is based on our legitimate interests in an optimized company and product presentation as well as direct communication with Instagram users. This also corresponds to the reasonable expectations of the data subjects, as the communication is not initiated by us, but by them.
If we publish images of individuals, this is done primarily via consent or on the basis of a contractual agreement, and in exceptional cases on the basis of legitimate interests.
Objection and purge
You have the right to object to data processing on grounds relating to special circumstances at any time. You can exercise your right to object via the Instagram/Facebook settings. If you wish to object to processing within our area of responsibility, you can contact us for this purpose.
Since we are merely operators of an Instagram page, limited personal data is transmitted to us as described above. The criteria specified by Instagram apply to the storage period, unless it is data that is generated in the context of your inquiry/contact. Inquiry/contact data will be deleted by us six months after the last message.
Shared responsibility – joint controllership with Google
We use Google Universal Analytics on our site. We apply Google’s service by using “cookies”. Cookies are text files which are saved on your device and which enable usage analysis of our websites and services. The cookies' collated information regarding your usage of our website and services is transmitted to Google. Google uses this information to analyse how you use our website and to provide us reports about your activity on our website and to give us additional information regarding your usage of our website, as well as the internet usage of related services. By applying Google’s Universal Analytics on our website, we are, together with Google responsible, and liable under data protection laws. Google Universal Analytics is a service of Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, in Ireland („Google”). You can find more information about the joint controllership here.
Shared responsibility – joint controllership with YouTube
We rely on the technical platform and services of YouTube, a Google company with headquarters at Gordon House, Barrow Street, Dublin 4, Ireland. If you are a resident of the UK or the European Economic Area or Switzerland, (unless otherwise specified in any additional terms), these services are provided by Google Ireland Limited ("Google"), a company incorporated and organised under the laws of Ireland.
In its ruling in case C-210/16, the European Court of Justice decided that platform operators (here: YouTube) and the channel operators located on the platform are jointly responsible for the data processing carried out via the respective channel. To this extent, platform operators and channel operators are to be regarded as jointly responsible parties or joint.
Web page videos
When we integrate videos on our websites they are stored on YouTube. YouTube is a platform offered by YouTube LLC, located at 901 Cherry Ave, San Bruno, CA 94066 in the USA. YouTube is a company affiliated with Google. We embed our videos via YouTube because local hosting is not powerful enough to display the videos.
When you click on one of our videos, a connection is established to YouTube in order to embed the video provided for you on our site. The integration of the video results in a call to the YouTube or Google servers for technical reasons. The servers are located in Ireland, in the EU. We have no influence on which data is transmitted to YouTube after clicking. Therefore, for the associated use of data from your browser or device, we refer you to the privacy notices of YouTube or Google, which you can find here.
You have the right to object to the processing of your personal data, but you must address the objection to YouTube and Google.
When you visit our website with an embedded YouTube video, YouTube receives information about the specific website you are visiting. In the process, your personal data is transmitted to YouTube as just described. Such transmission takes place regardless of whether you have logged into your YouTube account or whether you do not have a corresponding account at all. If you have logged into your YouTube account, your personal data will be assigned to your YouTube profile. If you do not want your personal data to be assigned to your profile, you should log out of your YouTube account before accessing one of our videos. YouTube and Google use this data for advertising, market research and/or a demand-based design of their website.
We use "Google reCAPTCHA" (hereafter "reCAPTCHA") on our websites. reCAPTCHA is a service of Google Inc., business located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). With reCAPTCHA, we check whether the data entry on our websites (e.g. in our contact form) is made by a human or by an automated program (a so-called BOT). For this purpose, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as a visitor accesses our website. For this analysis, reCAPTCHA evaluates various information points (e.g. IP address, time spent by each visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
Purpose / Lawfulness
We have a legitimate interest in protecting our web offerings from abusive automated spying and from SPAM. You can find more information about Google reCAPTCHA here.
On our website, we offer a free newsletter subscription with information about services, digital consultancy and design.
We need your email address in order to send you our newsletter. Otherwise we cannot provide you with the newsletter. Our newsletters are always personalized, i.e. we always address you personally. In order to address you personally in our newsletters and event invitations, we also need your first and last name.
Two-factor authentication („Double Opt-In“) of email addresses and proof of consent
If you subscribe to the newsletter distribution list, we will send you a link and ask you to confirm the registered e-mail address by means of the so-called double opt-in. In this way, we ensure that you have access to the specified e-mail account and that your e-mail address is correct.
Only after clicking on the confirmation link are you included in our distribution list.
In this case, we save your registration and confirmation time in order to log your registration and, if necessary, to be able to prove your e-mail verification or your consent.
The provision of this data is essential for the receipt of newsletters. Without the provision of this data, we cannot send you newsletters.
For the processing of this data, your consent is obtained, and reference is made to the data protection notice.
Analysis of page opening and click behaviour for success analysis
We analyze the dispatch and receipt of our newsletters in order to constantly optimize the content for you. For this purpose, we primarily record how many users open our newsletters and which articles are clicked on most often by the subscribers. For this purpose, the newsletters contain a small file, the so-called tracking pixel, which is retrieved from the sending server when the newsletter is opened. Upon retrieval we process the following data:
- your e-mail address,
- your traffic data, specifically your IP address, and
- the time stamp.
This analysis of opening and clicking behaviour allows us to understand which content is of interest to you, so that we can adapt our mailings to your needs and interests.
By subscribing to our newsletter and clicking on the confirmation link, you expressly consent to us collecting your data as just described. Without this consent, you cannot use our newsletter subscription.
We will only use your data for internal evaluation purposes and will not pass it on to third parties.
You can prevent the sending of newsletters and thus the future analysis of opening and click behaviours at any time by unsubscribing from the newsletters. To do so, click on the unsubscribe button that you can find at the bottom of each newsletter. Alternatively, you can also email@example.com.
We process your data for the purposes of sending personalized newsletters with content of interest to you, the recipient, to verify the accuracy of your email address and to prove your consent. A change of these purposes is not planned.
We base the processing of your data in the context of sending newsletters on your consent.
The storage of your registration and confirmation time is based on our legitimate interest to be able to prove that you have subscribed to the distribution list for the sending of newsletters in the event of any legal disputes. With the double opt-in procedure, we also take your legitimate interest into account by ensuring that you have not been registered by unauthorized third parties.
The evaluation of your opening and clicking behaviour is based on your consent.
Data that you have provided to receive the newsletter or data that can be traced back to you will be deleted upon unsubscription.
Newsletter service provider
We use the newsletter provider Sendinblue to send our newsletters. Sendinblue is a service of Sendinblue, GmbH, with registered offices at Köpenicker Straße 126 in 10179 Berlin, Germany. As our service provider, Sendinblue processes your personal data on our behalf and according to our instructions within the European Union (EU).
Customers, business partners and their employees
If you are our customer or business partner or an employee of our customers or business partners, we process your data in order to establish and execute contractual relationships with you or with your company, as well as to fulfil legal requirements. As a customer or business partner or as an employee of our customers or business partners, you are required by law and by contract to provide us with the relevant data. Without the corresponding information, a customer or business relationship with us can neither be established nor carried out.
We process your data for the establishment and implementation of business relationships. We do not anticipate any change of the aforementioned purposes.
In the context of contracts with natural persons the legal basis for the processing is the preparation and execution of a contracts. For contracts with legal persons the legal basis is our legitimate interest in being able to communicate with contact persons relevant to the contract.
In the context of tax and commercial law regulations we are legally obliged to process your data. In the event of any examination, enforcement or dismissal of claims the legal basis for data processing is our legitimate interest, which is based on the enforcement of or defence against claims.
Primary recipients of your data for the purpose of processing payments are banks. Insofar as we are obligated or authorized to transmit data, public authorities and offices may be recipients of your data within the scope of their duties. In individual cases, your data may be transferred to collection service providers, lawyers and courts.
All data relevant to contracts and accounting are stored in accordance with the retention periods under tax and commercial law.
Interested parties and communication partners
If you contact us by calling us, sending us an e-mail, fax or letter, or by using the contact form provided on our website, we will process your data (name, e-mail address, message content) in order to process your request. The provision of data is necessary in order to process your request. Without providing data, communication is not possible.
We process your data for the purposes of efficient and effective communication. We do not anticipate any change of the aforementioned purposes.
The legal basis for the processing of your data is our legitimate interest in being able to communicate efficiently and effectively with interested parties and other communication partners. Furthermore, as the operator of this website, we are legally obliged to provide you with an effective means of contact.
Inquiries and communications are erased automatically after a minimum period of six calendar years from the end of the last company financial year they relate to.
Job applicants and employment relationships
If you apply for a job with us or for a position to be placed by us, we process your personal data (so-called application data) in principle only insofar as this is necessary for the decision regarding the establishment of an employment relationship with you. The provision of data is required for applicants. It is not possible to submit an application without providing data.
Only persons authorized to make decisions will have access to your application data. As a rule, these are members of the respective management and team leads.
We ask you to upload your application forms exclusively via e-mail to firstname.lastname@example.org.
The processing of your application data serves the purpose of deciding on the establishment of an employment relationship. A change of this purpose is not intended or planned.
The processing is therefore carried out in the context of pre-contractual measures for an employment relationship sought with the application.
Purge and storage
In the case of advertised positions, your personal application data will be deleted - irrespective of the outcome of your application - after six months have elapsed following a decision on filling the position.
After a possible rejection, you have the option to consent to a storage period exceeding the aforementioned purge period of six months, provided that you are also interested in other positions and thus to be included in our talent pool.
If you give us such consent, we will retain your application data for a period of one additional year, provided that you apply for a position with us. In this case, you may revoke your consent at any time. If you apply for a position to be placed by us, we will retain your documents until you revoke your consent. If you revoke your consent, your application data will be deleted accordingly. The legal basis for processing beyond the usual retention period is your consent.
If you submit an unsolicited application, we will consider this as your consent to be included in our talent pool and will retain your application data for a period of one year if you apply for a position with us, unless you clearly inform us in your application that you do not want this. If you apply to be included in the talent pool as part of the placement process, we will retain your records until you withdraw your consent.
In any case, you can revoke your consent at any time without cause.
Our service providers
We have concluded the EU standard contractual clauses with non-European providers. We would like to point out that these providers thereby agree to comply with the data protection standards of the EU, so that there is an appropriate level of protection for your data under data protection law.
What rights do I have?
You have the right to obtain confirmation as to whether or not personal data is processed by us, which categories of data it is, as well as other information, such as the purpose of the processing, the recipient or categories of recipient to whom the data have been or will be disclosed as well as the period for which the data will be stored, and other information outlined in Article 15 GDPR
You have the right to demand we supply all your personal data or correct any incorrect personal data (Right of access / Right of rectification).
You have the right to request the immediate purge of personal data, or alternatively request a restriction of the processing of your personal data. (Right to purge).
You have the right to receive all personal data with which you provided us in a structured, commonly used and machine-readable format as well as request the data be transmitted to another controller (Right of portability).
You have the right to withdraw your given consent at any time without cause, in perpetuity. When you withdraw your consent, we are no longer allowed to process any personal data to which use you formerly consented, in perpetuity. Please direct all permission withdrawal requests to email@example.com (Right of withdrawal).
In case we process your personal data based on our legitimate interests, you can object to their future use at any time on grounds relating to your particular situation. However, we may not always be able to comply, for example in case legal regulation requires us to process your data (Right to object).
In case your objection concerns direct marketing, you have a general right to object. In that case we will abide by your right to object without you having to make your case concerning special circumstance. Please direct all objections to firstname.lastname@example.org.
In addition, you have the right to enter a formal complaint with the responsible supervisory authority. The supervisory authority for us is the The Bavarian Data Protection Commissioner (BayLfD). However, you can also contact your local regulatory body or that of your employer.
You can contact BayLfD at Wagmüllerstr. 18, 80538 Munich, phone at +49 (0) 89 313 6730 or online at https://www.datenschutz-bayern.de.
Last modified on August 3rd, 2021