• Follow us
Basic Page Teaser Fallback Image

Data privacy

Mandatory Information to be Provided Pursuant to Art. 12 et seq. EU GDPR

  1. Name and contact information of the data controller

Your contact, who is the data controller as defined in the European General Data Protection Regulation (“EU GDPR”) and in other domestic data privacy legislation of the member states or any other data privacy law related provisions is:

GOPA Gesellschaft für Organisation, Planung und Ausbildung mbH

Hindenburgring 18

61348 Bad Homburg

Germany

Tel.: +49 6172 930 0

Email: info [at] gopa.de (info[at]gopa[dot]de)

(hereinafter referred to as “we,” “us” or “our”).

  1. Contact information of the data protection officer

The protection of your personal data is important to us. To underscore this importance, we have commissioned a consulting firm specializing in data protection and security to handle these central matters. Our data protection officer is a member of this highly experienced group of experts.

MAGELLAN Säugling Rechtsanwaltsgesellschaft mbH, Raiffeisenallee 9, 82041 Oberhaching / www.magellan-legal.de

If you have any data protection and data security related questions associated with our company, please contact our data protection officer directly. Email: privacy_gopa_group [at] magellan-legal.de (privacy_gopa_group[at]magellan-legal[dot]de) / Phone: +49 6172 930 0

  1. General data processing information

  1. Scope

    We generally process your personal data only to the extent necessary for the functional provision of our website, our content and our services.

  1. Legal basis

    If we have obtained your consent to the processing of your personal data, the legal basis for such processing is Art. 6 Sect. 1 S. 1 lit. a) EU GDPR.

    If we process your personal data with the aim of meeting contractual mandates or in conjunction with the negotiation of a contractual relationship, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.

    If the processing of personal data is necessary in order for us to meet any legal obligations, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. c) EU GDPR.

    If we process your personal data to protect our or any third party’s legitimate interests, provided your interests or fundamental rights and freedoms do not outweigh the preceding interests, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  1. Retention period

    Your personal data will be deleted as soon as the purpose for its retention no longer applies or, if you have a right to revoke your consent, with declaration of your revocation. It is possible that your data will be stored longer if this has been defined in the respective European or domestic legislation, in Union-law provisions, acts or any other provisions we are subject to. In these cases, your personal data shall, however, be blocked.

  1. External links

    If we provide links to external websites, this Privacy Policy shall not apply to the processing of your personal data by the data controller of the linked website. Hence, we recommend that you review the data privacy policies on external websites you visit. If such a linkage should require a legal basis for the resulting processing of your personal data, it shall be your consent pursuant to Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, which you shall grant by clicking on the respective link.

    As a rule, the clicking on any such links (hyperlinks) will result in the processing of your following personal data:

  • IP address,
  • Screen resolution,
  • Deployed browser,
  • Bandwidth,
  • Language settings.

  1. Data processing on our website

  1. Website functions

  1. Provision of the website and generation of logfiles

  2. Description and scope

    In the context of providing our website, we process your personal data to ensure the error free presentation of our website on your PC or mobile device. Because of that, we have to store some of your personal data for the duration of your session.

    Furthermore, we store your personal data temporarily in logfiles, to guarantee that our website will work properly and the operation of our IT systems is secure. Any other processing of your personal data in logfiles will not occur.

    The following personal data will be processed for the provision of the website and for the creation of logfiles:

  • IP address,
  • Access date,
  • Access time,
  • If applicable, previously visited website,
  • Used browser,
  • Used operating system.

  1. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  2. Purpose

    The purpose of this data processing is to provide the website, ensure its functionality and secure the IT systems used for this purpose.

    The purpose simultaneously establishes our legitimate interest.

  3. Retention period

    Your personal data will be stored in logfiles for the duration of 7 days. Moreover, your personal data will be stored in conjunction with the provision of the website, but only for the duration of the session.

  4. Objection and removal option

    The processing and storage of your personal data in logfiles is absolutely mandatory for the provision of the website, to guarantee its functionality and to guarantee the security of the utilized IT systems. Consequently, you do not have an option to object.

  5. Technically necessary cookies

  6. Description and scope

    When it comes to technically necessary cookies, we process your personal data because many functions and services of our website that facilitate or even enable the use of our website, do not function properly without cookies (“technically necessary cookies”).

    Through these technically necessary cookies, we partially store your personal data for the operation of these functions and services. Any other processing of your personal data will not occur.

    A list of the technically necessary cookies we use, as well as their purpose, retention period and other information is available in our cookie banner.

    The following personal data will be processed in conjunction with the use of technically necessary cookies:

  • IP address,
  • Language settings of your browser,
  • The browser you use,
  • Shopping cart information.

  1. Legal basis

    Legitimate interest, § 25 Sect. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) in combination with Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  2. Purpose

    The purpose of this data processing is the provision of the website functions and services.

    The purpose simultaneously establishes our legitimate interest.

  3. Retention period

    Generally, for the duration of the respective session, unless otherwise specified in the list of the technically necessary cookies we use.

  4. Objection and removal option

    Technically necessary cookies will be stored on your PC or mobile device and will be sent by the former to our website. Hence, you are in complete control over the use of technically necessary cookies.

    You have the option to deactivate or restrict the transmission of cookies by changing your browser settings. Cookies that have already been stored can be deleted by you at any time. This may also be done automatically. If cookies for our website are deactivated, you may no longer be able to fully use the functions of our website.

  5. Cookies that are not technically necessary

    If cookies that are not technically necessary should be used in conjunction with the use of our functions and services on our website, you will find a list of these cookies, their purpose, retention period and other information in our cookie banner.

  6. YouTube Videos

    1. Description and scope

      To display video content, we integrate YouTube videos into our website. As a result, we are in a position to show content we would like to present for your use in an attractive, uniform and device independent manner on our website.  YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

      In conjunction with the integration of YouTube videos, the following personal data will be processed:

  • IP address,
  • The browser you use,
  • Screen resolution.

When you play the video, additional personal data may be processed by YouTube. Related information is available at:

https://policies.google.com/privacy?hl=de#whycollect

  1. Legal basis

    Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR.

    1. Purpose
    2. Retention period
    3. Objection and removal option

    The purpose of processing this data is to integrate video content in an attractive, uniform and device independent manner.

    We will process your personal data only until you complete your visit to our website (expanded data protection mode). We do not have any control over the deletion of your personal data from YouTube. More information is available at:

    https://policies.google.com/privacy?hl=de&gl=de#inforetaining

    You have the option to revoke your consent at any time. You can exercise this revocation option in particular by closing the application and/or by reloading the website.

    We do not have any control over the deletion of your personal data from YouTube. More information can be reviewed at:

    https://policies.google.com/privacy?hl=de

  2. Data processing in conjunction with the job application process

  3. Description and scope

    On our website, we offer you the option to submit an application for any vacant positions directly on our website. During the application, personal data you provide to us in conjunction with your application will be processed.

    The following personal data will be processed in the context of your application:

  • Title;
  • First name;
  • Last name;
  • Email address;
  • Phone number;
  • Available from;
  • Expected salary;
  • Work permit for the EU;
  • Visa required to continue working in the EU;
  • From which employee you were recommended.

  1. Legal basis

    Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, Art. 88 Sect. 1 EU GDPR in combination with § 26 Sect. 2 German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG).

    Establishment of an employment relationship, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.

    When processing special categories of personal data: Consent, Art.  6 Sect. 1 S. 1 lit. a) EU GDPR Art. 9 Sect. 2 lit. a) EU GDPR.

  2. Purpose

    Your personal data is processed for the purpose of conducting the application process with the goal to establish an employment relationship, as well as, fulfilling contractual, legal, where applicable collective agreement, and social security obligations.

  3. Retention period 

    Your personal data will be deleted or blocked as soon as the purpose for the processing of the data no longer applies. Data may be stored beyond this point, if required by European or national legislators in union regulations, laws, or other provisions to which we are subject. Blocking or deletion of data will also occur if a retention period prescribed by these regulations expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract. 

    Therefore we store your data for the following periods:

-            Application documents/data: will be stored for up to 6 months after the decision not to fill the position with the applicant, for the purpose of providing evidence in cases of discrimination, in accordance with §§ 21 Sec. 5, 22 German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

-            Other application documents: will be stored upon dissolution or termination of the employment relationship.

  1. Objection and removal option

    If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. In this case we can no longer consider your application. However, the processing of your personal data is mandatory for the establishment of an employment relationship. Hence you cannot object to such processing of your personal data.

  2. Data processing in conjunction with admission to the expert pool of GOPA Consulting Group

    1. Description and scope

       

      On our website, we offer you the option to assign to the pool of experts of the GOPA Consulting Group. The expert pool is a joint pool of the companies of the GOPA Consulting Group. You can find the companies of the GOPA Consulting Group at any time under the following link:

      Expert Registration Companies | GOPA

      The companies of the GOPA Consulting Group will review your application documents as part of the registration process to identify suitable positions in their own projects or in projects of project partners. The companies of the GOPA Consulting Group will contact you if suitable positions are identified.

      1. Legal basis
      2. Purpose
      3. Retention period
      4. Objection and removal option

      Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR

      The purpose is to specifically approach suitable experts for employment in projects.

      Your personal data will be deleted or blocked as soon as the purpose for the processing of the data no longer applies. Data may be stored beyond this point, if required by European or national legislators in union regulations, laws, or other provisions to which we are subject. Blocking or deletion of data will also occur if a retention period prescribed by these regulations expires.

      The processing of your personal data is based on your consent, and you have the right to withdraw your consent at any time. In this case we can no longer consider your expert profile in future projects.

  3. Contact us

    1. Contact form and email contact

      1. Description and scope

        The following personal data will be processed along with the contact form and any interactions via email:

  • First name,
  • Last name,
  • Email address,
  • Content of the message.

  1. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

    1. Purpose
      1. Retention period
      2. Objection and removal option

    The data processing purpose is the processing of your inquiry.

    Your personal data will be stored until the respective purpose no longer exists. As a rule, this will happen as soon as your inquiry is processed, unless longer retention periods are in effect.

    You may object to the processing of your personal data in conjunction with the initiation of contacts at any time, which will affect any future transactions. However, in this case, we will not be able to continue to process your inquiry. All personal data that has been stored over the course of the initiation of contact will be deleted in this instance, unless the statutory retention periods are in conflict with the deletion of your data. In this case, your personal data will be blocked until the statutory retention periods have expired.

  2. Marketing

  1. Web analysis by Matomo (formerly PIWIK)

    1. Description and scope

      In conjunction with our web analysis activities, we use the open-source software tool Matomo (previously named PIWIK) to analyze your browsing patterns. If details of our website are accessed, the following data will be archived:

  • Two bytes of the IP address of the accessing system,
  • The accessed website,
  • The website from which you have been redirected to the accessed website (referrer),
  • The sub-pages that are accessed from the accessed website,
  • The duration of your visit to the website,
  • How frequently you access the website.

During these processes, the software runs exclusively on the servers of our website. Any personal user data is only stored there. The data will not be shared with any third parties.

  1. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

    1. Purpose
    2. Retention period
    3. Objection and removal option

    The data processing purpose is the analysis of your browsing patterns. The analysis of the generated data allows us to compile information about the use of the individual components of our website. This ensures that our website and its user-friendliness are continually optimized.

    The data will be deleted as soon as it is no longer needed for our processing purposes. In our case this will happen after 12 months.

    You have the option to object to the processing of your personal data in conjunction with web analysis activities at any time, which will affect all future transactions.

    You may deactivate or restrict the storage of cookies at any time by changing the settings of your Internet browser. Already archived cookies can be deleted at your discretion. This process may also be automated. If cookies for our website are deactivated, you may no longer be able to make full use of all functions of our website.

    To review additional information concerning the processing of your personal data by Matomo, please go to:

    https://matomo.org/docs/privacy/

  2. Social Wall

  1. Description and scope

    We display our Youtube and LinkedIn profile on our website in order to show video content and social media posts. This allows us to display content we want to show you on our website in an engaging, uniform manner, regardless of your end device.

    LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Youtube is a service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

    In relation to the display of our Youtube and LinkedIn profile, the service provider Walls.io GmbH, Schönbrunner Straße 213/215 3rd Floor, 1120 Wien processes the following personal data:

  • IP address

You can find further information on data processing by Walls.io at: https://walls.io/privacy.

Due to the integration of our Youtube and LinkedIn profile, LinkedIn Ireland Unlimited Company and Google Ireland Limited also process the following personal data:

  • IP address
  • Browser used

  • Screen solution

Playing a video may result in further personal data being processed by LinkedIn Ireland Unlimited Company and Google Ireland Limited. You can find further information at: https://policies.google.com/privacy?hl=en&gl=en or https://www.linkedin.com/legal/privacy-policy?.

  1. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

     

    1. Purpose
    2. Retention period
    3. Objection and removal option

     

    The purpose of data processing is to integrate social media posts in an engaging, uniform manner, regardless of your end device.

    We only process your personal data until the end of your visit to our website. We have no influence over the deletion of your personal data by LinkedIn Ireland Unlimited Company, Google Ireland Limited or walls.io. You can find further information at: https://policies.google.com/privacy?hl=en&gl=en, https://www.linkedin.com/legal/privacy-policy? and https://walls.io/privacy.

    If you do not want your personal data to be collected in relation to the display Facebook profile, you can object to the future processing of your personal data in this context at any time.

    We do not have any influence over data processing by Meta Platforms Ireland Limited or Walls.io. You can find further information about this at: 

    https://policies.google.com/privacy?hl=en&gl=en, https://www.linkedin.com/legal/privacy-policy? and https://walls.io/privacy.

  2. Data protection and the law

  3. Exercising of the rights you have as a data subject pursuant to Art. 12 et seq. EU GDPR

  1. Description and scope

    In conjunction with the management of the rights of data subjects, we will process your personal data. To that end, we will process any contact information you have shared in this context only to process and respond to your message and to subsequently document that the processing was in compliance with the applicable laws within the scope of our accountability obligations.

    The following personal data will be processed in conjunction with the management of data subject rights:

  • First name,
  • Last name,
  • Postal address,
  • Email address,
  • Phone number.

  1. Legal basis

    Legal obligation, Art. 6 Sect. 1 S. 1 lit. c) in combination with Art. 12 et seq. EU GDPR.

    Legitimate interest in the subsequent documentation, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

    1. Purpose
    2. Retention period
    3. Objection and removal option

    Managing your data subject rights in compliance with the law.

    Data must be archived for 3 years after the processing of the respective transaction has concluded, § 41 BDSG in combination with § 31 Sect. 2 Nr. 1 OWIG.

    You have the option to object to the processing of your personal data in conjunction with the management of your data subject rights, which will affect all future transactions. However, in this case we will not be able to further manage your data subject rights.

    The documentation of the compliant handling of your rights as the data subject is mandatory. Consequently, you do not have the option to object.

  2. Legal defense and enforcement of the law

    1. Description and scope
    2. Legal basis
    3. Purpose
    4. Retention period
    5. Objection and removal option

    Your personal data will be processed by us if you file legal claims targeting us or if we file claims and enforce rights targeting you.

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

    The data processing purpose is to raise a defense against illegitimate claims and the legal enforcement of claims and rights.

    This also constitutes our legitimate interest.

    Your personal data will be stored until the processing purpose no longer exists. As a rule, this will be the case once the respective ruling becomes legally effective.

    The processing of your personal data within the scope of the legal defense and enforcement of the law is mandatory for us to ensure that we raise a legal defense or can enforce the applicable laws. Hence, you do not have any option to object.

  1. Other Data Processing Activities Outside of Our Website

  1. LinkedIn Page

  2. Description and scope

    We will process your personal data in conjunction with the operation of our LinkedIn Page to reach out to and interact with users and visitors of the social network “LinkedIn”. We will also publish information about our company on this channel.

    In the event that you directly interact with our LinkedIn Page (e.g., by sending us a message) we will process the data you have shared with us only for the recording and the submission of a response to your enquiries.

    Moreover, we can generate statistics on LinkedIn Page visits. This information is compiled by LinkedIn (“Page Insights”) and enables us to approach the marketing of our activities more effectively and in a more targeted manner.

    For LinkedIn Page Insights data, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are jointly responsible for the processing of data. For this purpose, we have executed a contract with LinkedIn Ireland Unlimited Company to define which of the two companies will process which obligations pursuant to the EU GDPR.

    The most significant content of this contract can be reviewed at:

    https://legal.linkedin.com/pages-joint-controller-addendum

    Information on the data LinkedIn uses to conduct usage analyses related to our LinkedIn Page and which information LinkedIn provides for the purpose of data processing linked to the Page Insights function is available here:

    https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de

    For more information on the processing of your personal data by LinkedIn Ireland Unlimited Company, please visit:

    https://de.linkedin.com/legal/privacy-policy

  3. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  4. Purpose

    The data processing purpose is the analysis of our achievements with our LinkedIn Page as well as the organization of our LinkedIn Page with the aim of matching your interests and processing inquiries.

  5. Retention period 

    Information about the retention period of your personal data with LinkedIn Ireland Unlimited Company is available at:

    https://www.linkedin.com/legal/privacy-policy

  6. Objection and removal option

    If you do not want your personal data to be collected in conjunction with the operation of our LinkedIn Page, you have the option to object at any time to the processing of your personal data within the scope of the operation of our LinkedIn Page, which will subsequently apply to all future operations. In this case, we will forward your revocation request to LinkedIn Ireland Unlimited.

    Information concerning the processing of your personal data by LinkedIn can be reviewed at:

    https://de.linkedin.com/legal/privacy-policy

  7. YouTube channel

  8. Description and scope

    We manage a YouTube channel, which is being operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As the operator of YouTube, Google Ireland Limited collects and processes personal data to the extent described in its Data Privacy Policy.

    Information on the processing of your personal data by Google Ireland Limited may be reviewed at:

    https://policies.google.com/privacy?hl=de&gl=de

    If you contact us directly through our YouTube channel (for instance by sending a message or posting a comment), the data shared by you will only be processed for the purpose of recording and responding to your inquiries.

    We can also generate statistics on visits to our YouTube channel. This information is compiled by YouTube through its “Analytics” service and allows us to approach the marketing of our activities more effectively and to render them more targeted.

    The data YouTube uses to generate usage analyses related to our YouTube channel and which information YouTube provides for the processing of data in conjunction with the Analytics tool, may be reviewed here:

    https://support.google.com/youtube/answer/9002587?hl=de

  9. Legal basis

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  10. Purpose

    The data processing purpose is the analysis of your visit patterns when you are on our YouTube channel, as well as the analysis of the success of videos we upload and the processing of inquiries.

  11. Retention period

    Information about the retention period of your personal data by Google Ireland Limited is available at:

    https://policies.google.com/privacy?hl=de&gl=de#inforetaining

  12. Objection and removal option

    If you do not want your personal data to be processed by Google Ireland Limited, you have the option to at any time object to the processing of your personal data in conjunction with the operation of our YouTube channel, which will affect all future endeavors. In this case, we will forward your revocation request to Google Ireland Limited.

  13. Data processing in conjunction with the job application processing

  14. Description and scope

     

    In conjunction with the job application process, the following personal data will be processed:

    • First Name,
      • Last Name,
      • Gender,
      • Place of birth,
      • Date of birth,
      • Nationality,
      • Marital status (voluntary),
      • Photo (voluntary),
      • Address,
      • Email address,
      • Phone number,
      • Curriculum vitae,
      • Professional background,
      • Educational background,
      • Qualifications,
      • Work-related experiences,
      • Skills,
      • Languages,
      • Certificates,
      • References,
      • Salary expectations,
      • Location preferences,
      • Job title,
      • Religious affiliation (voluntary),
      • Information on disabilities (voonultary),
      • Possibly information about ethnic or racial origin (if apparent from your voluntarily submitted documents or pictures).

    Additionally, we process any other data you have provided in your application.

  15. Legal basis

 

  1. Personal data

    Consent, Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, Art. 88 Sect. 1 EU GDPR in combination with § 26 Sect. 2 2 German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG).

    Establishment of an employment relationship, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.

    Fulfillment of a legal obligation, Art. 6 Sec. 1 S. 1 lit. c) EU GDPR.

    Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.

  2. Special categories of personal data

 

Consent, Art.  6 Sect. 1 S. 1 lit. a) EU GDPR in combination with Art. 9 Sect. 2 lit. a) EU GDPR.

Fulfillment of legal obligations and exercise of rights of the employer or employee regarding labor laws, social security laws and social protection laws, Art. 6 Sec. 1 S. 1 lit. c) EU GDPR, Art. 9 Sect. 2 lit. b) EU GDPR, Art. 88 Sect. 1 EU GDPR in combination with§ 26 Sec. 3 BDSG.

Assertion, exercise or defense of legal claims or other court related proceedings, Art. 6 Sec. 1 S. 1 lit. f) EU GDPR, Art. 9 Sect. 2 lit. f) EU GDPR.

Health Care, Occupational Medicine or the assessment of the working capacity of applicants, Art. 6 Sec. 1 S. 1 lit. c) EU GDPR, Art. 9 Sect. 2 lit. h) EU GDPR.

  1. Purpose

     

    Your personal data is processed for the purpose of conducting the application process with the goal to establish an employment relationship, as well as, fulfilling contractual, legal, where applicable collective agreement, and social security obligations.

  2. Retention Period

     

    Your personal data will be deleted or blocked as soon as the purpose for the processing of the data no longer applies. Data may be stored beyond this point, if required by European or national legislators in union regulations, laws, or other provisions to which we are subject. Blocking or deletion of data will also occur if a retention period prescribed by these regulations expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract. 

    Therefore we store your data for the following periods:

  • Application documents/data: will be stored for up to 6 months after the decision not to fill the position with the applicant, for the purpose of providing evidence in cases of discrimination, in accordance with §§ 21 Sec. 5, 22 German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

  • Other application documents: will be stored upon dissolution or termination of the employment relationship.

  1. Objection and removal option

     

    If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. In this case we can no longer consider your application. However, the processing of your personal data is mandatory for the establishment of an employment relationship. Hence you cannot object to such processing of your personal data.

  2. Data processing in connection with our Microsoft Teams project meetings

 

  1. Transcription

  2. Description and scope

    As part of our virtual project meetings via Microsoft Teams, we transcribe the spoken content of our Microsoft Teams meetings.

    In the context of transcription, the following personal data will be processed:

  • First name;
  • Last name;
  • Language;
  • Audio content;
  • Account image;
  • Chat record.

In addition, further personal data may be processed depending on the use of functionalities in Microsoft Teams.

  1. Legal basis

    Legitimate Interest, Art. 6 Sect. 1 S. 1 lit. f) EU-GDPR.

    1. Purpose
    2. Retention period
    3. Objection and removal options

    The purpose of data processing is the execution of our project organization.

    Your personal data will be stored for a period of 60 days.

    The processing of your personal data in the context of transcription is absolutely necessary for our project organization. Consequently, you have no option to object.

  2. Recording

 

  1. Description and scope

    As part of our virtual project meetings via Microsoft Teams, we record the spoken content of our Microsoft Teams meetings.

    In the context of recording, the following personal data will be processed:

  • First name;
  • Last name;
  • Language;
  • Audio content;
  • Video content;
  • Shared content;
  • Account image;
  • Chat record.

In addition, further personal data may be processed depending on the use of functionalities in Microsoft Teams.

  1. Legal basis

    Consent, Art. 6 Sect. 1 S. 1 lit. a ) EU-GDPR

    1. Purpose
    2. Retention period
    3. Objection and removal options

    The purpose of date processing is the execution of our project organization.

    Your personal data will be stored for a period of 60 days.

    You have the option to revoke your consent to the recording at any time. In this case, your personal data will be deleted unless statutory retention periods prevent deletion.

  2. Management of project plans and creation of meeting minutes

  1. Description and scope

    We process your personal data of the transcription or recording as part of the management of project plans and the creation of project-related meeting minutes.

    1. Legal basis
    2. Purpose
    3. Retention period
    4. Objection and removal options

     

    Legitimate Interest, Art. 6 Sect. 1 S. 1 lit. f) EU-GDPR.

     

    The purpose of data processing is the creation of project-related meeting minutes. These serve us, our project partners and customers for the further organization of the project and the tracking of project progress and project agreements.

    Your personal data will be stored until the respective project has been completed.

    The processing of your personal data in the context of management of project plans and creation of meeting minutes is absolutely necessary for our project organization. Consequently, you have no option to object

    1. Categories of Recipients

Within our company, we will share your personal data with those positions and departments that need them for all the above-mentioned purposes. Additionally, we utilize the services of different providers and therefore transfer your personal data to these trustworthy recipients. These may, for instance, include the following:

  • Works council,
  • Data protection officer,
  • Representative for severely disabled wmployees,
  • Equal opportunities officer,
  • Employment agency,
  • Integration office in the case of a severe disability,
  • Printing companies,
  • Lettershops,
  • Scanning services,
  • Banking institutions,
  • IT service providers,
  • Cooperation partners,
  • Lawyers, tax advisors, and courts.

  1. Transfer to Non-EU and Non-EEA Countries

In conjunction with the processing of your personal data, it is possible that we share your personal data with trustworthy service providers in non-EU and non-EEA countries. These countries are nations that are not within the European Union (EU) or the European Economic Area (EEA).

In this context, we only work with such service providers who provide us with appropriate guarantees for the protection of your personal data and can assure that your personal data will be processed in accordance with the strict European Data Protection Standards. A copy of these appropriate guarantees may be reviewed at our business premises.

If we share any personal data with recipients in non-EU and non-EEA countries, this is done on the basis of a so-called adequacy decision of the European Commission, or, if such a decision is not available, on the basis of so-called standard contractual clauses, also issued by the European Commission.

  1. Your Rights

You are entitled to the following rights you may exercise in your relationship with us:

  1. Right of access

You have the right to receive information as to whether and which personal data of yours we process. In this case, we will provide additional information on:

  1. The processing purpose,
  2. The categories of data,
  3. The recipients of your personal data,
  4. The envisaged retention period or the criteria to determine the envisaged retention period,
  5. Your additional rights,
  6. In the event that you have not shared your personal data with us: All available information as to its origins,
  7. If available: The existence of any automated decision making as well as information on the logic used, the expanse and the desired effects of the processing.

  1. Right to rectification

You are entitled to have your data corrected and/or completed if the personal data processed by us is incorrect or incomplete.

  1. Right to restriction of processing

You are entitled to the restriction of the processing of your data if:

  1. We are reviewing the correctness of your personal data processed by us,
  2. The processing of your personal data is illegal,
  3. You need the personal data processed by us to pursue your rights after the purpose of processing the data has ended,
  4. You have filed an objection against the processing of your personal data and we are in the process of reviewing your objection.

  1. Right to erasure

You are entitled to having your data deleted if:

  1. We no longer need your personal data for the original purpose,
  2. You revoke your consent and if there is no further legal basis for the processing of your personal data,
  3. You have objected to the processing of your personal data and – if the matter in question is not direct marketing – there are no priority grounds for continued processing of the data,
  4. The processing of your personal data is illegal,
  5. The deletion of your personal data is mandated by law,
  6. Your personal data refers to minors for information society purposes.

  1. Right to notify

If you have exercised your right to have data corrected, deleted or restricted in terms of processing, we will notify all recipients of your personal data, to correct, delete or restrict the processing of such data.

  1. Right to data portability

You have the right to receive any personal data you have provided to us based on consent or to perform a contract in a structured, commonly used and machine-readable format and to have same transferred to another data controller. If this is technically feasible, you have the right to instruct us to send this data directly to another data controller.

  1. Right to object

In the event that special grounds apply, you have the right to object to the processing of your personal data. In this case, we will no longer process your personal data, unless we are in a position to raise mandatory protection worthy grounds for continued processing.

If your personal data is being processed for the purpose of direct marketing you do, at any time, have the option to object.

  1. Right to revoke consent

    You have the right to revoke any consent you have given us at any time. The revocation of consent does not affect the legitimacy of any prior processing on the basis of consent.

  2. Right to file a complaint with a supervisory authority

    Any other administrative or court enforced legal remedies notwithstanding, you shall have the right to file a complaint with the competent supervisory authority, if you are of the opinion that the processing of your personal data by us is in violation of the EU GDPR.

    The competent supervisory authority for our company is:

    Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

    Gustav-Stresemann-Ring 1

    65189 Wiesbaden

     

    Tel.: 0611-1408 0

    E-Mail: poststelle [at] datenschutz.hessen.de (poststelle[at]datenschutz[dot]hessen[dot]de)