Source: https://crm.arvato.com/en/about/privacy-policy.html
Timestamp: 2019-04-24 16:21:33+00:00

Document:
04. What personal data is collected and for what purpose?
is responsible for the processing of your data on the website. The website has sub-pages which are maintained by the subsidiaries*.
You can contact the Arvato CRM Solutions data protection officer at the above-mentioned postal address with the addition "To the data protection officer" or by using the e-mail address compliance-management-crm@bertelsmann.de.
Arvato CRM Solutions GmbH and the above-mentioned subsidiaries (hereinafter "we" or "us") process personal data in accordance with the provisions of the GDPR and the Federal Data Protection Act (hereinafter "BDSG").
In connection with your visit to the website and solely for technical, contractual or legal reasons, your data will be collected in order to be able to display the desired content and to enable you to use the offers.
If you browse our websites by your PC certain information are collected simply for technical reasons of data flows (technical data). These technical data contain details about the content requested by you on the website and your usage behavior as well as information about the browser type and browser version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and newly accessed websites via the website and the IP address of the computer (also called "server log files"). Pseudonymous user profiles are created and evaluated from the access data with the help of web tracking. In principle, it is not possible for us to draw any conclusions about you personally.
In general, you can use the website without providing your data, for example to inform yourself about us. However, when using certain services, it is necessary to provide your data, for example to contact us or to order a technical article (also known as a "white paper"). Mandatory fields are regularly marked with *.
Cookies are used on our website. Cookies are small text files that are saved to your computer when visiting a website. The cookies that are saved can be attributed to the web browser used by you. When the website is visited again, the web browser returns the content of the cookies, thus enabling you, the user, to be recognized. Cookies are limited to a certain runtime (e.g. expiration of the browser session). You can also configure and delete cookies according to your preferences via your browser settings. However, premature deletion may result in limited availability of the offers on the website.
The website distinguishes between two types of cookies: functional cookies and optional cookies. Functional cookies are used to provide the website in a technically and functionally flawless manner (e.g. identification and authentication of the user, language settings, display of image recordings). Without the function-related cookies, the offerings of the website are only available to a limited extent. The optional cookies help to optimize the offers on the web-site by recording user behavior and evaluating it in statistical form.
As a general principle, cookies enable online recognition without reference to a specific per-son. Cookies can be related to individuals if the information generated by the cookies is com-bined with other data such as access data (e.g. when using web tracking). Such a combination only takes place in pseudonymised form, i.e. your data do not allow any direct conclusions to your person or on the basis of your consent.
What personal data is collected and for what purpose?
For communication, promotional speech completion of precontractual procedures, and customer care purposes and establishing an employment relationship.
In order to enable the proper functioning of our websites, security analyses to be conducted, and denial-of-service attacks to be prevented and stopped, server log files are automatically collected and saved on a short-term basis as an integral part of access data that is created by the system of the visiting computer upon accessing our website and while using it (see section 2). The content of the server log files is not merged with other data. We use the server log files for statistical analyses to troubleshoot and remedy technical issues, prevent and defend against denial-of-service attacks and attempted fraud, and to optimize the proper functioning of our website.
When the pages of our website are accessed, information is logged to server log files that are stored on our web server; the IP address contained in them is deleted after 7 days at the latest. This does not apply if there is a concrete suspicion of an offence and storage beyond this is required by law for the purpose of evaluation and clarification.
On the website you have the possibility to contact us via a contact form, an e-mail address or a telephone number. If you use this option, provide us with data such as your e-mail address, telephone number, first and last name and your request (hereinafter referred to as "contact data"). The contact data will only be stored and used to process your request (e.g. questions about Arvato CRM Solutions' products and services).
The legal basis for processing your contact details follows from Art. 6(1)(f) GDPR. We have legitimate interests in processing your request and in continued communication. If the purpose for your establishing contact with us is to enter into a contract with our company or to use one of our services, the legal basis for processing your contact details follows from Art. 6(1)(b) GDPR.
The website offers free studies, reports and whitepapers. Reports and whitepapers on current topics from our business segment can be downloaded free of charge. Only the provision of your e-mail address is required for the download. If, on the other hand, you wish to be contacted in a company-related and/or personal manner, you can also provide information about yourself and/or your company. When we collect your information with your consent to the use of your information to download our studies, reports and whitepapers, we use your email address for authentication by providing you with a confirmation link. This so-called double opt-in procedure serves to protect against unauthorized data transfer and only when you use the confirmation link we save your data and you can download it free of charge. Data will not be processed for other purposes.
The free download of studies, reports and whitepapers on current topics from our business segment serves to present our corporate activities and provide scientific research results. legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR.
Your information is stored for two years in principle. If you revoke your consent, your data will also be deleted during this period. Your consent, however, will be stored 3 years after deletion and/or revocation to be able to prove that we have complied with our legal obligations - to let you consent to data processing.
You can revoke your consent to receiving press releases at any time by writing to Arvato CRM Solutions GmbH (An der Autobahn 500, 33333 Gütersloh, Telefon: +49 5241 80-43600, E-Mail: crm@arvato.de) “.
As part of our business customer relationships, we occasionally conduct customer surveys to measure satisfaction and improve our services. The customer survey is aimed at our business customers, but we regularly store your contact data in our customer database. We use your contact details to invite you to participate in the customer survey. Participation is voluntary and you have the possibility to communicate to us at any time that you no longer wish to receive an invitation to participate in customer surveys. Your contact data is no longer regularly required for the evaluation, so that the survey results consist of purely statistical information. It is then no longer possible to draw any conclusions about your person.
The legal basis for processing your contact data is art. 6 sec. 1 lit. f GDPR. The legitimate interests lie in customer care and customer loyalty as well as the improvement of our services.
In principle, the survey results are stored for the duration of the business relationship. This does not apply if the survey results consist of purely statistical data.
You have the right to object to the processing of your contact data if there are reasons for this arising from your particular situation. If you would like to exercise your right of objection, please contact us at the address given under point 1.
Job advertisements are published on the website. Via the job advertisement you will be forwarded to our applicant portal, which collects and processes your data for recruitment purposes. Further information about data processing for recruitment purposes can be obtained by registering in the applicant portal. In addition to applying via the applicant portal, you can also submit a short application on the website. With the short application you can draw attention to yourself as a suitable talent without referring to a specific job posting. To assess your talent and contact you for suitable vacancies, you must provide your first and last name, e-mail address and telephone number as well as a small cover letter in the online application form provided for the short application. By providing your data and consenting to data processing, your e-mail address will be used for your authentication by providing you with a confirmation link. This so-called double opt-in procedure serves to protect against unauthorized data transfer and your short application will only be processed when you use the confirmation link. The short application is voluntary and can be revoked at any time with effect for the future.
Your application data will be processed in order to assess your talent and to be able to contact you in suitable vacant positions. The legal basis is Art. 6 sec. 1 lit. a GDPR, by submitting your short application you give your consent to the data processing.
After your consent has been given, your short application will be stored for 1 year, unless you withdraw your consent prematurely. This shall not apply if statutory retention obligations oblige us to a longer storage period. Your consent, on the other hand, will be stored 3 years after deletion and/or revocation in order to be able to prove that we have complied with our legal obligations - to let you consent to data processing.
You can obtain your consent any time without any formality by contacting Arvato CRM Solutions GmbH (Motorway 500, 33333 Gütersloh, Phone: +49 5241 80-43600, E-Mail: crm@arvato.de). The same applies to the individual companies in the Arvato CRM group. The corresponding address can be found in Section 4.5.1 or in the consent.
The website includes services that optimize user-friendliness and measure the reach of the website. Your access data (see paragraph 2) is recorded and the usage behaviour is evaluated with the help of cookies (see paragraph 3). Personal identification is generally not required for web tracking, so that when your access data is recorded, the stored IP address is either not used or only used in abridged form (shortened by the last octet) and pseudonymous user profiles are created. This data will not be merged with other data and you have the possibility of revocation at any time. Personal user profiles are only created in exceptional cases and if you have given your consent.
The web tracking services are regularly provided by service providers who process the pseudonymous user profiles only according to instructions and not for their own purposes. This is ensured by means of contracts for order processing. If the service providers are established outside the European Union or the European Economic Area (hereinafter referred to as "EU or EEA"), a so-called third country transfer takes place. This is permissible if you have given your consent, if we have created guarantees for a level of data protection that meets European standards or if the EU Commission has classified the respective third country as a safe third country. The third country transfer of the respective service is identified below. Further information on the recipients of your data can be found in paragraph 5.
The individual web tracking services of the website are described in more detail below.
You have the option of registering for webinars. Registering requires that you provide your first and last name and your email address. If you would like to be addressed as a company you can also optionally provide details on your company and your position there. After you have entered your details and given your consent to data processing, we use this information to send you confirmation of registration including a link enabling you to take part in the webinar. No other data processing takes place.
Your participation in our webinars on current topics relating to our business segment enables us to inform you of current developments in our company or provide the results of scientific research. All webinars are free of charge. The legal basis for data processing follows from your consent pursuant to Art. 6 (1) point a General Data Protection Regulation (GDPR).
As a general principle, the information provided by you is stored for two years. If, however, you revoke your consent before this two-year period lapses, your information will be deleted. After the information provided by you is deleted, your consent is stored for another three years so that we are able to comply with our statutory obligation of documenting proof that you gave your consent to the processing of your data. If you should revoke your consent, this is treated like your initial provision of consent in that it is stored for a period of three years upon the deletion of your information.
You can revoke your consent at any time. This can be done by way of a simple notice to this effect, without having to state any reasons. Any revocation only has effect for the future, meaning it does not affect the admissibility of data processing during the time prior to you revoking your consent. In the event you would like to revoke your consent, please write to Arvato CRM Solutions GmbH (An der Autobahn 500, 33333 Gütersloh, Germany, phone: +49 5241 80-43600, email: crm@arvato.de).
Within our company those who need access to your information for the purposes described in section 4 will be given access to it. Service providers contracted by us may also be given ac-cess to your information (“contract data processors”, e.g. data centers, mailing services for newsletters, web tracking). They are bound by our directives and must provide for data securi-ty and the confidential treatment of your information under the contract data processing agreements we have concluded with them.
If the service providers and/or third parties mentioned under point 5 are located outside the EU or the EEA, this may result in your data being transferred to a country where an appropri-ate level of data protection cannot be guaranteed for the EU or the EEA. However, such a level of data protection can be ensured with an appropriate guarantee. Suitable guarantees include standard contractual clauses provided by the EU Commission. You can request a copy of these warranties on request under the contact details mentioned in section 1. Any guaran-tees may exceptionally be waived if you give your consent or the transfer to a third country is necessary for the fulfilment of our contractual relationship. The EU Commission has also rec-ognised certain third countries as safe third countries, so that here too the company can refrain from providing suitable guarantees.
Through the use of Google Analytics, a third country transfer takes place. However, with cer-tification according to the EU-US Privacy Shield, Google ensures that the European data pro-tection level is guaranteed for the transfer to third countries.
If you have given your consent to the processing of your personal information for specific purposes, you can revoke that consent at any time for the future.
Pursuant to Art. 21 GDPR, you also have the right for reasons relating to your specific situa-tion to raise an objection to the processing of your data that is done on the basis of Art. 6(1)(f) GDPR.
You also have the right to lodge an objection to the processing of your personal infor-mation for direct marketing purposes. The same applies to automated processes involving the use of individual cookies, unless they are required for providing the functionality of our website.

References: Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6