Source: https://www.popup-my-brand.de/en/data-protection/
Timestamp: 2019-04-19 04:41:41+00:00

Document:
In general, we collect and use the personal information of our users only if necessary to provide a functional website and to provide our content and services. We typically only collect and use our users' personal information after we have received consent to do so from the user. In some exceptional cases, we may not be able to obtain prior consent due to the circumstances of the situation, but may process your data if permitted by law.
If we obtain consent from a data subject to process personal information, Art. 6 para. 1 lit. a. of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing such personal information. When processing personal information necessary to fulfill an agreement to which the data subject is a contractual party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing procedures necessary to carry out pre-contractual measures.
If personal information must be processed to fulfill a legal obligation of our company, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the vital interests of the data subject or another natural person make it necessary for us to process personal information, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If data processing is required to safeguard a justifiable interest of our company or a third party, and if the interests, basic rights, and basic freedoms of the data subject do not outweigh the above interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Personal information of data subjects is deleted or blocked once the purpose of saving no longer applies. In addition, data may only be saved if specified under European or national legislation in EU ordinances, laws, or other regulations to which the responsible entity is subject. Data will be blocked or deleted when the storage term specified by law expires unless it is necessary to continue saving the data to conclude an agreement or fulfill a contract.
Each time you access our website, our system automatically records data and information from the requesting computer.
Data is also saved in our system's log files. This does not include the user's IP address or other data which could be used to associate the data with a specific user. This data is never saved alongside other personal information belonging to the user.
Art. 6 para. 1 lit. f) GDPR forms the legal basis for temporary data storage.
The system must temporarily store the user's IP address to allow it to deliver the website to the user's computer. It must save the user's IP address for the duration of the session.
We have a justifiable interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR for these purposes.
Data is deleted once it is no longer necessary to achieve the purpose for which it was collected. If data is collected to provide the website, it will no longer be necessary once the specific session is ended.
Data must be collected and saved in log files to provide and operate the website. Therefore, the user has no right to object.
Art. 6 para. 1 lit. f) GDPR forms the legal basis for processing personal information using technically required cookies.
The legal basis for processing personal information using cookies for analytic purposes is Art. 6 para. 1 lit. a GDPR, if we have the user's consent to do so.
This website uses analytic cookies in order to improve the quality and content of our website. Analytic cookies tell us how the website is being used, helping us continuously optimize our services.
We have a justifiable interest in data processing personal information in accordance with Art. 6 para. 1 lit. f GDPR for these purposes.
Cookies are saved on the user's computer and transmitted to our page by the computer. Therefore, as a user you have full control over how cookies are used. You can change the settings in your web browser to deactivate or restrict the transmission of cookies. Cookies saved in the past can be deleted at any time. This can also be done using an automatic process. If cookies are deactivated for our website, it is possible that you may not be able to use all of the functions of our website in full.
When processing the user’s data, we ask for their consent during the transmission process and draw their attention to this data protection policy.
Alternatively, it is also possible to contact us via the e-mail address provided. In this instance, the user’s personal data transmitted via e-mail will be stored.
In this context, data will not be passed on to third parties. The data are used exclusively for the purpose of processing the application.
Once the user’s consent has been obtained, the legal basis for processing their data is point (a) of Article 6(1) GDPR.
The legal basis for processing data received via e-mail is point (f) of Article 6(1) GDPR.
Personal data are processed for the exclusive purpose of processing your application for an advertised vacancy. In the event that contact is established, this also forms the necessary justified interest in processing the data.
In general, we are guided by the legal data retention limits within the application process. The data are deleted as soon as they are no longer needed to achieve the purpose they were recorded for. This primarily relates to application processes that have not been successfully concluded, such as our rejection of your application or your withdrawal from the application process for the advertised vacancy.
In the case of successfully concluded applications, the data will continue to be stored with the commencement of the employment relationship.
When provided with your consent to do so, we will also store your data beyond the legally prescribed necessities and limits in order to establish a talent pool, for example, allowing us to return to your stored data when we have another vacancy so that we can offer you a job.
The user can withdraw their consent to the processing of their personal data at any time, assuming that we are not subject to legal obligations or that the justified interest no longer applies.
Your consent will be obtained to process the data during the transmission process, and you will be referred to this Data Privacy Declaration.
Users may also contact us through the email address provided. If they do so, any personal information transmitted in the e-mail will be saved.
Such data are never transmitted to third parties. Data are only used to handle the conversation.
The legal basis for processing personal information is Art. 6 para. 1 lit. a GDPR, if we have the user's consent.
The legal basis for processing data transmitted when an email is sent is Art. 6 para. 1 lit. f GDPR. If the email contact is sent for the purpose of concluding an agreement, Art. 6 para. 1 lit. b GDPR also serves as the legal basis for processing.
We only process personal information from the input screen to process the user's contact. If a user contacts us via e-mail, this also serves as part of our justifiable interest in processing the data.
Other personal information processed during the transmission process is used to prevent misuse of the contact form and ensure the safety of our information technology systems.
Data are deleted once it is no longer necessary to achieve the purpose for which they were collected. This is the case for the personal information from the contact form input screen and personal information transmitted via email once our conversation with the user is over. The conversation is over when circumstances indicate that the matter in question has been fully clarified.
Additional personal information collected during the transmission process are deleted at the latest after seven days.
Users can revoke their consent to process personal information at any time. If the user contact us via email, they may revoke storage of their personal information at any time. In such cases, we will not be able to continue our conversation with them.
All personal information saved during the course of contacting the user will then be deleted.
You can request a confirmation from the responsible entity of whether we process your personal information.
- all available information on the origin of the data, if it was not collected from the data subject; the use of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR and - at least in such cases - clear information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information on whether your personal information is transmitted to a third party country or an international organization. You can also request in this respect to be informed of relevant guarantees according to Art. 46 GDPR given in conjunction with the transmission.
You have the right to request that the responsible entity correct and/or complete your personal information, if personal information processed on you is incorrect or incomplete. The responsible entity must correct such data promptly.
- if you have objected to processing according to Art. 21 para. 1 GDPR and it is not yet clear whether the responsible entity's justifiable grounds for processing outweigh your own justifications.
If processing of your personal information was restricted, this data may only be processed - apart from saving it - with your consent or to assert, exercise, or defend against legal claims, or to protect the rights of another legal or natural person, in order to safeguard a significant public interest of the Union or its member states.
If the restriction of processing was restricted under the above conditions, you will be informed by the responsible entity before this restriction is lifted.
- Your personal information is no longer required for the purposes for which it was collected or processed in some other manner.
- You revoke your consent on which processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
- You submit an objection to processing according to Art. 21 para. 1 GDPR and there are no justifiable grounds for processing that take priority over your objection, or you submit an objection to processing according to Art. 21 para. 2 GDPR.
- Your personal information was processed unlawfully.
- Your personal data must be deleted to fulfill a legal obligation under EU law or the law of its member states, to which the responsible entity is subject.
- Your personal information was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
If the responsible entity has disclosed your personal information and if it is obligated to delete such personal information according to Art. 17 para. 1 GDPR, it shall take appropriate technical measures in consideration of available technology and implementation costs to inform the entity responsible for data processing that you as the data subject have requested that all links to said personal information or copies or replications of the personal information be deleted.
- to assert, exercise, or defend against legal claims.
If you have asserted your rights to correction, deletion, or restriction of processing against the responsible entity, the responsible entity is obligated to inform all recipients to whom your personal information was disclosed of this correction or deletion of data or restriction of processing, unless this proves to be impossible or unreasonably difficult.
You have the right to be informed by the responsible entity who these recipients were.
- processing is completed using automated processes.
In exercising this right, you furthermore have the right to ensure that your personal information are transmitted directly from one responsible entity to another, if this is technically feasible. The freedoms and rights of other individuals may not be affected.
The right to data portability does not apply to processing of personal information necessary to carry out tasks that are in the public interest or to carry out public authority assigned to the responsible entity.
You have the right to object to the processing of your personal information at any time for reasons related to your specific situation, if such processing is carried out under Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The responsible entity will no longer process your personal information unless they can show mandatory and protected grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend against legal claims.
If your personal information were processed for the purpose of direct advertising, you have the right to object against processing of your personal information for the purpose of such advertisements; this also applies to profiling, if it is connected to such direct advertising.
If you object to processing for the purpose of direct advertising, your personal information will no longer be processed for this purpose.
You may exercise your right to object through an automated process in which technical specifications are used in conjunction with the use of information society services - regardless of directive 2002/58/EG.
You have the right to revoke your declaration of consent under data privacy law at any time. Your revocation of consent does not affect the legality of processing completed up to that point based on your consent.
- is completed with your express consent.
However, these decisions may not be based on special categories of personal information according to Art. 9 para. 1 GDPR if Art. 9 para. 2 lit. a or g applies and if appropriate measures have been taken to safeguard your rights, freedoms, and justifiable interests.
With respect to the cases described in (1) and (3), the responsible entity must take appropriate measures to safeguard your rights, freedoms, and justifiable interests, including at least the right to human intervention by the responsible entity, to present one's own opinion, and to challenge a decision.
Apart from any other legal remedies under administrative or other law, you have the right to submit a complaint with a supervising authority, in particular in the member state in which you live, work, or where the alleged violation took place, if you believe that processing of your personal information violates the GDPR.
The supervising authority to which the complaint was submitted must inform the individual submitting the complaint of the status and results of said complaint, including the option of judicial remedy under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78