Source: https://psa-academy.org/data-protection-decleration
Timestamp: 2020-08-03 20:49:31
Document Index: 520015579

Matched Legal Cases: ['Art. 6', 'Art 6', 'Art 6', 'Art 6', 'Art 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art.15', '§ 34', '§ 35', 'Art. 22', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 78', '§ 26', 'Art. 13', 'Art. 13']

﻿ PSA Academy
PROTECTIVE AND SECURITY
Enroll today: info@psa-academy.org
We are committed to compliance with the General Data Protection Regulation - GDPR as well as the nationally valid data protection laws. For us the topic of data protection has an extremely high priority throughout our company and we work together exclusively with partners who can demonstrate an equally stringent data protection level in their processing procedures. We process your data only if you have given us your express permission to do so and it is necessary for the purposes of processing a contract or it relates to pre-contractual measures on a service-provision basis, or insofar as the relevant laws permit and/or require this respectively. The following data protection information contains both the current national legal framework that applies, as well as the provisions of the EU General Data Protection Regulation (GDPR) that came into force Europe wide on 25 May 2018. Reference to the legal principles of the GDPR are relevant from 25 May 2018. Under no circumstances will we sell your data or pass it on to unauthorised third parties. In the following we should like to inform you in detail about how we handle your data in our business units.
You can print or save this document by using the standard functionality of your browser. In the following Data Protection Declaration, you will find out which data we record on our website and how we process and use the different data.
PSA International Group™
Email: info@psa-association.com
Internet: www.psa-association.com
and PSA Academy International
Email: info@psa-academy.org
Internet: www.psa-academy.org
Person responsible for web content:
Dr. Norbert Csikany Ph.D.
president@psa-academy.org
The data protection officer for the person responsible is:
Email: it_support@psa-academy.org
Head of Data Processing:
Fundamentally we collect and use the personal data of our users only insofar as this is required for the provision of a fully functional website and for our contents and services. The collection and use of the personal data of our users is carried out on a regular basis but only following the consent of the user. An exception applies in cases where prior consent cannot be obtained for specific reasons and the processing of the data is permitted by statutory provisions.
Insofar as we obtain the consent of the person affected for the processing of personal data, Art. 6 para. 1a of the EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of said personal data.
In the case of the processing of the personal data that is required for the fulfilment of a contract, the contracting party of which is the affected person, Art 6 para. 1b GDPR serves as the legal basis. This also applies for processing procedures that are required for the execution of pre-contractual measures.
Insofar as the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art 6 para. 1c GDPR serves as the legal basis.
In the event that the vital interests of the affected person or another natural person make the processing of the personal data necessary, Art 6 para. 1d GDPR serves as the legal basis.
If processing is required in order to maintain a justified interest of our company or a third party and if the interests, basic rights and basic freedoms of the affected person do not take precedence over the aforementioned interest, Art 6 para. 1f GDPR serves as the legal basis for the processing.
The personal data of the person affected is deleted or blocked as soon as the reason for the data to be stored is no longer valid. However, they can continue to be stored if this is provided for in the European or national legislature, or in specific rules, directives or other provisions of European Union law to which the responsible person is subject. The blocking or deletion of the data is also carried out if the storage date prescribed by the aforementioned norms expires, unless there is a requirement for the data to continue to be stored for the conclusion or the performance of a contract.
Every time our internet site is accessed, our system automatically records data and information from the computer system of the calling PC.
The following data is collected in this case:
Hashed mobile code numbers for the device
Hashed cross device identifier
Language settings in the user’s browser
User’s customer journey within our website
Abbreviated IP addresses
Websites that are called up by the user’s system via our internet site
The data is also stored in the log files of our system. This data is not stored together with the other personal data of the user.
The legal basis for the temporary storage of the data and log files is Art. 6 para. 1f of GDPR.
The temporary storage of the IP address by the system is required in order to enable a delivery from the website to the user’s computer. Therefore, the user’s IP address must remain stored for the whole duration of the visit.
Storage in log files is carried out in order to guarantee the functionality of the website. In addition, the data helps us to optimise the website and to guarantee the security of our information technology systems. No evaluation of the data for marketing purposes is carried out in connection with this.
For these purposes our justified interests in data processing are in accordance with Art. 6 para. 1f GDPR.
The data is deleted as soon as it is no longer required for the purposes for which it was collected. In the case of collecting the data in order to make the website accessible to the visitor, they are deleted once the visit has ended.
In the case of storing the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case the user’s IP addresses are either deleted or anonymised, so that it is no longer possible to allocate them to the visiting client.
5. Opportunity to contest data or have it eliminated
The collection of data in order to make the website available and the storage of said data in log files is required for the proper functioning of the website. Therefore, the user does not have a right to contest the data in this case.
Our website uses cookies. Cookies are text files that are filed in the internet browser and/or by the internet browser respectively of the user’s computer system. If a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a unique character string that facilitates the clear identification of the browser if the website is visited again.
We use cookies in order to make our websites more user friendly. Some elements of our website require that the calling browser can be identified even after changing websites.
Articles in the shopping basket
Log-in information (nights clients)
In addition, we use cookies on our website that facilitate the analysis of the surfing behaviour of the user.
This means that the following data can be transmitted:
Call-up frequency for websites
Internal URLs visited
Shopping basket (booking date, services booked, amount of shopping basket, currency)
The user data collected in this way are pseudonymised by means of technical precautions. This means that the data can no longer be allocated to the user accessing the site. The data is not stored together with the user’s other personal data.
Our websites use cookie technology to collect data to optimise our advertising and online content. This data is not used to identify you personally but serve purely as an aid in the evaluation of the use of our homepage on a pseudonymised basis. Your data is never amalgamated with your personal data that we have stored. Using this technology, we can present you with advertising and/or special offers and services, the contents of which are based on the information that has been obtained via clickstream analysis (e.g. advertising that is based on the fact that sports shoes have been viewed exclusively in the last few days). Our aim in this is to structure our online offering in the most attractive way possible and to present you with advertising that corresponds to your areas of interest.
We use various advertising partners who help us to make our websites and internet offers even more interesting for you. Therefore, the cookies of partner companies are also stored on your hard drive when you visit our websites. These are temporary/permanent cookies that are deleted automatically after a defined period of time. These temporary and permanent cookies (life cycle 14 days up to 10 years) are stored on your hard drive and are deleted automatically after a defined period of time. Also the cookies for our partner companies only have pseudonyms and most even have anonymised data. For example, this could be data about which products you have viewed, whether you bought anything, which products you searched for, etc. Some of our advertising partners also use the websites to collect data on which pages you visited prior to visiting them or which products you were interested in, so that they can then show you the advertising that you are most likely to be interested in. These pseudonymised data is never amalgamated with your personal data. The sole purpose of such data is to enable our partners to present you with advertisements that will really be of interest to you.
In this our websites use so-called re-targeting technologies. We use these technologies in order to make the internet offers more interesting for you. This technology makes it possible for us to address internet users who have already shown an interest in us and our products on the internet sites of our partners. We are convinced that the insertion of personalised, internet-related advertising is generally more interesting for the internet user than advertising that does not have any such personal connection. The insertion of such advertising on our partner pages is carried out on the basis of cookie technology and an analysis of the previous user behaviour. This form of advertising is completely anonymised. No user profiles are amalgamated with your personal data. By using our pages, you agree that so-called cookies can be placed and that your particular usage data can be collected, stored and used. In addition, your data is stored in cookies after the end of the browser session so that they can be called up once again when you re-visit the websites, for example. You can revoke your consent at any time with immediate effect, by setting your browser preferences so that the acceptance of cookies is refused.
3. How can you prevent cookies from being stored?
Depending on the browser you use, you can set the settings in such a way that the storing of cookies is accepted only if you have agreed to this. If you want to accept exclusively our cookies, but not those of our service providers and partners, you can select the setting "Block cookies from third parties" in your browser. As a rule, using the Help function in the menu bar in your web browser you can see how to refuse new cookies and to switch off those you have already received. You can find detailed information on how you can customise the settings in your browser via the following link. If you are using shared computers that are set to accept cookies and flash cookies, we recommend that you should always make sure that you have completely logged out after you have finished your session.
The legal basis for the processing of personal data with the use of cookies is Art. 6 para. 1f GDPR.
The purpose of technically required cookies is to simplify the use of the website for the user. Some of the functions of our internet site could not be offered without the use of cookies. For these it is necessary that the browser is identified even after changing website.
Bookmarking of search terms
Bookmarking of websites visited
The user data collected by the technically required cookies are not used to create user profiles.
The reason for the use of the analysis cookies is in order to improve the quality of our websites and their contents. By using the analysis cookies, we can see how the website is being used and so we are able to continually optimise our offers.
For these purposes our justified interests in the processing of personal data are in accordance with Art. 6 para. 1f GDPR.
6. Duration of storage, option to contest and remove information
Cookies are stored on the user’s computer and transmitted to our website from here. Therefore, as a user you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be carried out automatically. If the cookies for our website are deactivated, it is possible that some of the functions of the website may no longer be fully available.
The transmission of flash cookies cannot be prevented using the browser settings but by changing the settings for Flash Player.
You have the option of subscribing to our newsletter free of charge on our website. When registering for the newsletter the data from the input screen is passed on to us.
Moreover, you have the option of supplying the following information on a voluntary basis:
Your consent for the processing of your data is obtained during the registration process and reference is made to this Data Protection Declaration.
If you order goods or services on our internet site and provide your email address, we can subsequently use this for the dispatch of the newsletter. In such a case, exclusively direct advertising for our own similar goods or services will be sent via the newsletter. In addition, email addresses that have been collected can be used for advertising purposes in online marketing and social media.
No data is passed on to third parties in connection with the data processing for the dispatch of the newsletter. The data is used exclusively for the dispatch of the newsletter and for advertising purposes in online marketing and social media.
The legal basis for the processing of the data following registration for the newsletter by the user, and following receipt of the user’s consent, is Art. 6 para. 1a GDPR. The legal basis for the dispatch of the newsletter following the purchase of goods or services is § 7 para. 3 UWG (Unfair Competition Act.)
The recording of the user’s email address is so that the newsletter can be sent. The collection of other personal data within the framework of the registration process is to prevent any misuse of the services or of the email address used.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. The email address of the user is stored for as long as the subscription to the newsletter remains active. The other personal data collected as part of the registration procedure is generally deleted after a period of seven days.
The subscription to the newsletter can be cancelled by the affected user at any time. There is a corresponding link for this in the newsletter. This also offers the opportunity to revoke consent for the storage of the personal data that was collected during the registration procedure.
On our website we offer users the opportunity to register by providing their personal data. The data is entered in an input screen and transmitted to us and then stored. The data is not passed on to third parties.
The following data is collected within the framework of the registration process:
As part of the registration process the user’s consent to the processing of this data is obtained.
The legal basis for the processing of the data following receipt of the user’s consent, is Art. 6 para. 1a GDPR. If the registration is for the purposes of the fulfilment of a contract, of which the contractual party is the user, or for the purposes of carrying out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1b GDPR.
The registration of the user is required for the provision of certain contents and services on our website. These contents and services are linked to registration for the Nights programme. Therefore, the identification of the user is required for these contents and services to be provided.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data that is collected during the registration procedure, if the registration is cancelled or changed on our website.
As a user you have the option of cancelling your registration at any time. You can have your personal data changed at any time.
Once registration has been carried out on our website, the user profile can be amended immediately. You can delete your profile by emailing info@psa-academy.org
A contact form is available on our internet site which can be used to contact us electronically. If a user wishes to take advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:
Date and time contact was made
Your consent for the processing of your data is obtained during the send process and reference is made to this Data Protection Declaration.
Alternatively, it is possible to make contact using the email address provided. In this case the personal details of the user that are transmitted in the email are stored.
This data is not passed on to third parties in this connection. The data is used exclusively for processing the conversation.
The legal basis for the processing of the data following receipt of the user’s consent, is Art. 6 para. 1a GDPR.
The legal basis for the processing of the data that is transmitted by email, is Art. 6 para. 1f GDPR. If the email contact should result in the conclusion of a contract, the additional legal basis for the processing of the data is Art. 6 para. 1b GDPR.
The processing of personal data from the input screen is used by us exclusively for the purpose of processing the contact. In the case of contact by email, this also includes the necessary justified interest in the processing of the data.
The other personal data processed during the send process are used to prevent any misuse of the contact form and to guarantee the security of our IT systems.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. With regard to personal data from the input screen for the contact form and that sent by email, this is the case once the relevant conversation with the user has ended. This conversation is ended, once it is clear from the circumstances that the relevant matter has been definitively clarified.
The additional personal data that is collected during the send process is deleted after a period of seven days at the latest.
The user has the option of revoking their consent to the processing of personal data at any time. If the user gets in touch with us by email, they can contest the storage of personal data at any time. In such a case it is impossible for the conversation to be continued. It is possible to have a profile deleted by emailing info@psa-academy.org. All the personal data that was stored during the contact process is deleted in this case. In addition, any enquiries over an interval of one month are completely deleted from our system.
X. Forwarding of your data to third parties
In order to make our website as user-friendly and easy to use as possible, we also include individual services from external service providers. As a result, you have the option of viewing their data protection provisions on the application and use of the services and functions they provide, so that you can also exercise your rights here as well, if necessary.
Google Analytics is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", i.e. text files that are stored on your computer and enable Google to carry out an analysis of the use of our offer. The information provided by the cookies on the use of our websites (including your IP address) are generally transmitted to a Google server in the USA, where they are stored. We should like to point out that Google Analytics has the additional code “gat._anonymizeIp();;” on our websites, so that the IP addresses can be recorded in an anonymised form (so-called IP masking). Therefore, with our permission, your IP address is recorded only in an abbreviated form, which guarantees that it is anonymised and that it is impossible to trace it back to you. In the case of the activation of IP anonymisation on our websites, your IP address is abbreviated in advance by Google within the member states of the European Union or within the other contracting parties to the Agreement across the European Economic Area. Only in exceptional cases is your full IP address transmitted to a Google server in the USA, where it is then abbreviated. Google uses the aforementioned information to evaluate your use of our websites, to compile reports for us on the website activities and to provide us with further services linked to the use of websites and the internet. The IP address transmitted by your browser to Google Analytics is not amalgamated with other data held by Google. The forwarding of this data by Google to third parties is carried out only within the framework of statutory provisions or the processing of contractual data. Google will never amalgamate your data with other data held by Google. By using these websites, you declare that you agree to the processing of your personal data by Google and to the aforementioned type and manner of data processing as well as the purpose thereof already mentioned. You can prevent the storage of cookies by changing the settings in your browser software; however, we should like to point out that this may result in certain functionalities of our websites not being fully operational for you. You can also prevent the recording and processing of the data regarding your use of these websites collected by the cookie (incl. your IP address) by Google, by downloading and installing the browser plugin that is available at the following link.
You will find further information on Google Analytics and data protection at http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses the online advertising programme “Google AdWords”, which also includes conversion tracking. The cookie for conversion tracking is placed when a user clicks on an advertisement placed by Google. These cookies remain valid for 30 days only and are not used for personal identification. If the user visits specific pages of the website and the cookie has not yet expired, we and Google are able to see that the user has clicked on the advertisement and was directed to this webpage. Every Google AdWords client is given a different cookie. This means that cookies cannot be tracked via the websites of AdWords clients. The information obtained with the help of conversion cookies helps us to compile conversion statistics for AdWords clients who have opted for conversion tracking. These clients are given the total number of users who have clicked on their advertisement and were directed to a page that contains a conversion tracking tag. However, they do not receive any information that could help them to identify the individual users personally. Users who do not want to participate in tracking can easily deactivate the cookie for Google conversion tracking via the user settings in their internet browser. These users are then not recorded in the conversion tracking statistics.
Find out more about Google’s Data Protection Provisions.
Our websites use Google Maps to display area maps and to create routes for journeys. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you agree to the recording, processing and use of the data automatically collected by Google, or by one of its representatives or third-party suppliers, or the data supplied by you to Google, or one of its representatives or third-party suppliers. You will find the conditions of use for Google Maps at Google Maps Conditions of use. You will find further details at the data protection centre for google.de: Transparency and options as well as data protection provisions.
4. Maxer
The provider of this website uses the services of Maxer Hosting Ltd. (https://maxer.hu/) for the analysis of its user data. Cookies are set for this that enable the statistical analysis of the use of this website by its users as well as the display of user-related contents or advertising. Cookies are small text files that are saved in the internet browser of the user’s end device. etracker cookies do not contain any information that would make the identification of the user possible.
The data collected with Maxer is processed and saved by Maxer exclusively in Hungary on behalf of the provider of this website and is therefore subject to the stringent European data protection laws and standards.
The data processing is carried out on the legal basis of Art. 6 para. 1f (justified interest) of the EU General Data Protection Regulation (EU GDPR). Our justified interest is based on the optimisation of our online offers and web presence. Since the private sphere of our users is of paramount importance to us, the IP address with etracker is anonymised as soon as possible and registration or device recognition is converted to a specific key that cannot be traced back to a person. Any other use or amalgamation with other data, or the forwarding of data to third parties, is not carried out by Maxer.
You can contest the aforementioned data processing at any time, insofar as this is related to you personally. You will not suffer any disadvantageous consequences from this.
If you enable web push notifications in your browser, a service of that particular browser will be used to provide this feature. For sending push messages, only anonymous or pseudonymous data is transmitted. You can object to the receipt of notifications at any time through the settings of your browser. For information about opting out of web push notifications for each browser, see Google Chrome, Mozilla Firefox, Apple Safari & Opera.
Our internet site uses social plugins (“plugins”) from different social networks. With the help of these plugins you can share contents or recommend products, for example. The plugins on our websites are deactivated as standard and therefore do not transmit any data. By clicking on the "Activate Social Media" button you can activate the plugins. Naturally, the plugins can be activated with a simple click as well.
If these plugins are activated, your browser creates a direct link with the servers of the relevant social networks as soon as they call up one of the websites in our internet presence. The contents of these plugins are transmitted directly to your browser and linked by this to the website.
By linking the plugins, the social network receives the information that you have called up via the corresponding page in our internet presence. If you are logged in to the social network, this can assign the visit to your account. If you interact with the plugins, for example, if you click the “Like” button on Facebook or leave a comment, the corresponding information is transmitted to the social network by your browser, where it is then stored.
Please consult the relevant networks and/or websites for details of the purpose and scope of the data collection and the further processing and use of the data by said social networks as well as their rights and setting options in this regard for the protection of your private sphere. You will find the relevant links below.
Even if you are not registered with the social networks, data can be sent to these networks by websites with active social plugins. A cookie with an identification key is set by an active plugin at every visit to the website. Since your browser automatically sends this cookie with every link to a network server, in principle it would be possible for the network to create a profile on which websites the user with this identification key has visited. And then it would also be absolutely possible to trace back this identification key later on to a person, via a subsequent registration with a social network, for example.
We use the following plugins on our websites:
If you do not want social networks to collect your data via active plugins, you can either deactivate the social plugins by simply clicking on our website or click on the function "Blockcookies from third-party service providers" in your browser settings. Then your browser will not send any cookies to the server in the case of embedded contents of other providers. However, by enabling this setting it is possible that other cross-page functions will no longer operate, in addition to the deactivated plugins.
We use plugins for the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). You will find the link to the data protection declaration for Facebook here: Data protection declaration for Facebook.
We use plugins for the social network Twitter, which is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”). You will find the link to the data protection declaration for Twitter here: Data protection declaration for Twitter.
We use plugins for the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA (“Pinterest”). You will find the link to the data protection declaration for Pinterest here: Data protection declaration for Pinterest.
We use plugins for the social network instagram.com, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 USA (“Instagram”). You will find the link to the data protection declaration for Instagram here: Data protection declaration for Instagram.
We use plugins for the social network Linkedin, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). You will find the link to the data protection declaration for LinkedIn here: Data protection declaration for LinkedIn.
Our website uses plugins for YouTube, which is operated by Google. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit other pages that have a YouTube plugin, a connection to the YouTube servers is created. This means that the YouTube server is informed of which of our pages you have visited If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your profile. You can prevent this by logging out of your YouTube account. You will find further details on how your user data is used in the Data Protection Declaration for YouTube.
XI. Rights of the affected person
Pursuant to Art.15 GDPR in conjunction with § 34 BDSG (Federal Data Protection Act) you have the unrestricted right to information, which is free of charge, on the personal data that we hold on file on you as well as pursuant to § 35 BDSG the right to the deletion or blocking of inadmissible data and/or the right to the correction of any erroneous data respectively.
Upon application, we will be happy to provide you in writing with details on whether and what personal data we have filed on you. As far as possible, we shall take appropriate measures to update and or correct any data that we hold on you in the shortest time possible. Please send all information requests, enquiries regarding information or complaints about data processing, by email, stating your full postal address, directly to our data protection officer.
If your personal data is being processed, you are an affected person within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
You can request a confirmation from the person responsible whether personal data that affects you is being processed by us.
If such processing is indeed being carried out, you can request the following information from the person responsible:
the purposes for which your data is being processed;
the recipients and/or categories of recipients to whom the personal data that affects you is being disclosed or will be disclosed in the future;
the planned storage period for the personal data that affects you or, if it is not possible to give any specific information in this regard, the criteria for determining the storage period;
the existence of a right to rectification or deletion of the personal data that affects you, a right to the restriction of processing by the person responsible and a right to object to this processing;
all available information on the origin of the data, if the personal data was not collected from the person affected;
the existence of an automated decision-making process including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved as well as the scope and the envisaged impact of such processing for the affected person.
You have the right to request information whether the personal data that affects you is being transmitted to a third country or to an international organisation. In this connection you can request to be informed about the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You have a right to rectification and/or completion vis-à-vis the person responsible, insofar as the personal data that affects you being processed is wrong or incomplete. The person responsible must carry out the rectification as quickly as possible.
3. Right to a restriction in the processing
Subject to the following conditions you can request a restriction in the processing of the personal data that affects you:
if you are contesting the correctness of the personal data that affects you for a period of time that allows the person responsible to check the correctness of the personal data;
if the processing is unlawful and you refuse to have the personal data deleted but instead request a limitation in the use of the personal data;
the person responsible no longer requires the personal data for the purposes of processing, but you require them for enforcement or execution purposes or for the defence of legal claims, or
if you have submitted a complaint concerning the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the justified reasons of the person responsible take precedence over your reasons.
If the processing of the personal data that affects you is restricted, this data – apart from its storage – may only be processed with your consent or in order to enforce, execute or defend legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest on the part of the European Union or another member state.
If the limitation in the processing pursuant to the aforementioned conditions is restricted, you will be informed by the person responsible before said restrictions are lifted.
a. Duty to delete
You can request from the person responsible that the personal data that affects you should be deleted with immediate effect, and the person responsible is obliged to delete this data immediately, if one of the following reasons applies:
the personal data that affects you is no longer required for the purposes for which they were collected or for which they were processed in another manner.
You revoke your consent on which the processing is based pursuant to Art. 6 para. 1a or Art. 9 para. 2a GDPR and there is no other legal basis for the processing.
Pursuant to Art. 21 para. 1 GDPR you have submitted a complaint regarding the processing and there are no overriding reasons that justify the processing, or you have submitted a complaint regarding the processing pursuant to Art. 21 para. 2 GDPR.
The personal data that affects you was unlawfully processed.
The deletion of the personal data that affects you is required for the fulfilment of a legal duty according to the law of the European Union or the law of a member state to which the person responsible is subject.
The personal data that affects you was collected in connection with services offered by the information society pursuant to Art. 8 para. 1 GDPR.
If the person responsible has made the personal data that affects you publicly and if they are obliged to delete it pursuant to Art. 17 para. 1 GDPR, they shall implement appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the officers involved in the data processing who are processing the personal data that, as the affected person, you have requested that they should delete all the links to this personal data as well as any copies or replicas thereof.
for the enforcement of the right to free speech and information;
for the fulfilment of a legal duty that requires the processing pursuant to the law of the European Union or of a member state that is subject to said responsibility, or in order to fulfil a task that is in the public interest or is a result of the exercise of public authority with which the person responsible has been entrusted;
for reasons of the public interest within the area of public health pursuant to Art. 9 para. 2h and i as well as Art. 9 para. 3 GDPR;
for the purposes of archiving that are in the public interest, or for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, if the law mentioned in Section a) will probably make the realisation of the aims of this processing impossible or will seriously impede it, or
for the enforcement, execution and defence of legal claims.
If you have exercised your right for correction, deletion or restriction in processing vis-à-vis the person responsible, the latter is obliged to inform all the recipients of the personal data that affects you of this correction or deletion of the data or the restriction in processing, unless this should prove to be impossible or it entails a disproportionate amount of time and effort.
You have the right to be informed of these recipients by the person responsible.
You have the right to receive the personal data that affects you and that you have made available to the person responsible, in a structured, current and machine-processable format. In addition, you have the right to transfer this data to another person responsible without any obstacle being placed in the way by the person responsible for whom the personal data was prepared, insofar as
the processing is based on a consent pursuant to Art. 6 para. 1a GDPR or Art. 9 para. 2a GDPR or on a contract pursuant to Art. 6 para. 1b GDPR and
the processing is carried out with the aid of an automated procedure.
In exercising this right, you also have the right to insist that the personal data that affects you is transferred directly from the one person responsible to the other, insofar as this is technically possible. The rights and freedoms of others must not be restricted by this.
The right of data transferability does not apply for the processing of personal data that are required for the execution of a task that is in the public interest or is a result of the exercise of public authority with which the person responsible has been entrusted.
You have the right to object at any time to the processing based on Art. 6 para. 1e or f GDPR of the personal data that affects you, for reasons that are pertinent to your particular situation; this also applies for any profiling based on these provisions.
The person responsible shall no longer process the personal data that affects you unless they are able to provide irrefutable reasons sustaining the worthiness of the protection of the processing that supersede your own interests, rights and freedoms, or the processing is for the purpose of the enforcement, execution or defence of legal claims.
If the personal data that affects you is processed for direct marketing purposes, you have the right at any time to object to the use of the personal data that affects you for the purpose of such advertising; this also applies for any profiling, insofar as it is carried out in connection with such direct advertising.
If you object to the processing for the purpose of direct advertising, the personal data that affects you will no longer be processed for these purposes.
You have the option, in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right to object by means of an automated procedure in which technical specifications are used.
You have the right to revoke your data protection declaration of consent at any time. The legality of the processing up until the point of the revocation of your consent is not affected by this.
9. Automatic decision in an individual case including profiling
You have the right not to be bound by a decision that is based exclusively on automated processing – including profiling – that restricts you vis-à-vis any legal effect or that considerably restricts you in any other way. This does not apply if the decision
for the conclusion or the completion of a contract between you and the person responsible is required,
based on the legal provisions of the European Union or of the member states to which the person responsible is subject, is admissible and these legal provisions contain appropriate measures for the maintenance of your rights and freedoms as well as your justified interests or
is carried out with your express consent.
However, these decisions may not be based on specific categories of personal data pursuant to Art. 9 para. 1 GDPR, if Art. 9 para. 2a or g applies and appropriate measures for the protection of your rights and freedoms as well as your justified interests were met.
With regard to the cases mentioned in (1) and (3) the person responsible shall take appropriate measures to maintain your rights and freedoms as well as your justified interests, whereby the right to intercede on behalf of a person by the person responsible, to the presentation of a personal point of view and to challenge the decision is included at least.
Irrespective of any other legislative or regulatory judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place where the alleged violation took place, if you are of the opinion that the processing of the personal data that affects you has violated the GDPR.
The supervisory authority to whom the complaint is submitted shall inform the complainant about the status and the results of the complaint, including the possibility of any judicial remedy pursuant to Art. 78 GDPR.
XII. Online application
If you should apply online for a job that we are advertising, we shall fundamentally collect only data that is required in order to process your application with PSA International Group and PSA Academy International. These are your title, first name, last name, application documents and email or telephone number so that we can contact you.
However, the provision of your email address and telephone number is voluntary. You will not suffer any negative consequences if you do not supply these details. However, the non-provision of a telephone number can make communication for a telephone interview more difficult.
Your personal information and data is collected and stored with the greatest of care and integrity and used only for the purpose stated. The provisions of the EU General Data Protection Regulation as well as the national laws are complied with.
You agree to the processing and transmission of your data exclusively for the application process. Data processing is carried out on the basis of § 26 BDSG. You confirm that all the information you have provided is correct. You are also aware that any incorrect information can result in the termination of the employment contract. We delete your information once the application procedure has been terminated and after the expiry of the statutory storage periods of 6 months, if your application is unsuccessful.
Foreign-language pages
If parts of our internet presence are offered in languages other than English, this is meant exclusively as a service for our clients, employees and prospective clients, who are not German speakers.
XIV. Data protection information pursuant to Art. 13 GDPR
Data protection information pursuant to Art. 13 GDPR
Date of our Data Protection Declaration: May 2018
Deletion request or information request concerning personal data under the GDPR
Do you want to receive information about the personal data stored about you in our IT systems, or do you want to delete your personal data?
© PSA-AcademyTM is a full member of PSA International GroupTM. Since 2004 - All Right Reserved.