HOME COMPANY SERVICES CAREERS REFERENCES DATENSCHUTZ Website Privacy Policy and provision of information to Data Subjects according to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) 1) General information: Data Processor Company: IT for Intellectual Property Management GmbH Legal representative(s): Andreas Stibi, Christopher Burum, Managing Directors Address: Rosenheimer Str. 11, 81667 Munich, Germany Data Protection Officer contact details: Dr. Sebastian Kraska datenschutzbeauftragter@gema.de 2) What processing activities do we undertake? What categories of data are processed? We only collect Personal Data you voluntarily provide to us. We do not collect any Personal Data beyond what you provide to us. We shall not process your Personal Data beyond the limits defined by statute, except with your express prior consent.. Purpose of processing: Fulfilment of contract Categories of recipients: Public bodies, if overriding statutory provisions apply Third-party service providers or other contractors Other third parties subject to the consent of the Data Subject or if permitted on ground of overriding legitimate interest Third country transfers: None Duration of storage: The periods for which data are stored is subject to statutory retention requirements. As a rule, we retain data for 10 years. 3) How does this Website collect information? Analytic services We do not use analytic services. Use of proprietary cookies This Website uses proprietary cookies to enhance your user experience. Cookies are small files sent from a webserver to your browser and stored on your computer for future use. Our proprietary cookies do not store any Personal Data. You can block all cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. Contacting us We only collect Personal Data which you voluntarily provide to us, e.g. when contacting us. If you do so, please be assured that all Personal Data sent to us will be used only for the purpose for which you provided it when contacting us. These data help us better categorise and respond to your inquiry or request. This information is provided expressly on a voluntary basis and with your consent. By providing your contact details (e.g. an email address or telephone number), you agree that we may contact you through these channels to respond to your inquiry or request. You are free to withdraw your consent for future contact to be made at any time. You can do so by email or letter, using the contact details provided on the Legal Notice page of this Website. 4) How do we process customer data? Categories of data processed: Data provided for fulfilment of contract; additional data, if necessary, for processing subject to your express prior consent. Purpose of processing: Fulfilment of contract Categories of recipients: Public bodies, if overriding statutory provisions apply Third-party service providers or other contractors, e.g. for data processing or hosting Other third parties subject to the consent of the Data Subject or if permitted on ground of overriding legitimate interest Third country transfers: None Duration of storage: The periods for which data are stored is subject to statutory retention requirements. As a rule, we retain data for 10 years. 5) How do we process supplier data? Categories of data processed Data provided for fulfilment of contract; additional data, if any, to be processed subject to your express prior consent Purpose of processing: Fulfilment of contract, e.g. inquiry, procurement, quality assurance Categories of recipients: Public bodies (e.g. tax office), if overriding statutory provisions apply Third-party service providers or other contractors, e.g. for data processing or hosting, accounting, payment processing Other third parties subject to the consent of the Data Subject or if permitted on ground of overriding legitimate interest Third country transfers: Data Processors outside the European Union may be used in the fulfilment of contracts. Duration of storage: The periods for which data are stored is subject to statutory retention requirements. As a rule, we retain data for 10 years. 6) How do we process data obtained during recruitment? Categories of data processed: Job application information. Purpose of processing: Completion of recruitment procedure. Categories of recipients: Public bodies, if overriding statutory provisions apply Third-party service providers or other contractors, e.g. for data processing or hosting Third country transfers: None Duration of storage: As a rule, all job application information is erased within four months of completion of a recruitment process, unless a candidate agrees that his or her data may be retained longer and placed in our reserve pool of applicants. 7) How do we process employee data? Categories of data processed: Data provided for fulfilment of contract; additional data, if any, to be processed subject to your express prior consent Purpose of processing: Fulfilment of employment contract Categories of recipients: Public bodies (e.g. tax office, social insurance providers, employers’ liability insurance association), if overriding statutory provisions apply Third-party service providers or other contractors, e.g. for data processing or hosting, payroll accounting, travel expense processing, insurance, collection/use of vehicle movement data Other third parties subject to the consent of the Data Subject or if permitted on ground of overriding legitimate interest Third country transfers: None Duration of storage: The periods for which data are stored is subject to statutory retention requirements. As a rule, we retain data for 10 years. 8) ISO certificate ISO 27001: Certificate as download: ISO/IEC 27001:2013 as PDF download Further information and contact details In addition, you have rights of access, rectification or erasure of your Personal Data, to restrict or object to our processing of your Personal Data, and the right to data portability, which you can exercise at any time. You can do so by email or letter, using the contact details provided on the Legal Notice page of this Website. You also have the right to complain to the data protection supervisory authority. IMPRINT PRIVACY POLICY DE EN