Information on the Processing of Personal Data

The information below provides you with an overview of the processing of your data (hereinafter "data") by the Arvato Systems Group as well as your data protection rights.

The respective company of the Arvato Systems Group with which you have a business relationship is responsible for processing your personal data and addressee of your rights as a data subject. The Arvato Systems Group acts under the joint responsibility of all companies solely for the purpose of conducting marketing activities and pre-contractual measures. We process personal data in accordance with the provisions of the European Data Protection Regulation (hereinafter "GDPR") and the Federal Data Protection Act (hereinafter "BDSG").

You can contact our data protection officer via the postal address of the respective legal entity noting "Attn: Data Protection Department" or via the e-mail address: datenschutz@arvato-systems.de, phone: +49-5241-80 70785.

On the website, you can subscribe to receive advertising communication from Arvato Systems, which, in addition to a newsletter with information on products and services, may also include occasional surveys and allow you to download content free of charge. The personal data entered by you and your consent for advertising purposes in the double opt-in procedure will be stored in the company's CRM system and processed further (also with the help of service providers) for the advertising purposes of sending newsletters.

We point out that the company may evaluate your user behavior when sending advertising communication. The emails sent include web beacons or tracking pixels, which are one-pixel image files stored on the website to carry out this evaluation. The company can link your data and the web beacons with your email address and an individual ID for evaluations. With the data obtained in this manner, the company can create a user profile with which the newsletter can be tailored to your individual interests. To do this, the company can record which links you click on when you read the emails and can use these to derive your personal interests. The company can associate this data with your behavior on our website.

The legal basis for processing the data when you subscribe to receive advertising communication is the consent by Art. 6 Para. 1 lit. a GDPR using § 7 Para. 2 No. 3 Act against Unfair Competition (hereinafter referred to as "UWG"). The legal basis for processing your data after the purchase of goods and/or services of the company is Art. 6 para. 1 lit. f GDPR under the use of § 7 paragraph 3 Act against Unfair Competition (hereinafter referred to as "UWG"). The legitimate interest of the company lies in the acquisition of existing customers.

In order to carry out the processing purposes described above, your personal data is required if it is collected in accordance with legal requirements. Without this data, we will generally be unable to perform processing.

With your consent, you authorize us to forward your data for promotional purposes within the Arvato Systems Group to offer you our corporate diversity. EU standard contractual clauses ensure the level of data protection in third countries.

In addition, we use service providers (contract processors) who are bound by instructions and who only have access to your data to the extent and for the period necessary for the provision of the services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same data protection standard as the European Union. However, such a level of data protection can be guaranteed with a suitable guarantee. Arvato Systems takes the necessary steps to contractually ensure an equivalent level of data protection when selecting service providers.

The data are stored during the subscription of the newsletter. If you withdraw your consent, your data will be blocked for this processing purpose. The data will be stored until contractual and/or legal obligations have been fulfilled and statutory retention periods do not prevent deletion.

You have the right to request access to your personal data, which are currently stored by us. Where these data are incorrect or not up to date, you have the right to request rectification. In addition, you can request erasure and/or restriction of your data where the criteria are set out in Art. 17 and 18 of the GDPR are met. Where our processing of data provided by you is based on your consent or is subject to a contract, you may request a copy of these data in a structured, common, and machine-readable format (right to data portability).

You have the right to object to the processing of your data, Art. 21 GDPR.

If you have given us consent to process your personal data for specific purposes, you have the right to withdraw this consent at any time with effect for the future.

If you wish to exercise your rights or have general questions regarding data protection within the Arvato Systems Group, you may contact us at any time via the above contact details. You also have the option of contacting a data protection authority and filing a complaint.

In the course of further development of Arvato Systems services, changes to this privacy policy may become necessary. We, therefore, recommend that you read this privacy policy again from time to time.