Privacy Policy

For applicants: Consent to the processing of personal data under data protection law

I have been informed that the electronic and/or paper-based processing of my curriculum vitae, the personal data contained therein, and supplementary information to be provided in connection with future employment will be carried out by Synergie exclusively for the purpose of managing my application, forwarding it to third parties interested in my profile, the administrative management of my file, and other related activities. I hereby give my express consent to this.

I understand that my personal data, which I have provided to SYNERGIE during the entire application process, will be processed by SYNERGIE for the purposes of temporary employment and/or personnel consultancy and, in this context, will be transferred, in particular, to national and international client companies and subsidiaries of the SYNERGIE Group at the EU level. SYNERGIE is looking for a position for me as a temporary worker or as a candidate in personnel consultancy. For this purpose, SYNERGIE's partners require certain information and personal data about me. I know that SYNERGIE itself uses service providers to process my data for the purposes of temporary employment and/or personnel consultancy.

I expressly agree that SYNERGIE may use and forward my application photo (if not desired, please revoke by email to datenschutz@synergie.de).

For a wider reach / faster and more effective placement, my data may also be used for candidate mailing campaigns (if not desired, please revoke by email to datenschutz@synergie.de).

I understand that SYNERGIE may only process my data as long as and to the extent necessary for the search for employment through temporary work or personnel consulting. For any further processing (e.g. after the search for employment or a position has ended), SYNERGIE requires my consent regarding data protection.

SYNERGIE has informed me that there are data protection notices / declarations that describe in more detail which of my personal data will be processed and for what purposes. These data protection notices can be found at the following link: www.synergie.de/data-protection.

I hereby expressly agree that my personal data, which I have provided to SYNERGIE within the scope of the entire application process and which are necessary for the search for jobs and positions, may be stored by SYNERGIE for a total of 6 months even after the search for employment via temporary employment and/or recruitment has ended, and may continue to be processed for the search for employment or vacancies, in order to contact me if I should be considered for another job or position. SYNERGIE will ask for my consent again after this period has expired, if applicable.

I am aware that this consent is voluntary and that I can decide for myself whether I wish to give it. I am also aware that I can refuse this consent without giving any reason and without suffering any disadvantages. In accordance with the European General Data Protection Regulation, I have been informed that I can exercise my rights of access, rectification, portability, objection, and erasure of my personal data at any time by contacting the SYNERGIE Data Protection Officer at the following address:

• SYNERGIE Personal Deutschland GmbH, Akademiestr. 49, 76133 Karlsruhe
• Or over the Online form at www.synergie.de

I have read and understood the above terms and conditions and I expressly, freely and knowingly consent to my personal data being collected and processed electronically and/or on paper.

I have read, understood, and approved this declaration of consent.

For client companies: Data Privacy Policy when submitting candidate profiles

Naturally, our general data protection regulations, based on current legal provisions, also apply to the companies with whom we currently work or will work in the future, and their respective contact persons.

Furthermore, we place great importance on the careful handling of our applicants' data. As part of our activities in temporary employment or personnel consulting, we provide our client companies with their personal data as needed. We therefore point out the particular sensitivity of the data to these companies and also ask for appropriate correct handling of it.

The data protection statement for the submission of candidate profiles to companies can be found in full. Here for download (PDF) ↗ 

Application for data subject rights GDPR

Are you a data subject within the meaning of the GDPR and wish to submit a request for access / rectification / erasure / portability or restriction of the processing of your personal data? Then Please fill in this form online and we'll take care of it.

Privacy Policy

This policy is part of the general data protection policy of the SYNERGIE Group, which you can view here (PDF).

You are using an electronic system for applicant recording and management, which enables us to offer you suitable professional roles in a targeted manner. We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and the EU Data Protection Adjustment and Implementation Act (DS Anpassungs UG EU). With the following information, we would like to give you an overview of the processing of your personal data by us and of your rights under data protection law. The specific data processed and how it is used depends crucially on the services requested or agreed upon. Therefore, not all parts of this information will apply to you.

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:

SYNERGIE Personal Deutschland GmbH
Akademiestr. 49
76133 Karlsruhe
Tel: (0721) 35 44 98-0
E-mail: datenschutz@synergie.de
https://synergie.de

You can reach the Data Protection Officer at

Stephan Frank
SFC | Stephan Frank Consulting
Josephsplatz 8
90403 Nuremberg
Tel: (0911) 1488 5292
Telefax: (0911) 1488 5293
E-mail: dsb@stephan-frank.com

Data provided by applicants as part of their application

We process personal data that we receive from you in the course of our business relationship. On our website, we offer applicants the opportunity to register by providing their personal data. The data is entered into an input form, transmitted to us, and stored. Data will only be passed on to third parties to the extent described below.

Relevant personal data includes name, surname, date of birth, and your full address, your contact details, your current employment situation, as well as your desired work location, your availability, and your career aspirations. Furthermore, for successful placement, we require all details typically found in a CV (including qualifications and skills, and a photograph if applicable) and those necessary for successful placement.

The application is necessary for the fulfilment of a contract with the applicant or for the implementation of pre-contractual measures. The legal basis for the processing of data is Art. 6(1)(b) GDPR.

In any event, the legal basis for processing the data beyond other legal bases is the applicant's consent pursuant to Art. 6(1)(a) GDPR. Consent to process this data will be obtained from the applicant as part of the application process.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This applies to data collected during the application process for the purpose of fulfilling a contract or carrying out pre-contractual measures if the data is no longer required for the performance of the contract. Even after the contract has been concluded, there may be a requirement to retain personal data in order to comply with contractual or legal obligations.

You can request a deletion by providing your full name and ensuring your identity can be clearly established with the controller.

If the data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, the data can only be erased prematurely if contractual or legal obligations do not prevent deletion.

Processing of personal data in accordance with the provisions of the Temporary Employment Act (AÜG)

We process the applicant's personal data to the extent necessary for the establishment and formation of the employment relationship, as well as for placing the applicant's work with third-party companies. SYNERGIE Personal Deutschland GmbH will also retain the data after the employment relationship has ended, to the extent required by legal provisions. SYNERGIE Personal Deutschland GmbH will also transmit the data to the social security institution, insofar as this is necessary according to the Data Collection and Transmission Ordinance (§2 & §3 No. 4 DEÜV).

Data transfer to third parties, order processing by service providers

SYNERGIE will only disclose personal data to third parties if the applicant has expressly consented to this or if there is a legal obligation to do so. SYNERGIE uses the service provider zvoove for the aforementioned purposes, in particular its electronic recruiting tool „zvoove recruit“ (job advertisement creation and management, as well as applicant management), which is subject to the relevant data protection requirements.

Applicant's personal data will be transmitted by SYNERGIE Personal Deutschland GmbH to client companies and/or affiliated companies within the group, insofar as this is necessary for the placement of activities for the applicant. The necessity is determined by the applicant's profile, insofar as placement with a SYNERGIE client company appears possible. Should the applicant wish to restrict the scope of placement, they must inform SYNERGIE thereof by email to the contact address provided above, or in writing.

Where the applicant participates in support measures and/or labour market projects run by the Federal Employment Agency („Bundesagentur“), employment agencies (ARGE) or option municipalities as part of their work for SYNERGIE Personal Deutschland GmbH, or avails themselves of services from these institutions (collectively, „Labour Market Projects“), SYNERGIE is permitted under Art. 6(1)(b) of the GDPR to transmit personal data to these institutions and third parties, insofar as this is required for the purpose of the Labour Market Projects and/or is legally mandated. If the applicant wishes to participate in the Labour Market Projects with the support of SYNERGIE Personal Deutschland GmbH, any data transmission that appropriately serves the purpose of the Labour Market Project is required.

The applicant is not permitted to pass on third-party data from the SYNERGIE applicant registration and administration system/job portal to third parties. In the event of a breach, SYNERGIE Personal Deutschland GmbH is entitled to immediately block the applicant. The assertion of a claim for damages remains unaffected by this.

Data processing for the purpose of providing the website and log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data will be collected:

• IP address
• Date and time of the enquiry
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• amount of data transferred per item
• Website, from which the request originates
• Browser
• Operating system and its user interface
• Browser software language and version
• The country the visitor comes from

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

The system needs to store the IP address temporarily in order to enable the website to be delivered to the user’s computer. To this end, the user’s IP address must be retained for the duration of the session.

Log files are used to ensure the website functions correctly. The data also helps us optimise the website and ensure the security of our IT systems.

We also have a legitimate interest in data processing for these purposes under Article 6(1)(f) of the GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session ends.

If data is stored in log files, this occurs after seven days at the latest. Further storage is possible. In this case, users' IP addresses are deleted or anonymised so that the calling client can no longer be identified.

The collection of data for the provision of the website and the storage of the data in log files are absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of Cookies and Analysis Services

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string, which allows for the unique identification of the browser when the website is revisited.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Language settings

(2) Login Information

We also use cookies on our website that enable analysis of user browsing behaviour.

This way, the following data can be transmitted:

Entered search terms

(2) Page view frequency

(3) Using website features

The user data collected in this way is pseudonymised using technical measures. Consequently, it is no longer possible to link the data to the user who accessed the site. The data is not stored alongside any other personal data relating to the users.

When our website is accessed, users are informed by an information banner about the use of cookies for analysis purposes and are referred to this privacy policy. A notice is also given on how to prevent the storage of cookies in the browser settings.

When our website is accessed, the user is informed about the use of cookies for analytical purposes. In this context, a reference is also made to this privacy policy.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR.

The legal basis for processing personal data using cookies for analytical purposes, where the user has given their consent, is Article 6(1)(a) of the GDPR.

The purpose of using technically necessary cookies is to make using websites easier for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised again even after changing pages.

For the following applications, we require cookies:

(1) Taking over language settings

(2) Marking of search terms

The user data collected through technically necessary cookies are not used to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used, enabling us to continuously optimise our offering.

Cookies are stored on the user's computer and transmitted from there to our site. Therefore, you as the user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

The transmission of Flash cookies cannot be prevented via the browser settings, but can be blocked by changing the Flash Player settings.

Individual services

On our website, we use various tools from the provider Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as „Google“. Through certification under the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Does Google guarantee that the EU's data protection requirements will also be met when processing data in the USA? The individual tools are listed below.

Google Maps

If you access the Google Maps component embedded on our website, Google will store a cookie on your device via your internet browser. In order to display our location and create directions, your user preferences and data will be processed. We cannot rule out that Google uses servers in the USA.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in optimising the functionality of our website. Through the connection to Google established in this way, Google can determine which website your request was sent from and to which IP address the directions should be sent. If you do not agree to this processing, you have the option to prevent the installation of cookies through the corresponding settings in your internet browser. You can find details on this above under the heading „Cookies“.

Google Analytics

Google Analytics uses „cookies“. These are small text files that your web browser stores on your device, enabling an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA. Google Analytics cookies are set based on Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour to optimise our web offering and, if necessary, our advertising.

We use Google Analytics with the IP anonymisation function. This ensures that Google truncates your IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases where Google transmits the full IP address to a server in the USA and truncates it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. Your IP address transmitted by Google Analytics will not be merged with other Google data.

It is possible to prevent your web browser from setting cookies. However, some functions of our website may be restricted as a result. Likewise, you can prevent the collection of data regarding your website usage, including your IP address, and its subsequent processing by Google. This can be done by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set, which prevents the collection of your data on future visits to our website: Disable Google Analytics. For details on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Our website uses the “demographics” feature of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data originates from interest-based advertising from Google as well as from third-party visitor data. It is not possible to assign the data to a specific person. You can disable this feature at any time. This can be done via the ad settings in your Google account or by prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. AdWords is an online advertising programme. As part of the online advertising programme, we work with conversion tracking. After clicking on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your terminal device. Google AdWords cookies expire after 30 days and are not used for personal identification of users. The cookie allows Google and us to recognise that you have clicked on an advert and been redirected to our website.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. Conversion cookies are used to generate conversion statistics for AdWords customers who use conversion tracking. AdWords customers can see how many users have clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that would allow for personal identification of users. If you do not wish to participate in tracking, you can object to its use. The conversion cookie can be disabled in your browser's user settings. This way, you will not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimise our web offering and advertising. For details on Google AdWords and Google Conversion Tracking, please refer to Google's privacy policy: https://www.google.de/policies/privacy/.

SalesViewer

On this website, data is collected and stored for marketing, market research, and optimisation purposes using SalesViewer® technology from SalesViewer® GmbH, based on the legitimate interests of the website operator (Art. 6(1)(f) GDPR). A JavaScript-based code is used for this purpose, which serves to collect company-related data and its corresponding use. The data collected with this technology is encrypted via a non-reversible one-way function (so-called hashing). The data is immediately pseudonymised and not used to personally identify the visitor of this website.

Data collection and storage can be objected to at any time with effect for the future by following this link https://www.salesviewer.com/opt-out Click here to prevent future tracking by SalesViewer® on this website. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.

Snatchbot Chatbot

This website offers its own chatbot for contact. This chatbot operates on the basis of the SnatchBot tool. The provider is Snatch Group Ltd., with its registered office at 8 Abba Eban Blvd, Herzliya Pituach, 46120 Israel. Israel is considered by the European Commission to be a country that provides an adequate level of protection for personal data of citizens from EU member states.

EU-US Privacy Shield: SnatchBot Ltd. is a certified participant in the EU-US Privacy Shield Framework. SnatchBot Ltd. has committed to treating all personal data received from European Union (EU) member states in accordance with the Privacy Shield Framework and its applicable principles. You can find more information about the Privacy Shield Framework on the US Department of Commerce's Privacy Shield List. The chatbot uses cookies, which are stored on your computer. For communication via this chatbot, we store personal data related to your enquiry. Your IP address will be anonymised after processing and before storage. The chatbot cookies remain on your end device until you delete them. You can set up your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to automatically delete cookies when closing the browser. If cookies are deactivated, the functionality of our website may be limited. If you would like more information about SnatchBot's Privacy Policy, you can find information here: https://snatchbot.me/brochures/PrivacyPolicy.pdf

More online presences

In addition to this website, we also maintain presences on various social media platforms, which you can reach via corresponding links on our website. If you visit such a platform, personal data may be transmitted to the provider of the social network. It is possible that, in addition to saving the data you specifically enter on this social media platform, other information may also be processed by the provider of the social network.

Furthermore, the social network provider may process the most important data from the computer system from which you visit it – for example, your IP address, the processor type used, and browser version including plug-ins. If you are logged into your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.

Please refer to the respective provisions of the respective controller, e.g. at: for the purpose and scope of data collection by the respective medium, as well as the further processing of your data there, and your rights in this regard.

Facebook: https://en-gb.facebook.com/about/privacy/

Instagram: https://help.instagram.com/155833707900388

Kununu: https://privacy.xing.com/en/data-protection-declaration

XING: https://privacy.xing.com/en/privacy-policy

https://www.linkedin.com/legal/privacy-policy

We also point out that our website contains further links to external third-party websites, and we have no influence over the processing of data on these third-party websites.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights in relation to the controller:

Right to information

You can request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing takes place, you can request the following information from the controller:

the purposes for which personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom your personal data have been or will be disclosed;

(4) the planned duration for which the personal data concerning you will be stored or, if this is not possible, the criteria used to determine the storage duration;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restrict processing by the controller, or a right to object to such processing;

(6) the existence of a right of complaint to a supervisory authority;

(7) all available information on the source of the data, where personal data have not been obtained from the data subject;

(8) the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the scope and intended consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you are being transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

Right to rectification

You have the right to rectification and/or completion from the data controller if the personal data concerning you that are being processed are inaccurate or incomplete. The data controller must make the rectification without delay.

When data is processed for scientific, historical, or statistical research purposes: your right to rectification may be restricted to the extent that it is likely to make the achievement of the research or statistical purposes impossible or seriously impair them, and the restriction is necessary for the fulfilment of the research or statistical purposes.

Right to restrict processing

You can request the restriction of the processing of your personal data under the following conditions:

if you contest the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to have the personal data erased and instead request that its use be restricted;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims, or

(4) if you have objected to the processing under Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

If the processing of your personal data has been restricted, such data – apart from its storage – may only be processed with your consent or for the purposes of asserting, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing is lifted based on the aforementioned conditions, you will be informed by the controller before the restriction is lifted.

When data is processed for scientific or historical research purposes or for statistical purposes: Your right to restrict processing may be restricted to the extent that it is likely to make the achievement of the research or statistical purposes impossible or seriously impaired, and the restriction is necessary for the fulfilment of the research or statistical purposes.

Right to erasure

Duty to erase

You may request that the data controller erases your personal data without delay, and the data controller is obliged to erase such data without delay if any of the following grounds apply:

The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You withdraw your consent on which the processing pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR is based, and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.

(4) The personal data relating to you has been processed unlawfully.

(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data relating to you were collected in relation to information society services offered, pursuant to Article 8(1) of the GDPR.

1. b) Information to Third Parties

If the controller has made the personal data concerning you public and is obliged to erase that personal data pursuant to Article 17(1) of the GDPR, the controller shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you, as the data subject, have requested the erasure by them of any links to, or copy or replication of, that personal data, taking into account the available technology and the cost of implementation.

Exceptions

The right to erasure does not apply where the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation to which the controller is subject under Union or Member State law, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) in the public interest in the area of public health within the meaning of Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, provided that the right mentioned in section (a) is likely to render impossible the achievement of the purposes of this processing or seriously impair them, or

(5) to assert, exercise or defend legal claims.

Right to information

If you have asserted your right to rectification, erasure or restriction of processing to the controller, the controller is obliged to inform any recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transferred directly from one data controller to another, provided this is technically feasible. This must not infringe upon the freedoms and rights of other individuals.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right of objection

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

For data processing for scientific, historical or statistical research purposes: You also have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR.

Your right to object may be restricted to the extent that it is likely to make the achievement of research or statistical purposes impossible or seriously impair them, and the restriction is necessary for the fulfilment of the research or statistical purposes.

Right to withdraw consent to data protection declaration

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent prior to its withdrawal.

Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) necessary for the conclusion or performance of a contract between you and the controller,

(2) is permitted by Union or Member State law to which the controller is subject, and that law provides appropriate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) with your express consent.

However, these decisions must not be based on special categories of personal data within the meaning of Article 9(1) GDPR unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to safeguard the rights and freedoms and your legitimate interests.

In the cases mentioned in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least your right to human intervention by the controller, to express your point of view and to contest the decision.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint was made shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.