The purpose of data processing may be based on technical, contractual, or statutory requirements or result from the user has given consent.
We use the data described in section 2 for the following purposes:
- To provide website features and content and ensure technical security in trouble-shooting technical issues and also to ensure that unauthorized persons do not gain access to our website systems;
- To conduct marketing reach measurements and web analyses to make our website more efficient and interesting for you, and market research purposes;
- To implement our own and external advertising (online advertising);
- For communication, completion of precontractual procedures, and customer care purposes;
- To send out newsletters via email;
- For event registration and participation
4.1 Provision of the Website
4.1.1 Description and scope of data processing
To enable the proper functioning of our website, security analyses to be conducted, and denial-of-service attacks to be prevented and stopped, server log files are automatically collected and saved on a short-term basis as an integral part of access data that is created by the system of the visiting computer upon accessing our website and while using it (see section 2). The content of the server log files is not merged with other data. We use the server log files for statistical analyses to troubleshoot and remedy technical issues, prevent and defend against denial-of-service attacks and attempted fraud, and optimize the proper functioning of our website.
4.1.2 Purpose and legal basis of data processing
The legal basis for the creation of server log files follows Art. 6(1)(f) GDPR. Our legitimate interests lie in the proper functioning of our website, conducting security analyses, and defending against threats.
4.1.3 Duration of storage or criteria applied in defining this period
When our website pages are accessed, information is logged to server log files stored on our web server; the IP address contained in them is deleted after 7 days at the latest. No analysis is conducted during this time unless there is a denial of service or other attacks.
4.1.4 Options for lodging an objection and having your data removed
You have the right to object to the processing of your data contained in the server log files, provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to object, please write to the contact address in section 1.
4.2 Contact Form, Email, and Telephone Contact Information
4.2.1 Description and scope of data processing
On our website, you have the option of contacting us by way of a contact form, by email, by telephone, or by chat using the designated email address and phone number. If you take advantage of this option, the information you enter in the contact form, your email address, and/or your phone number is disclosed to us. Depending on the reason you are contacting us (questions about our products and services, pursuing your rights as a data subject, e.g., submitting a request for information), your contact details are processed (with the assistance of service providers). If necessary for processing your request, this information may be shared with third parties (e.g., partner companies).
To ensure sufficient data security during the transmission of forms, we use in certain cases the service reCAPTCHA of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This serves to differentiate whether the input is made by a natural person or misused by mechanical and automated processing. The service includes the transmission of the IP address and any other data required by Google for the reCAPTCHA service. The differing data protection provisions of Google Ltd. apply here. Further information on the data protection guidelines of Google Ltd. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/
4.2.2 Purpose and legal basis of data processing
The legal basis for processing your contact details follows from Art. 6(1)(f) GDPR. We have legitimate interests in processing your request and in continued communication. If the purpose of establishing contact with us is to enter into a contract with our company, the legal basis for processing your contact details follows from Art. 6(1)(b) GDPR.
4.2.3 Duration of storage or criteria applied in defining this period
Your contact details are deleted once your request has been processed and further communication has been discontinued. This does apply if the purpose of your establishing contact with us is to conclude a contract or you wish to exercise your right as a data subject (e.g., request information). In this case, the data will be further processed on a new legal basis and deleted as soon as the processing purpose and the legal retention periods are fulfilled.
4.2.4 Options for lodging an objection and having your data removed
You have the right to object to processing your contact information provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to object, please write to the contact address in section 1. If you object, communication with you cannot be continued. This does not apply if the storage of your contact details is necessary for completing precontractual procedures, fulfilling a contract, or exercising your rights as a data subject.
4.3 Asserting Your Rights as a Data Subject
4.3.1 Description and scope of data processing
On the website, you have the possibility of asserting your rights as a data subject, e.g., request information on your personal information that we currently store. To assert your rights as a data subject, it may be necessary that you provide information to Bertelsmann and/or its subsidiaries about your person and the specific information that has been processed. Without providing this information, Bertelsmann and/or its subsidiaries cannot cater to your rights as a data subject.
4.3.2 Purpose and legal basis of data processing
The legal basis for processing your personal data in asserting your rights as a data subject follows from Art. 6 (1) point c GDPR, “Complying with a legal obligation”.
4.3.3 Duration of storage or criteria applied in defining this period
Bertelsmann and/or its subsidiaries store(s) the correspondence exchanged with you concerning your asserting your rights as a data subject for a period of three years. This does not apply to information obtained to clarify your identity, e.g., by way of a labeled photocopy of your personal identity card, where Bertelsmann and/or its subsidiaries have been provided one. It will be deleted within one week at the latest of establishing your identity.
4.3.4 Options for lodging an objection and having your information removed
The processing of your information is required for complying with your rights as a data subject, and to that extent, you have no right to revoke your consent to its processing.
4.4 Advertising purposes
4.4.1 Description and scope of data processing
The website offers the possibility of registering to receive advertising communication from Arvato Systems, which, in addition to a newsletter with information on products and services, may also include occasional surveys and allow you to download content free of charge. The personal data entered by you and your consent for advertising purposes in the double opt-in procedure will be stored in our CRM system of the company and processed further (also with the help of service providers) for the advertising purposes of sending newsletters.
We point out that the company may evaluate your user behavior when sending advertising communication. The emails sent include web beacons or tracking pixels, which are one-pixel image files stored on the website to carry out this evaluation. For evaluations, the company can link your data and the web beacons with your email address and an individual ID. With the data obtained in this manner, the company can create a user profile with which the newsletter can be tailored to your individual interests. To do this, the company can record which links you click on when you read the emails and can use these to derive your personal interests. The company can associate this data with your behavior on our website.
4.4.2 Purpose and legal basis of data processing
The processing of your data via the login form is required to inform you about and advertise the company's goods and/or services. The legal basis for processing the data when registering for the newsletter is the consent according to Art. 6 (1) lit. a GDPR concerning Section 7 (2) No. 3 of the Act Against Unfair Competition (hereinafter referred to as “UWG”). The legal basis for processing your personal data after purchasing the company’s goods and/or services is Art. (6) 1 lit. f GDPR concerning Section 7 (3) of the Act Against Unfair Competition (hereinafter referred to as “UWG”). Advertising to existing customers is in the company’s legitimate interest.
4.4.3 Duration of storage or criteria applied in defining this period
The data will be stored for as long as the advertising communication is subscribed to. If you revoke your consent, your data will be blocked for this processing purpose. The data will be stored until the contractual and/or legal obligations have been fulfilled and deletion is not precluded by statutory retention periods.
4.4.4 Options for lodging an objection and having your data removed
You can revoke your consent to receiving advertising communication at any time by clicking on the unsubscribe link provided in each mailing or by writing to:
- Advertising communication of Arvato Systems, Arvato Systems GmbH via E-Mail: email@example.com or via mail to „Reinhard-Mohn-Straße 200, 33333 Gütersloh, Germany“.
4.5.1 Description and scope of data processing
On our website, you have the option of registering for Arvato Systems’ events. The events include lectures on current topics and developments in the IT sector and presentations of the service portfolio and new products and services of Arvato Systems. The addressees of these events are usually business customers. You can register for the individual events via a registration form. The data required for registration is collected and processed for attending the event. The registration form also allows you to arrange personal interest and sales meetings with Arvato Systems. Registration is voluntary.
In addition, our events are regularly recorded with images and sound, some of which are published on our homepage, in our social media channels, or as part of external and internal reporting. In addition to the photo and video recordings, metadata such as the location and time of the recording and location are automatically stored in the digital cameras.
Your data will only be passed on to third parties (e.g., organizers) if necessary for your participation in the event.
4.5.2 Purpose and legal basis of data processing
We use your personal data to contact you, register you, organise events, and advertise purposes. The legal basis for the registration for an event is Art. 6 para. 1 lit. f GDPR. The legitimate interests lie in customer care and customer acquisition. If you have consent to be contacted by telephone and/or e-mail for advertising purposes, Art. 6 I lit. a GDPR serves as the legal basis.
The legal basis for taking and storing photographs and video recordings at an event is Art. 6 para. 1 lit. f GDPR based on our legitimate interest in reporting on the event. The legal basis for publishing the photo and video recordings is §§ 22, 23 Kunsturhebergesetz (KUG).
4.5.3 Duration of storage or criteria applied in defining this period
Your data will be stored until the end of the event as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations.
4.5.4 Options for lodging an objection and having your data removed
You can revoke your consent to receiving press releases at any time by writing to Arvato Systems GmbH via E-Mail: firstname.lastname@example.org or via mail to „Reinhard-Mohn-Straße 200, 33333 Gütersloh, Germany“.
4.6 Links to Other Websites
This website contains links to the website of other website operators. Clicking on the links takes you to the respective websites (e.g., Facebook, YouTube). Except your access data to make the other website available, no data of yours is transmitted to these website operators.
4.7 External Services and Content on Our Website
We integrate external services and content on our website. If you use one of these services or you are shown the content of third parties, communication data is exchanged between you and the provider of that service or content for technical purposes.
That provider may use your data for their own purpose. To the best of our knowledge and belief, we have configured the services or content of third-party providers who are known to use data for their own purposes so that communication for purposes other than rendering their content or services on our website is prevented or communication does not come about unless you actively decide to use the service. However, since we have no control over the data collected by third parties and its processing by them, we are unable to make any binding statements pertaining to the purpose and scope of the processing of your data.
4.8 Use of the Blog
4.8.1 Description and scope of the data processing
If you want to use the comment function of blogs, you must specify a name and your email address in addition to the actual comment. The username for this purpose is freely selectable, so there is no clear name obligation, and the company provides you with the option to remain pseudonymous to the other users. Comments are only published after review and approval by the company. If you post comments, these will generally be made accessible to unregistered users (hereinafter referred to as “anyone”), stating your username, time, and date of the comment.
4.8.2 Purposes and legal basis of the data processing
Data is processed on the blog for the purpose of a collective discussion between users on various topics. The legal basis is Art. 6 (1) lit. f GDPR. The legitimate interest lies in promoting exchange within the interested community.
4.8.3 Duration of storage or criteria for determining this duration
Your user data is stored until the commented post is no longer relevant for the blog in terms of content, and the intended purpose is therefore fulfilled. Your published comments will be stored until deleted and are accessible to anyone. If you wish for your contributions to be deleted, you can send your deletion request to the company under Section 1.
4.8.4 Possibility of objection and deletion
Processing your user data is required to use the blog’s comment function. You cannot object to this, but you can exercise your right to deletion of data.