Information on the Processing of Personal Data
within asserting your rights as a data subject
The information below provides you with an overview of the processing of your personal data (hereinafter "data") by the Arvato Systems Group* as well as your data protection rights.
Who Is Accountable (Data Controller) for the Processing of My Data?
The Arvato Systems Group* as Controller in terms of data protection is accountable for the herein covered processing activity/ activities and addressee of your rights as a data subject. We process personal data in accordance with the European General Data Protection Regulation (GDPR) and laws locally applicable.
You can contact our data protection officer via the postal address of the respective legal entity noting "Attn: Data Protection Department" or via the e-mail address datenschutz@arvato-systems.de, phone: +49-5241-80 70785.
What Are the Purposes of My Data Being Processed and What Is the Legal Basis?
We process the correspondence we conduct with you in order to fulfil your rights under the GDPR and document the fulfilment of our obligations. The legal basis for processing your personal information in asserting your rights as a data subject follows from Art. 6 (1) point c GDPR, “Complying with a legal obligation”.
Am I Obligated to Provide Data?
In order to assert your rights as a data subject, it may be necessary that you provide information to Bertelsmann and/or its subsidiaries pertaining to your person and the specific information that has been processed. Without providing this information, Bertelsmann and/or its subsidiaries are not able to cater to your rights as a data subject.
Who Receives My Data?
We use service providers (contract processors) who are bound by instructions and who only have ac-cess to your data to the extent and for the period necessary for the provision of the services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country which does not guarantee the same data protection standard as the European Union. However, such a level of data protection can be guaranteed with a suitable guarantee. When selecting service providers, Arvato Systems takes the necessary steps to contractually ensure an equiv-alent level of data protection.
How Long Will My Data Be Stored?
Bertelsmann and/or its subsidiaries store(s) the correspondence exchanged with you in relation to your asserting your rights as a data subject for a period of three years. This does not apply to information obtained to clarify your identity, e.g. by way of a labeled photocopy of your personal identity card, where Bertelsmann and/or its subsidiaries have been provided one. It will be deleted within one week at the latest of establishing your identity.
What Rights Do I Have Respecting My Data?
You have the right to request access to your personal data, which are currently stored by us. Where these data are incorrect or not up to date, you have the right to request rectification. In addition, you can request erasure and/or restriction of your data where the criteria set out in Art. 17 and 18 of the GDPR are met. Where our processing of data provided by you is based on your consent or is subject of a contract, you may request a copy of these data in a structured, common and machine readable format (right to data portability).
You have the right to object to the processing of your data, Art. 21 GDPR.
If you have given us consent to process your personal data for specific purposes, you have the right to withdraw this consent at any time with effect for the future.
If you wish to exercise your rights or have general questions regarding data protection within the Arvato Systems Group, you may contact us at any time via the above contact details. You also have the option of contacting a data protection authority and filing a complaint.
Is My Data Processed by means of automated decision-making, including profiling?
Your collected data is not utilised for automated decision making or profiling.
Conclusion / Version Information
As Arvato Systems services evolve, it may be necessary to amend this privacy statement. For this reason, we recommend that you read these data protection notices again from time to time.
*The Arvato Systems Group can be contacted via the e-mail address: info@arvato-systems.de for matters concerning the following companies:
Arvato Systems GmbH, An der Autobahn 20, 33333 Gütersloh; Arvato Systems Perdata GmbH, Martin-Luther-Ring 7-9, 04109 Leipzig; Arvato Systems S4M GmbH, Am Coloneum 3, 50829 Köln; Next Level Integration GmbH, Nattermannallee 1, 50829 Köln; Arvato Systems Latvia SIA, Zaļā iela, Centra rajons, Rīga, LV-1010, Lettland; Arvato Systems IT S.R.L., Ionescu Crum no. 1, Brasov – 500446, Rumänien; Vidispine AB, Kista Alléväg 3, 164 55 Kista, Sweden