Privacy Policy

(As of September 6th 2018)

We, the company DEDIQ GmbH, take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws.
Personal data is gathered on this website solely to the extent that is technically necessary. In no event will the gathered data be sold or otherwise transferred to third parties. We use the data you provide us to carry out and complete your order.

The following policy gives you an overview of how we ensure this data protection and which kinds of data are gathered for what purpose.

I. Data controller

Data controller within the meaning of the General Data Protection Regulation:

DEDIQ GmbH
Pettenkoferstr. 37
80336 Munich
Phone: +49 89 125 096 880
Mail: kontakt@dediq.com

II. Purposes and legal basis of data processing

a. User enquiries

In order to process and respond to enquiries you send to us, e.g. to our e-mail address or by telephone, we process the personal data provided by you in this context.
If you send an enquiry to one of our e-mail addresses, we will always process your e-mail address in order to send you an answer, as well as any other information you send us within the context of your message.
When we receive telephone enquiries, we process the personal data you provide us with over the phone.
The legal basis for the processing of your personal data in connection with user enquiries in order to respond to such enquiries is Art. 6 (1) (f) GDPR. We have a legitimate interest in providing correct responses to customer enquiries.

b. Compliance with legal regulations

We also process your personal data in order to fulfil other legal obligations.

We process your personal data for the fulfilment of a legal obligation to which we are subject pursuant to Art. 6 (1) (c) GDPR, insofar as we are obligated to record and store your data.

c. Legal remedy

We also process your personal data to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to defend ourselves against or prosecute criminal offences.

For this purpose, we process your personal data in order to safeguard our legitimate interests in accordance with Art. 6 (1) (f) GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences.

d. Sending an application

If you submit an application to us, we process your personal data in connection with your application. Your application documents could contain special categories of personal data.

Processing of personal data

Applicant data generally comprises the following: first name and surname, your academic degree if applicable, date and place of birth, contact details (address, e-mail, phone and/or mobile phone number), application documents (cover letter, CV, transcripts), language skills, other skills. We also process data sent when you contact us by e-mail.

In line with legal requirements, we base the decisions we make during the application process on the personal data you provide. For example, we use your professional qualifications to decide whether to let you continue to the next stage of the selection process and we use an interview to gain a personal impression of you in order to decide whether to offer you the job you applied for.

We process your personal data on the following legal basis:

Data processing for the purpose of reaching a decision on the establishment of an employment relationship, Art. 88 (1) GDPR in conjunction with Section 26 (1) (1) of the German Federal Data Protection Act (BDSG).

Processing of special categories of personal data

In accordance with Art. 9 GDPR, special categories of personal data comprise data that could reveal a person’s racial or ethnic origin, political opinions, religious (e.g. information about religious affiliation/denomination) or philosophical beliefs or trade union membership, and the processing of biometric data for the purpose of uniquely identifying a natural person (e.g. photos), data concerning a person’s health (e.g. Information concerning the degree of severe disability) or data relating to a person’s sex life or sexual orientation. If your CV contains special categories of personal data, we do not collect such data intentionally. We specifically ask that you please refrain from sending us data of this nature.

If you, voluntarily and contrary to our express request, send us application documents containing special categories of personal data in accordance with Art. 9 (1) GDPR (e.g. your photo or details concerning your religious affiliation/denomination), we will store them on the basis of your consent pursuant to Art. 88 (1) GDPR in conjunction with Section 26 (3) (2) BDSG. The same also holds true if you provide us with other special personal data during the application process. By voluntarily submitting this data, you agree to the storage of this special personal data as part of the application process.

We do not take this special personal data into account when reaching our selection, unless we are required by law to take this special personal data into account. It is possible, for example, that some job advertisements may give preferential treatment to people with disabilities in accordance with prevailing legal provisions. In these cases, provision of this information is always voluntary and subject to your express consent, which you give by voluntarily submitting this data.

We process your special personal data on the following legal basis:

  • In accordance with Art. 9 (1) GDPR based on your consent pursuant to Art. 88 (1) GDPR in connection with Section 26 (3) (2) BDSG.

III. Categories of recipients

First of all, our employees become aware of your personal data. In addition, we use carefully selected and commissioned service providers for some of our business processes, especially for IT services, contract handling, the cultivation of customer relations and services provided to customers and interested parties. In some cases, our service providers receive your personal data in their capacity as processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients handle your data independently as it is transmitted to them by us.

Below is a list of the recipient categories regarding your personal data: Logistics service providers, printing services, law firms, tax offices and auditing firms.

IV. Transfer to third countries

We may also transfer personal data to recipients domiciled outside the EEA, i.e. third countries. In this case, we will ensure that the recipient either has an adequate level of data protection (e.g. based on an adequacy decision by the EU Commission for the respective country or on the basis of EU Standard Contractual Clauses agreed with the recipient) or you have consented to the transfer.

V. Length of storage

Unless this data protection information contains special instructions regarding deletion, we will delete any of your personal data that is no longer necessary for the business relationship, in particular for the purpose of initiating and executing contracts, if there is no further legal obligation or legal justification for such storage. The storage periods set forth in the German Commercial Code (HGB) and the Tax Code (AO) are two to ten years. The length of storage is also affected by statutory periods of limitation. The statutory period of limitation is generally between 12 and 36 months, however it can also be up to 30 years.

VI. Your rights as a data subject

Rights to information, reporting, deletion, restriction on processing and data transmission

Pursuant to Art. 15 GDPR, you have the right to obtain information at any time regarding whether and which of your personal data is stored by us and to whom we may have disclosed it. In addition, you have the right to rectification (Article 16 GDPR), deletion (Article 17 GDPR), restriction of processing (Article 18 GDPR) and data portability (Article 20 GDPR) in accordance with legal provisions.

Right to object

Furthermore, pursuant to Art. 21 (1) GDPR, you may at any time object to any data processing that we perform on the basis of Art. 6 (1) (f) GDPR (on the basis of a balance of interests) for reasons relating to your particular situation. In particular, you may object to the use of your data for the purpose of direct marketing at any time with future effect.

Right of withdrawal

Once granted, you may withdraw your consent to us at any time and without stating the reason. Withdrawal of consent, however, shall not affect the legality of any processing done up to the time consent was withdrawn.

Assertion of rights

You may assert the aforementioned rights in writing to our company’s Data Protection Officer, whose name and contact details are listed under Section II.

Please note that, if any doubt exists as to whether you are seeking to assert the rights specified here as the data subject, we reserve the right to request more detailed proof of your identity as the actual data subject seeking to assert these rights.

Right to lodge a complaint with the data protection authority
In accordance with the requirements of Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your usual place of residence, place of work or place of the alleged infringement if you consider that the processing of your personal data violates the GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The data protection authority responsible for our company is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
(The State Commissioner for Data Protection and the Freedom of Information)
Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Germany
E-mail: poststelle@lfdi.bwl.de

VII. Scope of your obligations to provide data

In principle, you are under no obligation to provide us with your personal data. If you choose not to, however, we will not be able to provide you access to our website, answer your questions or enter into any contracts with you. Personal data that are mandatory are indicated with an asterisk (*); any other personal data you provide to us is done so on a voluntary basis.

VIII. Automated decision-making / profiling

We do not use automatic decision-making or profiling (automatic analysis of your personal circumstances).

Information about your right to object, Art. 21 GDPR

1. You have the right to object at any time to the processing of your data on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a balance of interests) or Art. 6 (1) (e) GDPR (data processing in the public interest) on grounds relating to your particular situation. This shall also apply with respect to profiling based on this provision within the meaning of Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
The objection does not need to be written in any special form and, if possible, should be sent to our company’s contact details as listed in Section I.

IX. Amendments

We reserve the right to update this Privacy Policy occasionally to ensure that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new Privacy Policy will then apply on your next visit. Unless stated otherwise, amendments of this nature shall take effect immediately. Therefore, please check this Privacy Policy on a regular basis to see the latest version.

 

Most recently updated in September 2018