Data protection information for applicants
1. Who is responsible for data processing and whom can I contact?
The entity responsible for data processing is:
a-connect (group) ag
Seefeldstrasse 293
8008 Zurich
Germany
Phone: +41 43 266 77 77
Email: privacy@a-connect.com
2. What sources and data are used?
We may process the following personal data in particular as part of our cooperation:
- Master data (first name, last name, date of birth, place of birth, education, professional background, special knowledge, etc.)
- Bank account data, VAT number, company registration
- Social security information (only if necessary in certain circumstances)
- Contact details, e.g. address, email, telephone numbers
- If necessary, other documents such as residence and work permits, validity dates of identity documents
- Correspondence exchanged with you (mail, email)
- Pictures that you provide to us or that are taken voluntarily by you or by us or our agents in the course of events of which you are a participant/attendee.
- Project history, sales, billing data, etc.
- Personal data that we are permitted to process from publicly accessible sources (e.g. commercial register, creditworthiness information).
As a rule, we receive the aforementioned data (with the exception of the last-mentioned point) directly from you. Should we receive the data from other sources, we will inform you about this separately.
3. What do we process the data for (purpose of processing) and on which legal basis?
We process your personal data on the basis of Art. 6 para. 1 lit. b GDPR for the initiation and execution of the contract with you and for the presentation and execution of your services to our customers, as well as on the basis of Art. 6 para. 1 lit. a GDPR in the event that you have given us separate consent, for example, for inclusion in our IP Database, as well as on the basis of Art. 6 para.1 lit. c GDPR for the fulfillment of our legal obligations, as well as according to Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the proper execution and documentation of our business activities.
After a possible end of our cooperation, we process your data on the basis of Art. 6 para. 1 lit. f GDPR for the necessary documentation of our cooperation, as well as for the assertion of or defense against legal claims.
4. Transfer to third parties
Within the scope of our cooperation, we may transmit your personal data to companies belonging to our group in Germany and abroad for the purpose of initiating and executing projects (group companies are listed on our website www.a-connect.com; list currently available under https://www.a-connect.com/get-in-touch/dach/?/get-in-touch/zurich/).
Your personal data will be transferred to (potential) customers of a-connect and its group companies if this is necessary in the context of the initiation and execution of projects. The necessity depends on your services and competence profile and the content of the respective order or project. For this purpose, a profile is created from the information you provide, which may include the following information: First name, last name, place of residence, photograph, professional history, special skills and your time availability. This profile is sent to our customers for consideration of a possible assignment.
To the extent permitted by law, we may also disclose your personal data to third parties outside our company. In particular, we may pass on data to service providers commissioned by us, as well as their subcontractors, insofar as this is necessary for the provision of the services (in particular data processors, shipping companies, credit institutions), as well as non-public and public bodies, insofar as we are obliged to transfer your personal data due to legal obligations.
5. Is data transferred to a third country or to an international organization?
A transfer of your personal data to countries outside the EU / EEA may take place. Some third countries are certified by the European Commission as having a level of data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection. If this is the case, we ensure that data protection is sufficiently guaranteed. This is possible through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates or approved codes of conduct. Please contact us if you would like more information on this.
6. How long will my data be stored?
We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations, or as long as we have a legitimate interest in storing it and this interest outweighs your interest in discontinuing the storage.
If the data are no longer required for the fulfilment of the processing purpose or contractual or legal obligations, they are regularly deleted, unless their temporary further processing is required for legal reasons or we have a legitimate interest in the further processing.
We store your data in the IP database until you revoke your consent or until its expiration date, if applicable. We store data on past cooperation for as long as we are subject to a legal obligation to retain this data and, if necessary, beyond this period, provided that we have a legitimate interest in retaining the data and this interest outweighs your interest in deletion.
The personal data that we must store to fulfill archiving obligations will be stored until the expiry of the respective archiving obligation. Insofar as we store personal data only to fulfill archiving obligations, the data is generally blocked so that it can only be accessed if it is necessary for the purpose of the archiving obligation.
7. What data protection rights do you have?
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You can revoke your consent to the processing of personal data at any time vis-à-vis the controller. This also applies to the revocation of declarations of consent given to us before the EU General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is therefore not affected by a revocation. Please note that even if you revoke your consent, we may continue processing – possibly to a reduced extent – on the basis of a statutory authorization. We will inform you of this in the event of a revocation of consent.
8. Is there an obligation for me to provide data?
The provision of your data to us is basically voluntary for you. However, we need to process certain data in order to be able to answer your application or to consider you for assignments, for example. If you do not provide us with the relevant data, we may not be able to process your request.
9. To what extent does automatic decision-making or profiling take place?
Automated decision-making including profiling does not take place.