The following is a translation of the German Privacy Policy of GIROMATCH GmbH. In case of any ambiguities between the German and English versions of the Privacy Policy, terms should be understood to refer to their German equivalent and shall be interpreted according to German law.
I. General information
The website www.giromatch.com (“website”) is an offer by GIROMATCH GmbH (hereinafter also referred to as “GIROMATCH” or “we”/”us”).
Below, we inform you about the handling of your personal data. When you use our website and the services provided on our website, personal data is processed.
Because the protection of your privacy is important to us, we want to provide you with comprehensive information about how we process your personal data.
You can access this privacy policy at any time under the “Privacy” section at www.giromatch.com/datenschutz on our website.
A preliminary note: Of course, we comply with the legal provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other data protection regulations.
II. Name and Address of the Controller
GIROMATCH is the controller for your personal data processed through the use of this website.
GIROMATCH GmbH
represented by the managing directors Daniel Conradt, Sascha Wolf
Ludwigstraße 33
60327 Frankfurt a. M. Germany
Phone: +49 69 975 3535 00
Fax: +49 69 975 3535 09
Email: info@giromatch.com
For questions and the exercise of your data subject rights, please contact us at:
Ludwigstraße 33
60327 Frankfurt a. M.
Germany
Email: datenschutz@giromatch.com.
III. Processing of Personal Data
1. Provision of the Website and Creation of Log Files
a) Description and Scope of Data Processing
Whenever our website is accessed, the following data, which your browser transmits, is automatically stored for technical reasons:
Information about your browser type and version The operating system you are using The website from which you visit us (referrer URL) Your IP address Date and time of your visit Our system stores your personal data in log files. This data is not stored together with other personal data concerning you.
b) Legal Basis for Data Processing
The legal basis for the temporary processing of data and log files is Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
The temporary processing of your IP address by our system is necessary to enable the provision of the website on your device. Furthermore, we use your personal data to optimize our website and ensure the security of our IT systems. Your data is not processed for marketing purposes.
This also constitutes our legitimate interest in data processing.
d) Duration of Storage
The aforementioned personal data will be deleted as soon as it is no longer necessary to achieve the purpose of its processing. This is the case for the processing of data for the provision of the website when the respective session is terminated.
Regarding the processing of IP addresses in log files, they are deleted after 30 days. Extended storage is only possible if your IP address is deleted or anonymized so that it is no longer possible to identify you.
e) Right to Object and Erasure under Art. 21 GDPR
There is no option to object to this data processing since the processing of data is necessary for the provision of the website.
2. Cookies
a) Description and Scope of Data Processing
We use cookies on our website to recognize you as a user and facilitate your use of our site. Cookies are small text files that are installed by your internet browser on your device. Often, they are so-called “session cookies” that are deleted after your session ends.
Other cookies remain installed on your device until you remove them. These installed cookies allow us to identify your web browser during your next visit.
You can also configure your web browser to inform you about the installation of cookies. In the settings, you can choose whether cookies should only be allowed in individual cases, only installed in certain cases, not accepted at all, or automatically deleted when you close your web browser. If you choose to disable cookies, it may restrict the use of the website.
We use cookies on our website to make it more user-friendly for you. Some elements of our website require that your web browser can be recognized even after a page change.
The following data is stored and transmitted in the cookies:
- Information entered in input forms
- Read cookie notice and save cookie settings
b) Legal Basis for Data Processing
The legal basis for processing your personal data using cookies is Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
We use technically necessary cookies to optimize the use of the website for you. Otherwise, we would not be able to offer you certain functions of our website, as it is necessary for your web browser to be recognized after a page change.
The use of cookies is necessary for the following applications:
- Remembering information in the input mask
- Automatically hiding the read cookie notice and saving the cookie settings
- Remembering search terms
- Allocation of session data
These purposes also constitute our legitimate interest in processing your personal data. We do not use the personal data collected through technically necessary cookies to create user profiles.
d) Duration of Storage, Right to Object and Erasure
Cookies are stored on the user’s computer and transmitted to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Stored cookies can be deleted at any time, including automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.
3. Submitting an Inquiry for the Mediation of Products and Services, Especially Loans (Matching) and Conducting the Matching Process
a) Description and Scope of Data Processing
On our website, we provide you with the opportunity to submit an inquiry for the mediation of products (e.g., payment cards or accounts) or services (e.g., loans) offered by our cooperation partners by providing your personal data (Matching). The following personal data is processed based on the individual inquiry through an input form:
- Possibly, the amount needed in euros
- Possibly, desired loan term
- Possibly, information about what is important to you in a loan
- Your personal situation (citizenship, date of birth, place of birth, marital status, residential status)
- Your address (main residence, postal code, possibly street, possibly house number, possibly country)
- Your contact information (email address, possibly mobile phone number)
- Your employment situation (employment status, possibly educational degree, possibly employer, possibly profession)
- Your financial situation (monthly net income, possibly day of salary receipt, monthly rent, possibly alimony payments, possibly existing loan installments)
- Possibly, your IBAN, bank, BIC
- Indication of whether you own a car Indication of whether you have a negative credit history or record
- Possibly, additional personal data that you provide us within the inquiry
- The specific personal data processed in each case depends on the chosen Matching process and is based on the respective input form.
By submitting your inquiry on this website, we will also store your IP address, the date, and the time of your inquiry.
b) Legal Basis for Data Processing
The processing of the aforementioned personal data is necessary for the initiation and fulfillment of the contractual relationship that you enter into with us through this Matching function. The legal basis for the processing of your personal data is Art. 6(1) sentence 1 letter b GDPR.
The collection and storage of your IP address, date, and time of your inquiry are based on Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
The personal data collected via the input form is necessary to initiate the contractual relationship and to carry out and fulfill the Matching contract concluded with you.
We process your IP address, date, and time of your inquiry for our own security in case a third party registers on our website without your knowledge or abuses your personal data. This also constitutes our legitimate interest in processing your IP address. Data will not be disclosed to third parties or compared with data collected by other website services.
d) Duration of Data Processing
As soon as your personal data is no longer necessary for the aforementioned purpose, it will be deleted immediately.
This usually occurs after the expiration of the statute of limitations, starting at the end of the year in which the Matching contractual relationship is terminated. After the statute of limitations has expired, your data will be blocked and deleted after the expiration of the statutory retention obligations. In case of contractual or legal retention obligations, further storage of personal data may be necessary even after the contract has been concluded. Deletion of the data will then take place after the retention obligations have expired.
The IP address, date, and time of your inquiry collected when submitting the inquiry are usually deleted after 30 days.
e) Right to Object and Erasure under Art. 21 GDPR
There is no option to object to the processing of your IP address since the processing of the data is necessary for the prevention and tracing of abuse.
f) Recipients
The aforementioned data is passed on to our cooperation partners who offer the mediating products or services. The specific cooperation partner to whom the data is transferred depends on the chosen Matching process.
You can find a list of our cooperation partners here.
4. Use of Affiliate Marketing
a) Description and Scope of Data Processing
On our website and in emails sent by us, we provide product and service-related information from cooperation partners and other providers through links. If this involves advertising for products and services of our cooperation partners in the form of affiliate marketing, we receive a commission from the respective cooperation partner in the event of a successful referral of such a product, service, or successful registration of a new customer.
We make use of the following types of affiliate marketing:
- Pay-per-lead: With pay-per-lead, we receive a commission from our cooperation partner when you successfully register on the cooperation partner’s website using the affiliate link provided to you on our website or in an email sent by us, as part of the matching process.
- Pay-per-sale: With pay-per-sale, we receive a commission from our cooperation partner when you purchase a product or use a service of the cooperation partner by using an affiliate link provided to you on our website or in an email sent by us, as part of the matching process.
When you click on the affiliate link, you will either be directed to the website of the respective cooperation partner or through an affiliate platform that we cooperate with. We work with the following affiliate platforms:
- financeAds GmbH & Co. KG, Karlstraße 9, 90403 Nürnberg (“financeAds”)
- netzeffekt GmbH, Theresienhöhe 28, 80339 München (“FinanceQuality“)
- Adtraction Deutschland GmbH, Oderberger Str. 13, 10435 Berlin („Adtraction“)
- Adservice A/S, Rosenkrantzgade 23, DK-8000 Aarhus C (“Adservice”)
- AWIN AG, Landsberger Allee 104 BC, 10249 Berlin (“AWIN“)
- Daisycon, Alter Stadthafen 3b, 26122 Oldenburg („daisycon“)
- Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin („Firstlead“)
- Impact Germany GmbH, Friedrichstraße 68, 10117 Berlin (“Impact”)
aa) Direct Referral to Cooperation Partners
A lead link that takes you directly to the website of a cooperation partner via an interface, without going through an affiliate platform, contains a lead ID. This lead ID identifies us as an affiliate of the respective cooperation partner. The website of the cooperation partner recognizes our lead ID.
After generating the lead link, you will be directed to the subpage of the cooperation partner’s website that contains the offer promoted by us. If you successfully complete the lead or sale as mentioned above, we receive our commission from the respective cooperation partner for the successfully completed registration or ordering process.
bb) Referral to Cooperation Partners via Affiliate Platforms
If, on the other hand, you are directed to the website of the cooperation partner through an affiliate platform, the affiliate platform’s system may set a cookie. Depending on the specific affiliate platform, the following data is stored and transmitted in the cookie:
- Information about the duration of stay and interaction with our website
- Possibly your IP address
- Possibly a user hash or click ID
- Possibly the date and time of clicking the affiliate link
The data about clicking the affiliate link is stored by the affiliate platform.
The detour through the affiliate platform is usually not visible to you. From your perspective, you are directly redirected to the website of the cooperation partner. If you successfully complete the lead or sale, a code of the affiliate platform is called up as part of the registration or ordering process. This code allows the affiliate platform to read the data stored in the cookies. Based on this data, the affiliate platform can associate that you have arrived at the cooperation partner’s website from our website. If the registration or ordering process is successfully completed, we receive our commission.
cc) Referral to Our Website through a GIROMATCH Affiliate Link
There is a possibility that you may access our website through an advertisement placed by a GIROMATCH affiliate. In such a case, we may set a cookie.
After the pixel is set, you will be directed to the subpage containing the service offering that was promoted by the GIROMATCH affiliate. The processes described under aa) and bb) then follow. If you successfully complete a lead or sale, we and the respective GIROMATCH affiliate may receive a (partial) commission.
b) Legal Basis for Data Processing
The legal basis for processing your personal data in the context of affiliate marketing is Article 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
The processing of your personal data in the context of affiliate marketing serves to track whether you have successfully completed a lead or sale on the website of the cooperation partner. We need this information to enforce the commissions owed to us by our cooperation partners or the affiliate platforms. The goal is not to identify you as an individual, but to attribute the leads or sales you have completed to our referral activity. These commissions enable us to provide the service offering on our website to you free of charge.
Furthermore, the processing of your IP address serves the purpose of fraud detection.
Our legitimate interest in processing your personal data is also based on these purposes.
d) Duration of Storage
Personal data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The data stored in the context of affiliate marketing is deleted after a technically defined deletion cycle of no later than 30 days.
e) Right to Withdraw Consent under Article 7 GDPR and Right to Object and Erasure under Article 21 GDPR
You have the right to withdraw your consent for the processing of your personal data at any time. Since cookies are stored on the user’s computer and transmitted to our website, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some functions of the website may no longer be fully usable.
You also have the option to object to the processing of your IP address by sending an email to datenschutz@giromatch.com, particularly when it comes to personal data that is not stored in cookies.
f) Recipients
The aforementioned data is shared with our cooperation partners or financeAds and FinanceQuality. The specific recipients of the data depend on the specific affiliate marketing process used.
A list of our cooperation partners can be found here.
5. Registration Function after Matching Process
a) Description and Scope of Data Processing
On our website, we provide you with the opportunity to use your personal data provided for the matching process described in item 3. for registration on our website. This enables you to easily repeat the matching process without having to enter necessary but consistent data again. Instead, you can store this data in a registration profile and reuse it for future matching inquiries. Therefore, the data processed during registration corresponds to the data you entered into the respective input mask during the individual matching inquiry. Additionally, we process the password you choose during the registration process.
By registering on this site, we also store your IP address and the date and time of your registration.
b) Legal Basis for Data Processing
The legal basis for processing your personal data for the purpose of registration is your consent under Article 6(1) sentence 1 letter a GDPR.
The legal basis for the collection and storage of your IP address and the date and time of your registration is Article 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
The personal data provided in the voluntary registration function is processed exclusively for the purpose of storing your data on our website. This allows us to facilitate and expedite the repetition of the matching process. Consistent data (such as your email address) does not need to be re-entered for subsequent matching inquiries but can be retrieved from your registration profile.
We process your IP address and the date and time of your registration for our security in case a third party registers on our website without your knowledge or misuses your personal data. Our legitimate interest in processing your IP address is also based on this.
d) Duration of Storage
As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted immediately. This is the case for data collected during the registration function based on your consent if you cancel or modify the registration on our website.
The IP address, date, and time of your registration, collected during the registration process, are usually deleted after seven days.
e) Right to Withdraw Consent under Article 7 GDPR and Right to Object and Erasure under Article 21 GDPR
You have the right to revoke your consent and request the erasure of your personal data at any time. For this purpose, there is an unsubscribe button within the registration profile. You can also make changes to your personal data through the profile. The revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.
There is no option to object to the processing of your IP address since the processing of the data is necessary for fraud prevention and detection purposes.
6. Google Analytics with anonymization function and remarketing
a) Description and Scope of Data Processing
On our website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, (“Google”). Google Analytics uses cookies, which are text files placed on your device to analyze your behavior when using our website.
By activating IP anonymization on this website, your IP address will be shortened within the member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google.
We also use the remarketing function of Google within Google Analytics. This allows us to assign you to a specific remarketing audience and display tailored advertising to you. The assignment is based on your behavior on our website (e.g., viewing products on our website). A cookie or the advertising ID of your device is added to the audience based on your behavior on our website to display relevant advertising. For more information, please refer to the following link:
https://support.google.com/analytics/answer/2611268
The following categories of personal data are processed when using these services:
- Online identifiers, including cookie identifiers
- IP addresses and device identifiers
- Advertising ID
This data is collected and stored in pseudonymous form. Google will process the information obtained from cookies to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage. As part of this process, personal data is transferred to the USA. To ensure an adequate level of data protection, we have entered into a data processing agreement with Google that includes standard contractual clauses.
For more detailed information on the terms of use and privacy of Google Analytics, please visit https://policies.google.com/privacy.
b) Legal Basis for Data Processing
The legal basis for processing your personal data is your consent under Art. 6(1) sentence 1 letter a GDPR.
c) Purpose of Data Processing
We use Google Analytics with cross-device tracking enabled, which is made possible by a unified user ID. This allows us to link interaction data from different devices and sessions with a unique ID and perform more accurate visitor analysis. For more information, please refer to the following link:
https://support.google.com/analytics/answer/3123662
We use Google Analytics Remarketing to display personalized advertising to you.
d) Duration of Storage
The user and event data relevant for analyzing website usage have a preset storage duration of 16 months. Additionally, you can independently uninstall the cookies installed by Google Analytics and delete the stored data. Instructions on how to delete cookies through browser settings are provided in the following point.
e) Right to Withdraw Consent under Art. 7 GDPR
You have the right to withdraw your consent to the processing of your data at any time under Art. 7 GDPR. To do so, please contact us by sending a message to datenschutz@giromatch.com. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon withdrawal, your personal data will no longer be processed and will be deleted.
You are free to prevent the installation of cookies by adjusting your browser software accordingly. Google provides a browser add-on for the most common browsers, which gives you more control over the data collected by Google Analytics regarding the websites you visit. The add-on informs the Google Analytics JavaScript (ga.js) not to transmit information about website visits to Google Analytics. However, the Google Analytics browser add-on does not prevent information from being transmitted to us or other web analytics services we may use. For more information on installing the respective browser add-on, please visit the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
7. Newsletter
a) Description and Scope of Data Processing
On our website, we offer you the opportunity to subscribe to our free newsletter. In order to send the newsletter to you, we require the following personal data during the registration process:
- Email address
- Optional: salutation, last name, first name
We also process your IP address, the date, and time of your registration. No further data is processed. During the registration process, we obtain your consent to the processing of your personal data.
We send our newsletter using the services of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin (“Sendinblue”), which acts as our data processor. The data provided and stored by you during the newsletter registration is sent to a server operated by Sendinblue in Germany and stored there on our behalf.
We use this data solely for the purpose of sending you the subscribed newsletters and do not share it with third parties. The collected data is not compared with other data that may be collected through other components of our website.
During the registration process, we obtain your consent to the processing of your personal data.
b) Legal Basis for Data Processing
The legal basis for processing your personal data after subscribing to the newsletter is your consent under Art. 6(1) sentence 1 letter a GDPR.
The legal basis for the collection and storage of your IP address and the date and time of your registration is Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
The processing of the email address is carried out for the purpose of sending you the newsletter. We verify the email address you provided to ensure that you are the actual owner or that the owner of the email address has consented to receiving the newsletter.
We process your IP address, as well as the date and time of your registration, for our security in case a third party registers on our website without your knowledge or misuses your personal data. Our legitimate interest in processing your personal data is also based on these purposes.
d) Duration of Storage
Personal data will be deleted as soon as it is no longer necessary for the purpose for which it was collected, i.e., when you unsubscribe from the newsletter. After unsubscribing, we store a hash value of your email address on a blacklist. This hash value represents a checksum calculated from the character string of your email address. By appending another random character string to your email address before calculating this checksum, it is nearly impossible to reverse-engineer your email address. Consequently, this hash value cannot be used to infer your email address or your identity. This approach allows us to ensure that you will not receive any unwanted newsletters from us in the future, even without further storage of your email address. After performing the hashing procedure, your email address will be deleted immediately or blocked for newsletter distribution if it may be further processed for another purpose.
The other data collected during the registration process, such as your IP address and the date and time of your registration, are usually deleted after 30 days.
e) Right to Withdraw Consent under Art. 7 GDPR
You have the right to withdraw your consent to the processing of your data, the use of your data for newsletter delivery, and the subscription to the newsletter at any time under Art. 7 GDPR. To do so, you can click on the unsubscribe button included in every newsletter. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon withdrawal, your personal data will no longer be processed, and it will be deleted or blocked.
f) Right to Object and Erasure under Art. 21 GDPR
There is no possibility to object to the processing of your IP address as the processing of this data is necessary for the prevention and tracking of misuse.
8. Newsletter Tracking through the Use of Brevo (formerly Sendinblue)
a) Description and Scope of Data Processing
Our email newsletter contains so-called “web beacons” (pixel tags) from Brevo. These are pixel-sized image files that, when the newsletter is opened, collect certain data such as the time of access, your IP address, information about the email program used, and which link you followed, and send it to a server of Brevo. The name of the image file is individualized for each newsletter recipient by appending a unique ID. This allows us to associate each ID with an email address. Based on this data, Brevo compiles a report for us, which enables us to determine whether and when you opened our newsletter and which link contained in the email you followed.
As part of this, there is a general possibility that personal data may be transferred to subprocessors in the USA or India. To ensure an adequate level of data protection, we have concluded a data processing agreement with Brevo, which includes standard contractual clauses.
b) Legal Basis for Data Processing
The legal basis for processing your personal data after subscribing to the newsletter is your consent pursuant to Art. 6(1) sentence 1 letter a GDPR.
c) Purpose of Data Processing
We use this information to continuously improve our newsletters and tailor them to your personal preferences and needs.
d) Storage Duration
The personal data will be deleted when it is no longer necessary to achieve the purpose for which it was collected. Therefore, we delete your personal data that has been stored in connection with the use of web beacons when you unsubscribe from the newsletter. We have no influence on the use and storage of your data by Brevo. For further information, please refer to Brevo’s privacy policy using the following links:
https://www.brevo.com/en/privacy-overview/
https://www.brevo.com/en/gdpr/
e) Right of Withdrawal according to Art. 7 GDPR
You have the right to withdraw your consent to the processing of your data using web beacons at any time in accordance with Art. 7 GDPR. You can revoke your consent by clicking on the unsubscribe button, which is included in every newsletter. The legality of the processing carried out based on the consent until revocation is not affected by the revocation. In the event of revocation, your personal data will no longer be processed.
On our website, we provide you with an email address through which you can contact us. For this purpose, the personal data transmitted by you via email will be processed for the purpose of handling your request.
9. Contact via Email
a) Description and Scope of Data Processing
The following data is collected at the time of your inquiry:
- Your email address
- Possibly additional personal data provided in the email
At the time of sending your inquiry, the date and time of your inquiry are also processed.
No disclosure to third parties takes place.
b) Legal Basis for Data Processing
The legal basis for processing your data transmitted in the course of sending an email is Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
We process your personal data solely for the purpose of processing your inquiry and contacting you.
The processing of other personal data during the sending process is for our protection in case the provided contact options are abused or our IT systems are affected by the contact. No further data is collected by us. These purposes also constitute our legitimate interest in processing your personal data.
d) Duration of Storage
We delete your personal data when it is no longer necessary for the purpose of processing.
For personal data transmitted to us in the context of your contact via email, this is the case when the respective conversation with you is concluded. The conversation is deemed concluded when it can be inferred from the circumstances that the matter in question has been resolved.
The additionally processed personal data during the sending process is deleted after a period of seven days.
e) Right to Object and Erasure under Art. 21 GDPR
You have the right to object to the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please address your objection to: datenschutz@giromatch.com. In this case, the personal data processed during the communication will be deleted.
10. Online application for the GIROMATCH Scholarship
a) Description and Scope of Data Processing
On our website, we occasionally offer you the opportunity to apply for one of our GIROMATCH scholarships. For this purpose, the information you provide is transmitted to us for the purpose of processing your application.
The following data is collected at the time of your inquiry:
- Your first and last name
- Your proof of enrollment
- Your email address
- Possibly additional personal data provided in your application or evident from the application
At the time of sending your inquiry, the date and time of sending your application are also processed.
b) Legal Basis for Data Processing
The legal basis for processing your personal data is your consent under Art. 6(1) sentence 1 letter a GDPR.
The legal basis for the collection and storage of your IP address and the date and time of your inquiry is Art. 6(1) sentence 1 letter f GDPR.
c) Purpose of Data Processing
We process your personal data solely for the purpose of processing your application and notifying selected scholarship recipients.
The processing of other personal data during the inquiry is for our protection in case the application opportunity is abused or our IT systems are affected by the application. No further data is collected by us. Our legitimate interest in processing your personal data is also based on these purposes.
d) Duration of Storage
We delete your personal data when it is no longer necessary for the purpose of processing. For personal data transmitted to us as part of your online application, this is the case when you withdraw your consent to the processing of your personal data or when the respective GIROMATCH scholarship is completed, whichever occurs earlier. After the completion of the GIROMATCH scholarship, the personal data of all applicants will be promptly deleted.
e) Right to Withdraw Consent under Art. 7 GDPR
You have the right to withdraw your consent to the processing of your data at any time under Art. 7 GDPR. To do so, please contact us by sending a message to datenschutz@giromatch.com. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon withdrawal, your personal data will no longer be processed and will be deleted.
11. Job Application via Email
a) Description and Scope of Data Processing
We offer you the opportunity to apply for a job opening with us via email. At the time of your application, we collect and process the following personal data:
- First and last name
- Place of residence
- Date of birth
- Email address
- Language skills
- Highest educational qualification
- Current job title
- Any other information provided in your tabular resume If we subsequently enter into an employment contract with you as a result of the application process, your personal data will be further processed for the purpose of employment.
b) Legal Basis for Data Processing
The legal basis for processing your personal data is Art. 6(1) sentence 1 letter b, Art. 88 GDPR in conjunction with § 26(1) BDSG. Your data is necessary for the performance of pre-contractual measures, namely the decision on the establishment of an employment relationship.
c) Purpose of Data Processing
We process your personal data solely for the purpose of handling the application process.
d) Duration of Storage
Personal data will be deleted when it is no longer necessary for the purpose of processing.
If no employment relationship is established, your data will be deleted within three months after receipt of the rejection, unless there are legitimate interests preventing deletion. A legitimate interest exists in the event of a legal dispute.
e) Consequences of not providing your personal data
You are not obliged to provide your data for the aforementioned purposes. If you choose not to provide your data, we will terminate the application process with the result that an employment relationship cannot be established at that time.
IV. Your Rights as a Data Subject
If your personal data is processed by us, you are a data subject within the meaning of the GDPR, and you have the following rights against us:
Right of Access You have the right to request information from us at any time about your personal data processed by us. This includes information about the origin, recipients or categories of recipients to whom we transmit your data, as well as the purposes for which we process your personal data.
Right to Rectification
You have the right to demand the prompt rectification and/or completion of your personal data stored by us if your personal data is inaccurate or incomplete.
Right to Erasure or Restriction of Processing
You can request the immediate deletion of your personal data. We are obliged to delete the data immediately. This does not apply if we are obligated to further process your personal data due to contractual and/or legal regulations. For example, this is the case if tax retention obligations prohibit deletion. In such a case, we will restrict processing and delete the personal data in question immediately after the retention period has expired.
Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, provided that it is technically feasible. You also have the right to transmit this data to another controller without hindrance from us, if you so wish.
Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR or the BDSG. The competent supervisory authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (The Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1,
65189 Wiesbaden
Postfach 31 63,
65021 Wiesbaden
Telephone: (0611) 14 08-0
Fax: (0611) 14 08-900
poststelle@datenschutz.hessen.de
