Dear Talent,
In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law.
To ensure that you are fully informed about the processing of your personal data in the context of recording onboarding calls, please take note of the following information.
I. Controller within the meaning of Art. 4 No. 7 GDPR
Yoummday GmbH
Infanteriestrasse 11a/House E2
80797 Munich
Tel.: 089 231660000
Email: info@yoummday.com
Homepage: yoummday - work different
II. Contact details of the data protection officer of the controller
Björn Barthelmes
Karl-Frank-Straße 35
12587 Berlin
Email: datenschutz@yoummday.com
III. Type and scope of processing
The following personal data of you will be processed:
· Name
· First name
· E-Mail address
· Video recordings, incl. voice
· Your IP address
IV. Purposes and legal bases of processing
Your personal data will be processed for creating recordings of talent onboarding calls. These recordings serve the purpose of quality assurance within yoummday. The recordings will be used internally to optimize the onboarding flow from an operational perspective. The recordings will explicitly not be used for any automated decision making. The recordings will remain within yoummday’s internal infratstructure by using the tools as specified in V.
We process your data on the basis of your explicit consent in accordance with Art. 6 para. 1 s. 1 point a, Art. 7 GDPR. Consent that has been granted can be withdrawn at any time with effect for the future without stating reasons. Your rights deriving from this data processing by us will be explained in detail in section VII.
V. Recipients or categories of recipients of the personal data and transfer to third countries
Within our company, only those offices and departments receive your personal data that need it to fulfil the purpose stated in IV.
This includes:
· Our Board
· Our IT Department
· Our Talent-Marketplace Department
In addition, we use one external service provider for this:
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Irland
Microsoft Teams is used for the creation, storage and internal publication of the recordings.
Privacy policy: Microsoft Privacy Statement – Microsoft privacy
We have concluded a data processing agreement with the service provider in accordance with Art. 28 GDPR, also respecting Artt. 44 et seq GDPR.
VI. Duration of storage
The data will be deleted when it is no longer required for the above-mentioned purpose. This will be after 12 months, starting from the day of creation. If you revoke your consent, we will delete the relevant recordings immediately upon receipt of your request.
VII. Your rights
The following data subject rights as per Articles 15-21 GDPR may be exercised at any time.
Right to information in accordance with Art. 15 GDPR
You have the right to request confirmation as to whether personal data concerning yourself is being processed; if this is the case, you have the right to information about this personal data in accordance with Art. 15 GDPR.
Right to rectification in accordance with Art. 16 GDPR
You have the right to obtain -without undue delay- the rectification of inaccurate personal data concerning yourself. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR
Taking into account Art. 17 para. 3 GDPR, you have the right to demand that personal data concerning yourself will be deleted immediately.
Right to restriction of processing in accordance with Art. 18 GDPR
You have the right to demand the restriction of processing your personal data in accordance with Art. 18 GDPR.
Right to notification in accordance with Art. 19 GDPR
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
Right to data portability in accordance with Art. 20 GDPR
You have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, provided that Art. 20 para. 1 lit. a or lit. b GDPR applies.
Right to lodge a complaint with a data protection supervisory authority
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
The data protection supervisory authority responsible for us is the
Bavarian State Data Protection Authority (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de
Right to withdraw consent
In accordance with Art. 7 para 3 GDPR, you have the right to withdraw your consent to the use of your personal data at any time. Processing that took place before the withdrawal is not affected by this, i.e. the withdrawal is effective for the future. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal obligations (see VI. of this privacy notice).
Right of objection
Insofar as your personal data is processed in accordance with Art. 6 para. 1 s. 1 point f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must
outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us at privacy@yoummday.com