We use cookies and other technologies on our website to make the use of our website more attractive, user-friendly and effective. We use technically necessary cookies to guarantee the error-free functionality of our website. In addition, we use cookies and other technologies to optimize our website and marketing efforts. For example, we monitor the success of our campaigns with the help of tracking tools. Click "Allow All" to save all saved cookies. You can change your cookie settings at any time. Details are available here: Data Privacy Notice.
General
When you visit our website, cookies and other technologies store and read information on your device. This also includes personal data such as your IP address. Information about your browser, settings and device can also be retrieved.
We use this information to provide you with a graphically accurate display and user-friendly operation of the website. We also use this information to optimize our marketing activities and our online presence.
More information about the individual cookies and technologies is available under the corresponding tabs as well as in our Data Privacy Notice.
These cookies are necessary to provide error-free content and for the technical performance of the website. These are used to control specific functions on the website and make them available to you. These cookies are necessary for visiting the website and cannot be deselected.
Analysis
We use various cookies and technologies on our website to analyze visitor behavior, such as the length of time spent on our website. We use the services of Google Analytics for this analysis.
Google Analytics collects and stores visitor data such as IP address, time of visit, referrer URL and information about your browser and operating system. Google stores this data for a maximum of 14 months. The collected data may be summarized by Google in a profile that is assigned to you or your device.
More information about our use of Google Analytics is available in our Data Privacy Notice.
We would like to inform you explicitly that the collected data will be transmitted to the United States if you consent to this process.
The level of data privacy in the USA is lower than in EU countries. This means that there is a risk that your data may be accessed by a U.S. government agency (intelligence agencies, for example) if it invokes the appropriate legal remedy.
To protect your data from our site as much as possible, we use Google's IP anonymization. By agreeing to the use of Google Analytics, you consent to the transfer of data to the USA pursuant to Art. 49 para. 1 lit. a) GDPR and are aware of the risks of such a transfer. The legal basis for the processing of this data is Art. 6 para. 1 lit. a) GDPR (consent).
You can change your settings at any time. More information about Google Analytics and its data privacy is available at: https://policies.google.com/technologies/cookies
Marketing
We use the conversion tracking feature of LinkedIn to better customize our advertising offers and campaigns. This conversion tracking is enabled by the LinkedIn Insight Tag. This collects user data from your device, including the URL, the referrer URL, the device properties, the browser properties, and the IP address. Your data will be pseudonymized by LinkedIn within seven days and deleted within 180 days. The personal data collected is not shared with us, we only receive anonymous reports on the demographics of our target audience and the performance of our ads.
Your data will only be transmitted after your consent pursuant to Art. 6 para. 1 lit. a) GDPR.
More information about LinkedIn Conversion Tracking is available in our Data Privacy Notice.
What's yours is yours:
Data privacy at blu BEYOND
We take the privacy of your data very seriously. After all, your sensitive and personal data should not be accessible to everyone. Read here what we do to ensure the security of your data.
If you have any questions on the subject of data privacy, please do not hesitate to contact us at any time.
Data Privacy Notice
This data privacy notice explains how personal data is collected, processed and used during and after your use of our website, what types of data this concerns, why such data is collected, with whom it is shared and what rights you have in this regard.
Please read this notice carefully.
Definition of terms
We have designed our data privacy notice in accordance with the principles of the GDPR, see here Art. 5 GDPR. However, if there is any ambiguity regarding the use of terms, you can view the relevant definitions here.
Name and address of the Controller
blu BEYOND GmbH
Rechtlicher Vertreter: Michael Büsch
Keltenring 11
82041 Oberhaching
Deutschland
Telefon: +49 89 244 116 600
E-Mail: info@blu-beyond.com
Website: https://www.blu-beyond.com
External Data Protection Officer
blu Systems GmbH
Data Protection Officer
Keltenring 11
82041 Oberhaching
Germany
Phone: +49 89 9192 9056 0
E-mail: dsb@blusystems.de
Website: https://blusystems.de/
Storage duration and deletion
Unless a more specific storage period has been specified in this data privacy notice, your personal data will remain with us until the purpose or legal basis for the data processing no longer applies. If you submit a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
Provision of the website and creation of log files
When you visit our website, the browser used on your terminal device automatically sends data to our website server. This data is stored temporarily in a log file. The following information is collected without your interaction and stored until automatically deleted:
- IP address of the accessing computer.
- Date and time of the access.
- Name and URL of the accessed file.
- Website from which the access was made.
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process the above data for the following purposes:
- To ensure smooth connection to the website.
- To ensure convenient use of the website.
- To evaluate system security and stability.
- Error analysis.
- For other administrative purposes.
The legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest derives from the data collection purposes listed above. In no event do we use the collected data for the purpose of identifying you.
The legitimate interest for this data processing is as follows: The integrity and security of the website, which is carried out by Security through the collection of logs, in particular IP addresses, in order to detect potential misuse at an early stage and to be able to take measures to reduce the damage.
Your personal data will be stored with our provider, with whom a processing contract has been concluded pursuant to Art. 28 GDPR.
SSL encryption
For security reasons, our website uses SSL encryption. This protects transferred data and prevents unauthorized third parties from viewing it.
An encrypted connection can be recognized by the fact that the address line of the browser changes from “http://” to “https://” and by the lock icon visible on the left in your browser bar.
Cookies
We use cookies to make the use of our website more attractive, user-friendly and effective. Cookies are small text files that are stored on your terminal device and which include information about the websites visited. Cookies do not cause any damage to your computer, nor do they contain viruses.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie, or generally reject them, as well as arrange for the automatic deletion of cookies when closing the browser window. If you disable cookies, you may not be able to use all the features of our website.
Necessary Cookies
| blu-beyond.com | sessionid (14 days) | The purpose of this cookie is to recognize the user. How the cookie is used specifically can be defined by the site operator. |
| blu-beyond.com | django_language (session duration) | The purpose of this cookie is to store the selected language of the visitor. |
| blu-beyond.com | cookiesSet (session duration) | The purpose of this cookie is to save the cookie settings. |
| blu-beyond.com | XSRF-TOKEN (1 day) | The purpose of this cookie is to ensure the security of the website and the visitor. |
| blu-beyond.com | In_or (1 day) | The purpose of this cookie is to recognize the cookie settings. |
Analysis & Marketing
| blu-beyond.com | _ga (2 years) | Used to count and store page views. |
| blu-beyond.com | _gid (24 hours) | Used to distinguish between different visitors. The purpose is to collect data on how the user navigates pages on the website. |
| blu-beyond.com | _gat (1 minute) | Used to throttle the request rate. |
| blu-beyond.com | _ga_HPRPJBSZVV (2 years) | A custom Google Analytics cookie used to store and track user interactions. It stores specific campaign data for Google Analytics 4. |
| blu-beyond.com | analytics (session duration) | The purpose of this cookie is to detect whether analytics options are enabled in the cookie banner. |
| blu-beyond.com | marketing (session duration) | The purpose of this cookie is to detect whether marketing options are enabled in the cookie banner. |
Third Party Cookies
| doubleclick.net | IDE (1 year) | Used to record and report the user’s actions on the website after viewing or clicking on one of the provider’s advertise-ments, with the purpose of measuring the effectiveness of an advertisement and displaying targeted advertisements to the visitor. |
| .kununu.com | kununu_country_ip (1 hour) | The purpose of this cookie is to display our Kununu rating. The geographical location is also determined to show relevant content. |
| .kununu.com | kununu_country (1 hour) | The purpose of this cookie is to display our Kununu rating. The geographical location is also determined to show relevant content. |
| www.kununu.com | kununu_op (1 year) | The purpose of this cookie is to display relevant job ads and analyze clicks on job ads to make advertising more suitable. |
| www.kununu.com | Kununu (end of session) | The purpose of this cookie is to display relevant job ads and analyze clicks on job ads to make advertising more suitable. |
| linkedin.com | BizographicsOptOut (10 years) | Used to determine the opt-out status of non-members. |
| linkedin.com | AnalyticsSyncHistory (30 days) | Used to store information about the time a synchronization took place |
| linkedin.com | UserMatchHistory (30 days) | Used to synchronize the IDs of LinkedIn Ads |
| linkedin.com | lang (session duration) | Used to remember a user's language setting. This displays the LinkedIn.com website in the desired language. |
Data transfer to the United States and other third countries
Among other things, we use tools from companies based in the United States or other third countries that do not provide secure data privacy. When these tools are active, your personal data may be transmitted to and processed in these third countries. We would like to point out that no level of data privacy comparable to that in the EU can be guaranteed in these countries. For example, U.S. companies are required to hand over personal data to security authorities without you, the data subject, being able to take legal action against this. Therefore, it cannot be ruled out that U.S. authorities (e.g. intelligence agencies) may process, evaluate and permanently store your data located on U.S. servers for monitoring purposes. We have no influence on these processing activities.
Contacting the company
You can contact us at any time. We have the following tips to share with you:
General contact options
You can contact us by
- Phone
To process your contact request, we will need to store your communication data (e.g. telephone number, e-mail address) and identification data (e.g. name, address).
For this purpose, the legal basis of Art. 6 para. 1 lit. b) GDPR applies only if the contact is based on a contract initiation, or implementation or amendment of an existing contractual relationship.
For all other cases of contact, the processing is based on the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR of the company.
The legitimate interest for this data processing is as follows: As a company we pursue the economic interests of individualization as well as optimization of our products, which are declared as economic factors of the company.
Microsoft Teams
We use Microsoft Teams, a service of the provider Microsoft Corporation, to conduct telephone and video conferences, online meetings and/or online seminars. If online meetings/online seminars are to be recorded, we will inform you of this before the start of the online meeting/online seminar and - if necessary - ask for (verbal) consent. If you do not wish to be recorded, you can leave the online meeting/online seminar. The following personal data may be processed in the process:
- User details: Display name, e-mail address, profile picture (optional), preferred language.
- Meeting metadata: for example, date, time, meeting ID, phone number, location.
- Text, audio and video data: Where applicable, you have the option of using the chat function in an online meeting/online seminar. In this case, the text entries you make are processed in order to display them in the online meeting/online seminar.
The scope of the data depends on the information you provide before or during participation in the online meeting/online seminar. The transfer of data to the United States is based on the standard contractual clauses of the EU Commission pursuant to Art. 46 para. 2 lit. c) GDPR.
Legal basis for online meetings
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. During an online meeting, the login names of all participants as well as the generated communication content are displayed and can be viewed by the other participants of the online meeting. The communication content is stored for documentation purposes. If necessary, the online meeting will be recorded and subsequently made available to the participants.
Legal basis for online seminars
The legal basis for the processing is our legitimate interest in the appealing design of our online seminar, Art. 6 para. 1 lit. f) GDPR.
During an online seminar, the login names of all participants as well as the generated communication content are displayed and can be viewed by the other participants of the online seminar. The communication content is stored for documentation purposes. If necessary, the online seminar will be recorded and subsequently made available to the participants.
White paper
We offer white papers on our website, which you can download. In this context, your personal data (e-mail, last name and first name) is processed. It is processed for statistical purposes and feedback options.
The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a) GDPR. If you have given us your consent, you can revoke it at any time with effect for the future, without affecting the legality of the processing already carried out.
To do this, simply send an informal e-mail to: datenschutz@blu-beyond.com
Handling applicant data
We give you the opportunity to apply for employment in our company (by e-mail, the online application form or by mail). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data privacy law and all other legal provisions and that your data will be treated confidentially. If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to make a decision on the establishment of an employment relationship.
The legal basis for this is Art. 6 para. 1 lit. b) GDPR (general contract initiation) as well as Sect. 26 para. 1 BDSG (German Federal Data Protection Act) according to German law (initiation of an employment relationship). Your personal data will only be passed on within our company to employees who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems for the purpose of carrying out the employment relationship on the basis of Art. 6 para. 1 lit. b) GDPR and Sect. 26 para. 1 BDSG.
If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we will store your application documents for a period of 6 months after termination of the procedure. After the 6 months, the data will be deleted and the physical application documents destroyed. The storage is specifically for evidence purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
Admission to our applicant pool
If we do not make you a job offer, you have the possibility of being admitted to our applicant pool. If you are admitted, all documents and details from your application will be added to the applicant pool so that you can be contacted in the event of suitable vacancies.
Admission to the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a) GDPR). The submission of the consent is voluntary and is not related to the ongoing application process. You can revoke your consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
We use the " Factorial HR " system for our application management. The provider is EVERYDAY SOFTWARE S.L., Calle Alaba, 61 5º-2ª, 08005 Barcelona, Spain, with whom we have concluded a processing contract.
Google Analytics
We use the functions of the Google Analytics web analysis service on our website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze the behavior of website visitors. In the process, we receive various usage data from you, such as page views, session duration, operating systems used and origin. This data may be summarized by Google in a profile that is assigned to you or your terminal device. Google Analytics also allows us to record your mouse movements, scrolling movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to augment the data sets it collects and employs machine learning technologies in its data analysis. Google Analytics uses technologies that enable the system to recognize you for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
Via the consent banner on our website, we actively obtain consent from you in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time.
The transfer of data to the United States is based on the standard contractual clauses of the EU Commission. Details are available here: https://privacy.google.com/businesses/controllerterms/mccs/
IP anonymization
Furthermore, we only use Google Analytics on our website with activated IP anonymization. Your IP address will be truncated by Google within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transferred to the United States. Only in exceptional cases is the full IP address transferred to a Google server in the United States and truncated there. We have also concluded a contract with Google for data processing. Google processes this data on our behalf and thereby enables us to evaluate the use of the website by the users, to create reports on the website activities and to collect further information related to the use of the website and the internet. The IP address transferred by your browser within the framework of Google Analytics is not merged with other Google data.
Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
More information on the handling of user data by Google Analytics can be found in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
Data processing
Google refers to the data processing conditions in its own data privacy notice. https://support.google.com/analytics/answer/3379636?hl=en&ref_topic=2919631.
Storage period
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 2 months. Details are available at the following link: https://support.google.com/analytics/answer/7667196?hl=en
Google Ads
We use Google Ads on our website. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be shown on the basis of the user data (e.g. location data and interests) available to Google (target group targeting). As a website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the showing of our advertisements and how many ads resulted in corresponding clicks. The information collected by Google about the use of this website is usually transmitted to a Google server in the United States and stored there.
The use of Google Ads is based on Art. 6 para. 1 lit. a) GDPR. Your consent is obtained via the consent banner when you visit the website and you can revoke your consent at any time.
The transfer of data to the United States is based on the standard contractual clauses of the EU Commission.is based on the standard contractual clauses of the EU Commission. Details are available here: https://privacy.google.com/businesses/controllerterms/mccs/
We have concluded a contract with Google for data processing.
More information about data processing by Google is available here: https://policies.google.com/privacy?hl=en
LinkedIn conversion tracking
We use the functions of LinkedIn conversion tracking on our website. The provider is the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
In order to better customize the effectiveness and reach of our ads and campaigns, LinkedIn's conversion tracking uses the so-called LinkedIn Insight Tag. This tag sets cookies that store and transfer your IP address, URL, referrer URL, device properties, and browser properties to LinkedIn.
The transferred data is pseudonymized by LinkedIn within 7 days and deleted within 180 days.
LinkedIn does not provide us with any personal data, only anonymous reports about the selected target group and the performance of our advertisements and campaigns. This provides us with information on industry, job title, company size, career stage and location.
The processing of your personal data is based on the provisions of Art. 6 para. 1 lit. a) GDPR (consent). You give us your consent via the cookie banner when visiting the website. You can change your cookie settings at any time.
You can also deactivate LinkedIn conversion tracking here via the opt-out procedure. More information on LinkedIn's privacy policy is available at: https://www.linkedin.com/legal/privacy-policy.
Kununu
We have a profile on kununu and use a kununu plugin on our website to access this profile. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg.
When you visit our website, a connection to the provider's servers is established via the kununu plugin. This results in the transmission of personal data such as your IP address. If you have a kununu or Xing profile and are logged into it when you click on the kununu plugin, your IP address and the visit to our website will be associated with your user profile. If you do not wish this association, please log out of your Xing/kununu profile before visiting our website. We do not receive any information about your profile from the provider of the platform/plugin, but we do receive anonymous statistics about our site.
The legal basis for this processing is Art. 6 para. 1 lit. a) GDPR (consent). The data processing is carried out as joint processing. For content that you provide directly on the platform, i.e., comments, private messages, or similar, New Work SE and we act as joint controllers in accordance with Art. 26 GDPR. More details about data protection at kununu can be found here: https://privacy.xing.com/en/privacy-policy
Data processing via social media
We maintain publicly accessible profiles on social media. Details of the social media we use are given below.
Social media such as Facebook, Twitter, etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media sites triggers numerous processing operations relevant to data privacy.
Details: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the social media portal in question. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or via your IP address.
Using the data collected in this way, operators of social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both inside and outside the respective social media presence. If you have an account with the social media in question, the interest-based advertising may be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all the processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details on this are available in the terms of use and data privacy provisions of the social media portals concerned.
Legal basis
Our social media presence is designed to ensure the broadest possible footprint on the internet. This is a legitimate interest in terms of Art. 6 para. 1 lit. f) GDPR.
The analysis processes initiated by the social media may have different legal bases, which must be specified by the operators of the social media (e.g. consent in terms of Art. 6 para. 1 lit. a) GDPR).
Person responsible and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can always assert your rights (to information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the social media portal in question (e.g. Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have complete influence on the data processing operations of the social media portals. Our options are largely determined in each case by the corporate policy of the provider concerned.
Storage period
The data we collect directly via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected hereof.
We have no influence on how long your data is stored by the operators of the social media for their own purposes. For details, please contact the operators of the social media directly (e.g. in their privacy policy, see below).
Social media in detail
We have a Facebook profile. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the U.S. and other third countries.
We have entered a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies the data processing operations for which we or Facebook is responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can modify your advertising settings independently in your user account. To do this, click the following link and log in: https://www.facebook.com/settings?tab=ads.
The transfer of data to the USA is based on the standard contractual clauses of the EU Commission.
Details are available here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.
Details are available in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
We have an Instagram profile. The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). According to the provider, the data collected is also transferred to the United States and other third countries. The transfer of data to the United States is based on the standard contractual clauses of the EU Commission.
Details are available here: https://www.facebook.com/privacy/policy/version/20220104/ https://www.facebook.com/legal/EU_data_transfer_addendum and https://facebook.com/help/566994660333381.
Details about their handling of your personal data are available in Instagram's privacy policy: https://help.instagram.com/519522125107875.
We use the functions of the XING network on our website, which are offered by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.
Each time you visit our website, a connection to XING servers is established. To the best of our knowledge, no personal data is stored, in particular user behavior is not evaluated and IP addresses are not stored.
The legal basis for using the XING Plugin is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the widest possible visibility in social media.
More information on data privacy and the XING Share button is available in XING's privacy policy at: https://privacy.xing.com/en/privacy-policy.
On our website we use the functions of the LinkedIn network, a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you access our website, which contains the LinkedIn feature, a connection is established to LinkedIn servers. To the best of our knowledge, your personal data will not be stored, in particular the IP address will not be stored or the usage behavior evaluated.
The legal basis for using the LinkedIn Plugin is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the widest possible visibility in social media. For more information please see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
Rights of data subjects
Right of access
According to Art. 15 GDPR, you have the right to request information about your personal data that we process. This right includes information about:
- The processing purposes.
- The categories of personal data.
- The recipients or categories of recipients to whom your data has been or will be disclosed.
- The planned storage period or at least the criteria for determining the storage period.
- The right to rectification, erasure, restriction of processing or objection.
- The right of appeal to a supervisory authority.
- The origin of your personal data if it has not been collected by us.
- The automated decision-making including profiling and, if applicable, detailed information about it.
Right to rectification
According to Art. 16 GDPR, you have the right to immediately correct incorrect or incomplete data stored by us.
Right to erasure
According to Art. 17 GDPR, you have the right to request immediate erasure of your personal data stored by us, insofar as the further processing is not necessary for one of the following reasons:
- The personal data is still necessary for the purposes for which it was collected or otherwise processed.
- To exercise the right to freedom of expression and information.
- To comply with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- For reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h) and i) as well as Art. 9 para. 3 ) GDPR.
- For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1) GDPR to the extent that the right referred to in para. a) is likely to render impossible or seriously prejudice achievement of the purposes of such processing.
- To assert, exercise or defend legal claims.
Right to restriction of processing
According to Art. 18 GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:
- You dispute the accuracy of your personal data.
- The processing is unlawful and you object to the erasure of the personal data.
- We no longer need your personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims.
- You object to the processing pursuant to Art. 21 para. 1) GDPR.
Right to information
If you have requested the correction or deletion of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 para. 1 and Art. 18 GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You may request that we notify you of these recipients.
Right to data portability
We grant you the right to receive your personal data that you have provided to us in a structured, usable and machine-readable format.
You also have the right to request the transfer of this data to a third party, provided that the processing is carried out with the aid of automated procedures and is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR, Art. 9 para. 2 lit. a) GDPR or Art. 6 para. 1 lit. b) GDPR.
Right to withdraw consent
According to Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of withdrawal. In the future, we are no longer allowed to continue data processing based on your withdrawn consent.
Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR. In Germany, this depends on the federal state of your residence, your work or the presumed violation. A list of the supervisory authorities (for the non-public sector) with addresses is available at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.
Our supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Postfach 1349
91504 Ansbach
Germany
Online complaint form: https://www.lda.bayern.de/de/beschwerde.html.
Right to object
If we process your personal data on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, you have the right to object to this processing pursuant to Art. 21 GDPR if you can provide specific reasons for this. These reasons may arise from your particular situation or may be opposed to direct marketing. In the latter case, you have a general right to object, which must be implemented by us without indication of the particular situation. You can send your objection or your revocation directly by e-mail to datenschutz@blu-beyond.com.
Automated decision making and profiling
According to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
However, this does not apply if the decision:
- Is necessary for the conclusion or performance of a contract between the data subject and the controller.
- Is permitted on the basis of legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject.
- Is made with the express consent of the data subject.
For the cases mentioned in 1 and 3, we take measures to protect your rights and freedoms as well as your legitimate interest, including at least the right to obtain the intervention of a person from our side, to express your point of view and to challenge the decision.
Amendments and updates
In the course of updating, there may always be amendments to our data privacy notice. We will flag any amendments made to this notice for you.
The data privacy notice is dated 29.07.2024
Do you have any questions about data privacy at blu BEYOND?
Contact us!
Do you have any questions about data privacy at blu BEYOND?
Contact us!
-
blu BEYOND GmbH
Keltenring 11,
82041 Oberhaching
