PAL Next AG - Privacy Policy
1. Responsible entity
PAL Next AG, Holzstraße 30, 80469 Munich, Germany, represented by the Management Board Stephanie Schettler-Köhler ("PAL Next" or "we") are pleased to welcome you to our websites under the domain www.pal-next.com ("Websites").
All personal data is stored, processed and used by us in compliance with the applicable data protection regulations (in particular the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG)).
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an instance of data such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. However, information that cannot be linked to your real identity is not personal data; this includes, for example, the number of users of our websites or comparable summarized information.
2. Purposes and legal bases of data processing
By default, our web servers temporarily log the connection data of the requesting computer, the web pages you visit, the date and duration of the visit, the identification data of the browser and operating system used and the website which you were using prior to landing on our page. We use tracking software to determine the frequency of use and the number of users of our website. We do not use this software to collect any data that gives us information about the the identity oft he user, but we do collect the IP address you use to access the website. The data is used exclusively in anonymized and summarized form for statistical purposes and for the development of the website. Our legitimate interest in data processing lies in these purposes (Art. 6 I lit. f GDPR). You can object to the collection and use of your IP address for statistical purposes by deactivating "Track user", depending on the Internet browser you are using.
Nevertheless, you can visit our websites without us collecting any personal data from you. In particular, these websites contain information for investor relations purposes and general public information about the PAL Next group.
Personal data is collected, processed and used by us as the responsible entity if you provide it to us voluntarily for the performance of a contract or for the implementation of pre-contractual measures or when you contact us (Art. 6 I lit. b. GDPR) or if you have given your consent to the respective processing (Art. 6 I lit. a GDPR). We may also process your personal data if the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Article 6 I lit. f GDPR), as explained in more detail below in this Privacy Policy, or if this is necessary for compliance with a legal obligation to which the PAL Next Group is subject (Article 6 I lit. c GDPR) or a corresponding provision in the applicable law of a member state of the European Union.
a) Communication
We use your name, company name, private or business address, e-mail address, telephone number and any other personal data that you may voluntarily provide to us to the extent necessary to process your communication or inquiries to us. The legal basis for this is generally, insofar as the communication concerns contractual or pre-contractual aspects, Art. 6 I lit. b GDPR, otherwise Art. 6 I lit. f GDPR.
b) Applications
We may publish advertisements for vacancies with us or with one of our affiliated companies on our websites. The company named in the job advertisement is responsible for filling the vacancy and processing the respective applications.
If you send us or an affiliated company of the PAL Next group of companies an application, we or the affiliated company will process the information and documents submitted with your application, including the personal data contained therein, such as your name, address, e-mail address, telephone number, information about your professional career/resume, certificates or any other information that you provide to us as part of your application, in order to process your application (§ 26 I BDSG). The provision of your personal data is necessary to carry out the application process. You are neither legally nor contractually obliged to provide personal data for application purposes. Please note, however, that if you do not provide any personal data, your application cannot be processed.
If we or the company affiliated with us to which you have applied cannot currently consider you for a vacancy, but would like to save your application in order to be able to consider you for a future vacancy, we or the company affiliated with us will contact you and ask for your consent (Art. 6 I lit. a GDPR). With regard to the details (e.g. the retention period of your application), we or the company affiliated with us will expressly inform you in advance.
3. Disclosure to third parties
Under certain circumstances, your personal data may be processed by service providers commissioned by us who support us in our business operations (to prevent cases of misuse, advertising agencies, IT service providers for the operation of our websites).
In these cases, however, the scope of the transmitted data is limited to the minimum required to achieve the purposes pursued with the data processing.
If we are legally obliged to disclose certain personal data due to a court decision or as a result of a request for information from law enforcement or supervisory authorities or authorized third parties in connection with an investigation or suspicion of a criminal offence, an unlawful act or other acts that may result in legal liability for us or you, we will disclose data necessary for the investigation, such as name, address, e-mail address or order history (Art. 6 I lit. c GDPR). We also reserve the right to process and use your personal data for the enforcement of or defense against claims.
4. Transfer of data to countries outside the EEA/EU
Your personal data may also be passed on to third parties based in non-EEA/EU countries. Insofar as data is transferred to third countries, this is done exclusively in compliance with the legally regulated admissibility requirements. If there is no adequacy decision within the meaning of Art. 45 GDPR for a third country, the processing is always carried out on the basis of suitable guarantees in accordance with Art. 46 GDPR. By concluding the standard data protection clauses issued by the European Commission in accordance with Art. 46 GDPR with the recipient in the third country, we achieve an adequate level of data protection.
5. Newsletter
You have the option of subscribing to a free email newsletter on our website. When you register for the newsletter, the data from the registration form is transmitted to us (title, first name and surname, email address, telephone number for SMS if applicable). We will ask you for your consent to process the data during the registration process or when you visit our website at a later date (Art. 6 I lit. a GDPR, § 7 II UWG) and also refer you to this privacy policy.
If you give your consent, we can send you newsletters using the newsletter distribution platform of EQS Group AG, Karlstr. 47, 80333 Munich ("EQS") commissioned by us. There is an order processing contract between us and EQS. In this agreement, EQS has undertaken to protect the data of our users, to process it on our behalf in accordance with the provisions of the order processing agreement and, in particular, not to pass it on to third parties. Further information on data processing by EQS can be found in EQS's privacy policy.
We will provide you with further details on the processing of your personal data in a transparent manner before you register for the newsletter.
6. Cookies
We use cookies on various pages to make your visit to our website more attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit to our website.
In addition, we use permanent cookies that make it possible to recognize you on your next visit to optimize user settings. The
legal basis for the use of cookies to operate our websites and to provide the services you have requested is generally Art. 6 para. 1 lit. f) GDPR. However, where required by law, we will obtain your consent (Art. 6 I lit. a GDPR). You can generally prevent the storage of cookies on your computer by setting your Internet browser accordingly. In this case, however, the ability to navigate our website may be restricted.
We use the Cookiebot tool from Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany) to manage your cookie consent. As part of data processing, personal data is shared with the provider. A contract for order processing in accordance with Art. 28 GDPR has been concluded. Further information can be found at: https://usercentrics.com/de/datenschutzerklaerung/
7 . Rights of affected entities
You have the following rights at all times in accordance with the applicable data protection regulations:
- You can request information about the personal data stored about you;
- You can request the correction or deletion of incorrect personal data;
- You may request the restriction of the processing of your personal data (in some cases provided for by law, e.g. in the case of statutory retention obligations, your data may be blocked instead of deleted);
- You may object to the processing of your personal data that is processed by us on the basis of a legitimate interest (Art. 6 I lit. f GDPR); and
- In the case of consent or data processing based on a contract between you and us, you may request that the personal data concerning you and provided by you be handed over to you or to a new responsible entity in a structured, commonly used and machine-readable format, insofar as this is technically feasible ("right to data portability").
- If you have given us your consent, you also have the right to withdraw this consent with effect for the future. This does not affect the lawfulness of processing based on consent before its withdrawal.
You can assert the aforementioned rights against us, e.g. by notifying us via one of the contact channels listed at the end of this privacy policy. We will communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom we have disclosed your personal data, unless this proves impossible or involves disproportionate effort.
You also have the option of contacting the competent supervisory authority in the event of complaints about the handling of your personal data.
8. Duration of storage
In compliance with the applicable data protection regulations, we will also delete the personal data stored about you without any action on your part if we no longer need to know it to fulfill the purpose for which it was stored or if its storage is inadmissible for other legal reasons. In some cases provided for by law (e.g. statutory retention obligations), your data may be blocked instead of deleted.
In the case of an application, your application documents will be deleted or blocked in accordance with the following provisions and any personal data will be returned to you in paper form.
If you have applied exclusively for a specific job advertisement, your application data will be stored until the final decision on filling this position plus a maximum of six months from notification of this decision to you.
After that, the data you have provided and the documents you have sent will be deleted.
Something else only applies if an employment relationship is established on the basis of your application or if a legal regulation exceptionally permits further storage of your data; in this case, your application data will also be processed
for the implementation of the employment relationship (§ 26 I BDSG) or stored for longer periods in accordance with the statutory provisions and, if permitted by law, processed and used. In this case, we will inform you accordingly before the respective storage, processing or use of your personal data in accordance with the applicable data protection regulations, unless you already have this information.
9. Data protection officer
If you have any questions about this privacy policy or the handling of your personal data, you can contact our data protection officer, Mr. Igor Soundakov, at any time via the following channels, who is also available to you in the event of requests for information, suggestions or complaints:
by mail:
PAL Next AG
Holzstrasse 30
80469 Munich, Germany
by e-Mail:
datenschutz@pal-next.com
Download Data protection Social Media PAL Next AG