The protection of personal data (hereinafter also “Data”) is highly important to GGB N.A., 700 Mid Atlantic Parkway, USA-08086 Thorofare, NJ, General Manager Susan Sweeney [● name and contact details of the company acting as the controller regarding the processing of personal data] (“ GGB”)]. This Privacy Statement serves to inform you about the processing of your personal data and your rights with regard to this processing if you
- are a visitor of our website (“User”),
- apply for a job opportunity with us (“Applicant”),
- are in professional contact with us (“business contact”).
GGB processes your data in accordance with the applicable data protection laws, in particular Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”).
I. CONTROLLER OF DATA PROCESSING
GGB is the controller of the lawful processing of your personal data.
II. DATA PROTECTION INFORMATION FOR USERS
1. DATA PROCESSED AND PURPOSES OF PROCESSING
1.1 Usage data
When the websites incl. Partfinder of GGB are accessed, the servers of GGB automatically store certain data of the accessing system. This includes the type of browser used, the browser version, the operating system used, the website from which the website of GGB is accessed, the controlled subpages of the website of GGB, the date and time of access, the internet protocol address (IP address), the internet service provider and data comparable with such data.
GGB uses this data to make the websites available, to detect and remove possibly occurring technical problems and to prevent and, if need be, prosecute any abuse of the services of GGB. GGB also uses this data in anonymised form, i.e. without being able to identify the user, for statistical purposes and in order to improve the websites. The legal basis for processing personal usage data is Article 6(1), first subparagraph, point (f) GDPR.
1.2 Registration data
The User must register to be able to use certain functions on the websites of GGB. Depending on the function desired, certain information is required for registration (e.g. name of User, e-mail address). We need this information to set up and manage the User account, identify authorized Users and to be able to offer the User the functions desired. The legal basis for processing the data outlined above is Article 6(1), first subparagraph, point (b) GDPR.
Users may deactivate or restrict the transfer of cookies by changing the settings on the internet browser. Cookies already stored may be erased at any time. This may also be done by automatic means. Should cookies for the websites of GGB be deactivated, it may be the case that not all functions of the websites can be fully used.
1.4 Web Analysis and Tracking
The web analysis and tracking services described below will only be used on the Websites if you have granted your express consent. You may withdraw your consent at any time with future effect. To withdraw your consent please click here.
1.4.1 Google Analytics
The websites of GGB use Google Analytics with the additional component “anonymize IP”. This means that the IP address of the User collected by the Google Analytics cookie will be shortened by Google beforehand within Member States of the European Union or in other signatory states of the Treaty on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google is certified under the EU-US Privacy Shield Program. You can find more information here.
Google uses the information generated by the Google Analytics cookie on behalf of GGB in order to evaluate the use of the website, prepare reports on the website activities and to provide GGB with additional services associated with the use of the website and the internet. The IP address transmitted by the browser of the accessing system as part of Google Analytics will not be combined with other Google data. More detailed information on the conditions of use and data protection is available at http://www.google.com/analytics/terms/gb.html or at http://www.google.com/intl/en/analytics/privacyoverview.html. The legal basis for processing personal data by using cookies is Article 6(1), first subparagraph, point (f) GDPR.
The User can prevent Google from collecting the data generated by the cookie and pertaining to the use of the website or from processing this data by downloading and installing the browser plugin available via the following link (http://tools.google.com/dlpage/gaoptout?hl=en). GGB does however point out that in this case it may be that not all functions of the website can be fully used. The User may also prevent data being collected by Google Analytics by clicking on the following link. In this case an opt-out cookie is set that prevents User data being collected upon future visits to the websites of GGB. Users may also deactivate or restrict the transfer of cookies by changing the settings on the browser. Cookies already stored may be erased at any time. This may also be done by automatic means. Should cookies for the websites of GGB be deactivated, it may be the case that not all functions of the website can be fully used. Should Users only wish to accept cookies from GGB but not cookies from the service providers and partners of GGB, they may select the “block cookies from third party providers” (or similar) settings on their browsers.
1.4.2 Further web analysis tools
This website also uses a marketing automation system provided by Marketo Inc. ("Marketo"). Marketo is used to better understand the needs of (potential) customers and to operate a focused lead management. The generated information of the users is usually transmitted to a server of Marketo, stored and evaluated. In detail, we use Marketo for the following activities;
- To send our newsletters and other mailings. We point out that Marketo evaluates your user behavior when sending the newsletter or other requested information on our behalf.
- Manage our opt in / opt out management
- Collect statistical data on the use of our website. For this purpose Marketo uses so-called "cookies".
- Marketo is also used to store data entered by you in forms contained on our website.
- For more information on privacy and other legal information at Marketo, click here. https://documents.marketo.com/legal/privacy/
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
1.5 Data transferred in the course of making contact
GGB’s websites provide Users with the option to make contact with GGB. The personal data transferred to GGB in this connection are exclusively used in order to handle the respective enquiries. The legal basis for processing the data outlined above, depending on the content of the respective contact-making, is Article 6(1) subparagraph 1 point (b) respectively (f) GDPR.
GGB’s websites provide Users with the option to subscribe to a newsletter and to consent to the processing of personal data necessary for this. In order to register for the newsletter the User must provide his e-mail address. Additional information can be provided on a voluntary basis. These data are exclusively used in order to send the newsletter and are not transferred to third parties. The date and time of registration and the e-mail verification are also collected at registration. These data are exclusively processed for the purpose of identifying the possible abuse of an e-mail address. The legal basis for processing the data outlined above is Article 6(1) subparagraph 1 point (a) GDPR. The User has the right to withdraw his consent at any time without prejudice to the lawfulness of the processing carried out based on the consent prior to his withdrawal.
2. STORAGE PERIOD
Usage data will be stored for a period of 3 years. The data outlined above will otherwise be erased once it is no longer required for the described purposes, provided statutory provisions do not stipulate a longer retention period.
III. DATA PROTECTION INFORMATION FOR APPLICANTS
1. DATA PROCESSED AND PURPOSES OF PROCESSING
GGB processes in particular the following categories of personal data:
- contact information, in particular first and last name, title, birth name if any, address, phone number, e-mail address,
- qualification related information, in particular information contained in a CV, copies of reports and certificates
- photos attached to the application, if any.
In principle, GGB collects these Data directly from you. In singular cases GGB receives personal data about you from third parties.
GGB processes these Data if and to the extent this is necessary for carrying out the application and recruitment process. The legal basis for this is Article 6(1)(b) GDPR.
If you apply to a specific job opening, only the company specified therein receives your Data. If you send us a speculative application we will transfer your data to all prospective companies of the GGB-Group.
2. STORAGE PERIOD
Once the recruiting process has been completed your Data will be retained for a maximum period of 6 months for evidentiary purposes and then erased or anonymised. The legal basis for this retention is Article 6(1) first subparagraph point (f) GDPR.
IV. DATA PROTECTION INFORMATION FOR BUSINESS CONTACTS
1. DATA PROCESSED AND PURPOSES OF PROCESSING
GGB processes the following categories of your personal data which you transfer to us, in particular when exchanging business cards or in letter heads or signatures in business communication:
- ID information, in particular first and last name, title (if any), job description, respective sector and company, and
- contact information, in particular professional address, phone number and e-mail-address
Generally, GGB collects these Data directly from you, as you submit them to us. In some cases GGB receives personal data about you from your employer or third parties, e.g. via recommendations from (other) customers, vendors, suppliers and business contacts or via participant lists from trade fair organizers.
GGB processes these data in order to establish or maintain a business relationship with your company. The legal basis of this processing is Article 6(1) first subparagraph, point (f) GDPR.
2. STORAGE PERIOD
The Data specified above will be erased as soon as the knowledge of it is no longer necessary for the described purposes, if legal provisions do not prescribe storage for a longer period.
V. AUTOMATED DECISION-MAKING
We don’t have any automated decision-making software tools in place.
VI. TRANSFER OF DATA TO EXTERNALS
GGB receives assistance from outside service providers for certain technical data analysis, processing or storage processes (e.g. to obtain aggregated, non-personal statistics from data bases or for the storage of backup copies). These service providers are carefully selected and meet high data protection and data security standards. They are obligated to maintain strict confidentiality and process personal data only when commissioned to do so by GGB and according to GGB’s instructions. The legal basis for the involvement of such service providers is Article 28 GDPR.
GGB cooperates with companies and other entities which provide specialized expertise with regard to special areas (e.g. tax consultants, legal counsel, accounting firms, logistics companies). These entities are either legally or contractually obliged to maintain confidentiality. If a transmission of personal data to these entities is necessary, the legal basis is, depending on the respective kind of cooperation, Article 6(1) first subparagraph 1 point (b) or, (f) GDPR.
Except in the cases set out in this Privacy Statement, GGB only transfers Data to third parties without the User’s explicit consent if so obliged by law or by administrative or judicial directive.
For the purpose of collecting the feedback of our customer in respect of their experience during their last transaction with GGB, GGB is providing to MaritzCX LLC the following personal data: last name, first name and e-mail address of our customer. MaritzCX LLC will submit a survey to GGB’s customer only after GGB’s customer has opted in. The data are stored in USA.
MaritzCX LLC EU-US Privacy Shield certification can be checked here: https://www.privacyshield.gov/list
MaritzCX LLC GDPR policy can be checked here https://www.maritzcx.com/gdpr-overview/
VII. PLACE OF DATA PROCESSING
The GGB website is hosted by ipgarde, Tour de l'Horloge, 4, place Louis Armand, 75012 Paris, France The website host maintains the Data collected through the GGB website (including Cookies) on its servers located in Paris, France. Access to this Data is limited to employees of GGB and the website host.
In addition, the following companies may have access to Data:
Marketo Inc. , 901 Mariners Island Blvd. , Suite 500, San Mateo, CA 94404 USA
MaritzCX , 3451 North Triumph Blvd, 6th Floor, Lehi, UT 84043
CRM -Oracle America Inc, 500 Oracle Park Way, Redwood City, CA 94065, USA,. Used by GGB for the purpose of managing and monitoring/follow-up of customer relationships.
Partfinder-Rackspace, 1 Fanatical Place, City of Windcrest, San Antonio, TX 78218, USA
VIII. YOUR RIGHTS
If you would like to request detailed information on the processing of your personal data, you may contact GGB at any time. You may also ask to receive in a structured, commonly used and machine-readable format the Data which you have provided to GGB or for such Data to be transferred to a third party. Should you establish that the Data stored about you is incorrect or incomplete, they may at any time require the immediate rectification or completion of such Data. Subject to the preconditions set out in Articles 17 and 18 GDPR, you may also require the erasure or restriction of processing of personal data. You also have the right to lodge a complaint with the competent supervisory authority for GGB.
IX. CONTACT INFORMATION
You may contact GGB at any time regarding questions concerning GGB’s processing of personal data and the exercise of rights to which you are entitled in relation to such processing at the address listed above, or by email at firstname.lastname@example.org