CYBEX User Interviews
Customer Information and Privacy Notice for CYBEX User Interviews
Table of Contents
III. Application for and processing of a test/interview
IV. Including in our data base for future tests
I. Privacy Notice on the processing of your personal data in the context of user tests, interviews according to Art 13 GDPR
1. Identity of the controller
CYBEX GmbH / CYBEX Retail GmbH
Riedingerstraße 18
95448 Bayreuth, Germany
Phone: +49 921 7 78511 – 0
2. Contact details of the data protection officer
Data Protection Officer
c/o activeMind.legal Rechtsanwaltsgesellschaft mbH
Potsdamer Straße 3
80802 München
Phone: +49 89 / 919 294 – 900
E-Mail: datenschutz@cybex-online.com
3. Data Subjects‘ Rights
You have the following rights according to Art. 15 to 22 GDPR, if the legal requirements are met:
- Right to information
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
4. Right to withdraw consent
Insofar as the processing of the data is based on your consent, this can be withdrawn at any time by informal declaration to the controller (e.g. by e-mail to customerinsights@cybex-online.com) with effect for the future. The withdrawal of consent has no negative effects for you.
5. Right to object
In case we process your data based on our legitimate interests, the following applies: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
6. Right to complain to the competent Supervisory Authority
As a data subject, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you believe that the processing violates data protection law. The supervisory authority responsible for us is:
Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach, Germany
Phone/Telefon: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de
7. Information on Joint Controllership
The controllers identified above act as joint controllers for the processing in question. We have concluded a join controllership agreement for this purpose that governs the rights and responsibilities of the involved parties. Regardless of that, you may reach to any of the controllers if you want to exercise your data subject rights or obtain additional information.
8. Third Country Transfers
We may transfer data to third country providers (eg. our service providers). In this case we make sure that transfers are carried out only if an adequacy decision has been issued by the European Commission pursuant to Art. 45 (1) GDPR. In other cases such transfer will be subject to the EU standard contractual clauses, including a Transfer Impact Assessment (TIA) or Binding Corporate Rules to ensure an appropriate level of protection for data processing in the relevant third country.
II. Provision of the platform
1. Purpose of the Processing
Ensure a smooth presentation and optimization of the platform where the application and booking for testing and interviews is to be submitted.
2. Legal Basis of the Processing
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in providing the website and ensuring system security and abuse detection.
3. Recipients of the Data
Your personal data will be shared with the following recipients:
• UserInterviews: UserInterviews is a service provider that facilitates the recruitment of participants for user tests and interviews.
These service providers act as independent data controllers with respect to the provision and maintenance of their platforms, including the handling of your profile credentials and server log files.
Besides, the data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.
4. Duration of Storage
We will delete your data once the purpose has been fulfilled: the appointments are booked and interviews, tests are carried out.
5. Provision of personal data mandatory or required
The provision of the personal data in this context is neither legally nor contractually required. However, without the IP address and similar data, the service and functionality of our website is not guaranteed.
III. Application for and processing of a test/interview
1. Purpose of the Processing
Application for, and conducting, a test/interview and recording of the interview.
2. Legal Basis of the Processing
The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.
3. Recipients of the Data
The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.
4. Duration of Storage
We will delete your data when the purpose has been fulfilled or if you have withdrawn your consent.
5. Provision of personal data mandatory or required
The provision of your personal data is voluntary, based on your consent.
IV. Including in our data base for future tests
1. Purpose of the Processing
Inclusion in our database for future tests/interviews or similar campaigns.
2. Legal Basis of the Processing
The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.
3. Recipients of the Data
The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.
4. Duration of Storage
We will delete your data when the purpose has been fulfilled or if you have withdrawn your consent.
5. Provision of personal data mandatory or required
The provision of your personal data is voluntary, based on your consent.
V. Contact
1. Purpose of the Processing
Providing you the link to our platform, answering to any follow-up questions.
2. Legal Basis of the Processing
The legal basis for the processing is Art. 6 (1) (b) / (f) GDPR (legitimate interest in guaranteeing a smooth cooperation).
3. Recipients of the Data
The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.
4. Duration of Storage
We will delete your data once the purpose has been achieved.
5. Provision of personal data mandatory or required
The provision of your personal data is necessary for the performance of the contract with you.