This privacy notice is also available in German.
Diese Datenschutzerklärung ist auch auf Deutsch verfügbar.
Privacy Notice
In the following we inform you about the processing of your personal data and your rights in connection thereto.
Personal data
Pursuant to Article 4 of the General Data Protection Regulation (“GDPR”), personal data are any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Controller
SMEY LABS GmbH
Am Klopferspitz 19, 82152 Martinsried
contact@smey.cc
Your Rights
You have the following statutory rights under data protection law:
1. Right of access (Article 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you are processed and where that is the case access to the personal data. In order to be able to process your request as quickly as possible, you should formulate your request precisely. We would like to point out, that your right of access may be restricted due to legal provisions (in particular, if Sec. 34 of the Federal Data Protection Act (FDPA) applies).
2. Right to rectification (Article 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to erasure (“right to be forgotten”) (Article 17 GDPR)
You have the right to obtain the erasure of personal data concerning you without undue delay under the conditions of Article 17 GDPR. Your right to obtain erasure depends on whether the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation which requires processing by the Union or Member state law to which we are subject or the performance of a task carried out in the public interest or in the exercise of official authority vested in us or for the establishment, exercise or defence of legal claims.
4. Right to restriction of processing (Article 18 GDPR)
You have the right to obtain restriction of processing under the conditions of Article 18 GDPR.
5. Right to data portability (Article 20 GDPR)
Under the conditions of Article 20 GDPR, you have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from us. Where technically feasible, you have the right to have the personal data transmitted directly from us to another controller.
6. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. A list of supervisory authorities (for the non-public sector) can be found here at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Your right to object pursuant Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
To the extent we process personal data for the purpose of direct marketing, you as the data subject have the right to object to the processing of personal data relating to you for the purpose of such marketing at any time, which includes profiling to the extent that it is related to such direct marketing.
Processing activities
Informational use of our website.
Purpose and legal basis
We process personal data for the purpose of delivering and safeguarding the stability and security of our website.
Legal basis is Article 6(1)(1)(f) GDPR. Our legitimate interest is to be able to provide an operative website.
Storage period
As soon as the personal data is no longer required for the above-mentioned purposes, it will be deleted. Further storage may take place in individual cases if required by law.
Recipients
We disclose these personal data to our hosting provider.
Obligation to provide the data
The provision of these personal data is neither a statutory nor a contractual requirement and is also not necessary for the conclusion of a contract. There is also no obligation to provide this personal data. However, if you do not provide these personal data, you may not be able to access our website.
Note: You have a right to object under Article 21 GDPR. You can send us your objection at any time, for example by email or by post using the contact details given above.
Application process
Purpose and legal basis
We process personal data for the purpose of deciding on the conclusion of an employment relationship.
The legal basis is Article 6 (1)(1)(b) GDPR.
We may also process personal data for the purpose of asserting, exercising or defending legal claims in connection with the application process.
The legal basis is Article 6 (1)(1)(f) GDPR. Our legitimate interest is to defend ourselves against legal claims or, if necessary, to exercise and assert our own claims.
Storage period
If you withdraw your application, the personal data relating to an employment relationship will be deleted immediately. If your application is unsuccessful, we generally store this personal data for up to three months after you have received the rejection. A longer storage period may arise for the purpose of asserting, exercising or defending legal claims if a legal dispute is pending or if there are concrete indications of a probable legal dispute. You will be informed separately about the processing of your personal data for the purpose of implementing the employment relationship.
Recipients
We disclose personal data to Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland and - if you apply via LinkedIN “EasyApply” - LinkedIN Ireland Unlimited, Wilton Place, Dublin 2, Ireland.
Obligation to provide data
The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. However, it would not be possible to carry out the application process without the necessary personal data. Your application could not be considered without the necessary personal data.
Note: To the extend the processing is based on our legitimate interest, you have the right to object in accordance with Article 21 GDPR. You can send us your objection at any time, for example by email or mail, using the contact details provided above.
Inclusion in the applicant pool
Purpose and legal basis
We process personal data for the purpose of matching it with vacancies and contacting you for subsequent selection procedures.
The legal basis is Article 6(1)(1)(a) GDPR.
Storage period
For the aforementioned purposes, this personal data is stored for a period of 12 months from receipt of the declaration of consent.
Recipients
We disclose personal data to Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland.
Obligation to provide data
The provision of this personal data is not required by law or contract and is not necessary for the conclusion of a contract. There is also no obligation to provide this personal data. However, failure to provide this data may mean that you cannot be directly considered and contacted by us for other vacancies.
Note: Consent is freely given. To the extent the processing is based on consent pursuant to Article 6 (1)(1)(a) or Article 9 (2)(a) GDPR, you have the right to withdraw the consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. You can withdraw your consent in the same way and just as easily as giving consent, for example by e-mail using the contact details above.
Note: There is no automated decision making.