The EU General Data Protection Regulation (GDPR), which entered into force on 25 May 2018, is a Regulation of the European Union that creates a directly applicable, Europe-wide legal basis for the processing of personal data by public authorities and businesses. The European Union has adopted the GDPR with a view to extending the protection of personal data and enhancing each individual’s right to informational self-determination. At Amadeus FiRe, we take the protection of the personal data of our customers and of the contacts on the part of our customers very seriously. We process your personal data in compliance with the statutory provisions regarding data protection, in particular, the provisions of the GDPR and the German Federal Data Protection Act (BDSG). By providing the following information, we comply with our statutory obligation to inform you in accordance with Articles 12 et seq. GDPR of the purpose and the relevant contacts in connection with our data processing activities and to enable you to exercise your statutory rights in connection with such data processing.
This information sheet is for our customers and suppliers and for the contacts on the part of our customers and suppliers. Our customers are businesses that we help fill specialist and management positions in the areas of commerce and IT. Suppliers are businesses whose products and services are purchased by Amadeus FiRe. Consequently, we process only in exceptional cases personal data of natural persons (for example, the contact details of contacts on the part of our customers). The customer and supplier data that is stored and processed by us consists primarily of purely business-related data. Where necessary, we store personal data concerning contacts and other individuals with whom we get in contact in their official function.
Please note that separate privacy notices apply to job applicants and employees at Amadeus FiRe and to visitors to our websites. Our website-specific privacy notice is available at www.amadeus-fire.de/datenschutz.
The data controller responsible for the processing of your personal data is Amadeus FiRe AG or, in the event of specialised placement services and interim and project management, Amadeus FiRe Personalvermittlung & Interim Management GmbH, both with business address at Hanauer Landstraße 160, D-60314 Frankfurt am Main, phone: (+49) 69 96876-150, fax: (+49) 69 96876-199, email: email@example.com (hereinafter: Amadeus FiRe).
You can reach the company data protection officer of Amadeus FiRe using the following contact details:
Amadeus FiRe AG/Amadeus FiRe Personalvermittlung & Interim Management GmbH/Amadeus FiRe Services GmbH
Data Protection Officer
Hanauer Landstraße 160
D-60314 Frankfurt am Main
Please do not hesitate to contact our data protection officer if you have any questions, complaints or comments regarding data protection at Amadeus FiRe.
We, Amadeus FiRe AG and Amadeus FiRe Personalvermittlung & Interim Management GmbH, process personal data concerning natural persons (in particular, the contact details of contacts on the part of our customers) only where this is necessary to provide our services in the areas of temporary work, permanent placements and interim and project management and/or to receive goods and services from our suppliers, including for the formation, implementation and termination of the relevant contractual relationships.
To this end, we primarily process only the personal data that we receive and/or collect from our customers and suppliers/the contacts on the part of our customers and suppliers during and/or as part of the ongoing business relationship. In addition, we may also obtain personal customer data from the following further sources:
The legal basis for the above-described processing of personal data is processing for the formation, implementation and termination of a contract (point (b) of Article 6(1) GDPR).
At Amadeus FiRe, we use your official contact details to provide customers and prospective customers as part of our direct advertising activities with information about our services and with invitations to our customer events. The legal basis for this form of promotional information is our legitimate interest (point (f) of Article 6(1) GDPR) in convincing customers and prospective customers in this way to (again) purchase our services. You can object to your personal data being used for direct marketing purposes at any time by notice to the contact details stated above or, in the event of advertising by email, by using the link provided for this purpose in the relevant email. We will stop using your data for direct advertising purposes if you object to your data being used for these purposes. For further information, please see the description of your rights as a data subject in Section 10 below.
At Amadeus FiRe, we additionally use your personal data to provide you with information about, and invite you to, our regular customer events (specialist lectures, employment law days and FiRe congresses) (see above). If you register for an event, we need your data for the purposes of our participant management and to send you a confirmation regarding your participation. Furthermore, we process your data to evaluate who attends our events in order to then provide you with specifically tailored information about our services, where appropriate. We also carry out surveys among participants after our events. The questions asked can be answered anonymously, their sole purpose being a statistical evaluation of the events that we offer. The findings of the survey serve the purpose of continuously improving the quality of our events. Where necessary for the organisation and holding of such events, including the appropriate follow-up work, we may disclose the data that you have provided to us to companies of the Amadeus FiRe Group or to external service providers (where applicable, as part of data processing carried out on our behalf). This will, of course, only be done within the bounds of what is permitted by law and only to the extent necessary to organise and hold the event. The legal basis for the processing of your data is the performance of the contract made with you regarding your participation (point (b) of Article 6(1) GDPR), as well as our legitimate interests in carrying out the appropriate follow-up work to determine our customers’ satisfaction, in checking/improving the quality and in addressing you personally (point (f) of Article 6(1) GDPR).
To the extent that the processing of data for the purposes set out below does not occur for the implementation of the respective contractual relationship, we additionally process data on a statutory legal basis for the performance of legal obligations (point (c) of Article 6(1) GDPR), due to a legitimate interest (point (f) of Article 6(1) GDPR) or based on your consent (point (a) of Article 6(1) GDPR) for the following purposes:
When carrying out the relevant processing activities, we proactively take your interests requiring protection which relate to the processing of your personal data carefully into account. Regardless of this, where data is processed based on a weighing of interests, you may, of course, object at any time to such processing on grounds relating to your particular situation. In this case, we reserve the right to continue the processing if we arrive at the conclusion after another examination that our legitimate interest in processing the relevant data continues to override your interests or your fundamental rights and freedoms. (Please also note your rights as a data subject in this regard, as set out in Section 10 below.)
Initially, in principle, only our employees who are engaged in customer management from an HR, sales or technical perspective gain knowledge of your personal data.
Depending on the services requested by our customer, your data may need to be disclosed among the companies of the Amadeus FiRe Group that are listed in Section 3 above, as well as to Amadeus FiRe Services GmbH. Amadeus FiRe Services GmbH is a member of our Group and organises in particular our specialist lectures and events.
Furthermore, individual processes or support services are provided by service providers carefully selected and commissioned by us which are based within the EU/EEA (third country). If we commission a service provider who is based outside the EU/EEA in any particular case and, therefore, data is transferred to a third country, we will enter into an appropriate data protection agreement with this service provider in accordance with the legal requirements in order to agree an adequate level of data protection. Such further service providers commissioned by us may be: IT service providers, print service providers, online marketing providers, online recruiting providers and social networks, such as Xing or LinkedIn.
Finally, we transfer personal data in particular cases to our legal or tax advisors, who, due to their professional status, have a special obligation to maintain confidentiality and secrecy.
At Amadeus FiRe, we store your personal data during the initiation and the course of the service/customer relationship as long as this is necessary for the formation and/or implementation of individual service contracts.
We erase your personal data when the contractual relationship between you and Amadeus FiRe has ended, all mutual claims have been fulfilled and there are no longer any statutory obligations to retain such data, for example, under the German Commercial Code (HGB) (Sections 238, 257(4) German Commercial Code (HGB)) or the German Tax Code (AO) (Section 147(3) and (4) German Tax Code (AO)), or other statutory grounds that would justify storing your data.
At Amadeus FiRe, we store your contact details and the business correspondence hitherto exchanged also after the concrete service contract has ended in order to be able to maintain our business relationship and contact you at regular intervals, in particular, in order to support you with further services where necessary or, as the case may be, obtain again services from you. The legal basis for such processing is our legitimate interest in maintaining and cultivating existing business relationships, including the commercial interest in convincing you once more of our services when contacting you for advertising purposes (point (f) of Article 6(1) GDPR).
At Amadeus FiRe, we protect personal data by taking appropriate technical and organisational measures to ensure an adequate level of protection and safeguard the privacy rights of customers/contacts. The purpose of the measures taken is, inter alia, to prevent unauthorised access to the technical facilities used by us and to protect personal data from being accessed by unauthorised third parties.
For some of the personal data that you disclose to us as part of our customer relationship, the provision of such data is required by law or the contract and/or is necessary for the creation and/or the proper implementation of the relevant contractual relationships. Consequently, you are obliged to provide us with such personal data. Please note that if you do not provide us with such personal data, we may be unable to perform individual contractual obligations.
Upon request, we provide you with information about whether any personal data concerning you has been stored by Amadeus FiRe and, if so, what personal data, as well as with information about, inter alia, the categories of recipients to whom we have transferred such data, where applicable. In addition, you may exercise the following further rights in accordance with the statutory provisions: rectification, erasure, restriction of processing (blocking for certain purposes), as well as the right to data portability.
If the requirements stipulated in Article 21 GDPR are met, you may object to your personal data being processed, in particular where such processing is based on a weighing of interests (point (f) of Article 6(1) GDPR). This also concerns the cases, if any, where we process your personal data in particular cases for direct advertising purposes. In this context, we weigh our interest in contacting you for advertising purposes against your right to informational self-determination. If you do not wish to receive any advertising from Amadeus FiRe, you may object at any time to your data being processed for advertising purposes.
The objection can be made without observing any particular form and, if possible, should be addressed to:
Amadeus FiRe AG/
Amadeus FiRe Personalvermittlung & Interim Management GmbH
Hanauer Landstraße 160
D-60314 Frankfurt am Main
You have the right to revoke any consent to the processing of your personal data that has been given. As a result of the revocation of your consent, the processing of your data is terminated with effect for the future unless there are other grounds that justify such processing. A revocation does not affect the lawfulness of the processing carried out in the past. We will store information about your revocation for documentation and evidentiary purposes.
You have the right to turn to a competent supervisory authority if you have any complaints. The supervisory authority responsible for Amadeus FiRe is Hessischer Datenschutzbeauftragter, Gustav Stresemannring 1, D-65021 Wiesbaden (www.datenschutz.hessen.de).
Our data protection officer will be happy to help you with any further questions or concerns regarding data protection. Any inquiries in this regard or exercise of your above rights should, if possible, be made in writing to our above-stated address or be addressed directly to our data protection officer, for example by email to firstname.lastname@example.org.
There is no automated decision-making and/or profiling.
We reserve the right to amend this privacy notice for customers and suppliers from time to time. Our amendments, if any, will be made known by publication of the amended privacy notice on our website. Except to the extent otherwise provided, such amendments take effect immediately. This is why you should check this privacy notice at regular intervals to be always familiar with the most recent version.
25 May 2018, last amended on 25 October 2018