Your personal data controller is Veronym Holding GmbH (hereinafter “Veronym” or “us”) with its seat in Berlin, at Bachstelzenweg 23. You may contact us via e-mail at: firstname.lastname@example.org
Source of your personal data
We have received your personal data either directly from you or from your employer (an entity that you represent) in relation to the use of our services by your employer. We have the following categories of your personal data: name, surname, name and address of your employer, your position, e-mail address at work, telephone number at work.
Purpose and legal basis for the personal data processing
We processes your personal data to enable you and your employer to use our services and websites, provide support for your Veronym Services account and contact with us, in particular to solve technical problems, perform contracts concluded with your employer, handle complaints about the operation of our services, handle claims, perform duties resulting from law, including tax and accounting regulations or accountability, enable payment for services, monitor your activity on our websites and conduct research and analyses related to your activity as well as to conduct direct marketing activities.
The legal basis for the processing of personal data is our legitimate interest. This includes enabling and improving services, ensuring their best quality and informing users about them, providing support, conducting research and analyses, conducting direct marketing, protecting or pursuing claims, creating statistics and ensuring accountability.
We are authorised to process your personal data also on the basis of provisions of law, e.g. when the law requires us to process your data for tax and accounting purposes (provisions of the Tax Ordinance Act and the Accounting Act).
Obligation to provide your personal data
Providing personal data by you is a legal requirement only to the extent resulting from the relevant tax or accounting regulations. Providing your name, surname and e-mail address is the contractual requirement set by us towards your employer.
If you do not provide us with all this information about yourself, we will not be able to set up a Veronym Services account for you, which as a result will limit your ability to manage our services. In the remaining scope, providing data is voluntary.
Your rights towards Veronym
You can request from us: access to, rectification, deletion, processing restriction, portability of your personal data, and you have the right to object to the processing of your personal data.
You may exercise your rights when:
- in respect of the request to rectify the data: the data is incorrect or incomplete;
- in respect of the request to delete the data: (i) the data is no longer necessary for the purposes for which the data was collected by us; (ii) you will revoke your consent to data processing; (iii) you object to the processing of this data beforehand; (iv) data is processed unlawfully; (v) the data should be deleted in order to fulfil an obligation arising from the law;
- in respect of the request to restrict the data processing: (i) the data is incorrect – for a period allowing us to check the accuracy of your data; (ii) the data is processed unlawfully but you will not want the data to be removed; (iii) your data is no longer needed by us but you may need it for defending or pursuing claims; or (iv) you object to the data processing – pending the determination of whether the legitimate basis are superior to the basis for the objection;
- in respect of the request to transmit the data: data processing is carried out on the basis of your consent and the processing is carried out automatically.
You have the right to lodge a complaint regarding the processing of your personal data by us to the President of the Office for Personal Data Protection.
The right to object to the processing of your data
You are entitled to object to the processing of personal data when:
(i) the processing of personal data takes place on the basis of legitimate interest, or for statistical purposes, and the objection is justified by your special situation,
(ii) personal data is processed for direct marketing purposes.
Recipients of your personal data
In principle, we do not disclose your personal data to third parties, except in cases where we have a legal basis, including at the request of entities authorised by law, or when we use the services of the entities supporting us, e.g. entrepreneurs providing hosting of our websites and software maintenance support.
We will store your personal data for the term of your use of our services as a representative of your employer. Afterwards – for the period during which the pursuit of claims in connection with the use of our services is possible. Moreover, we may store your data for tax and accounting purposes for a period of 5 years after the end of the year in which the financial event occurred.
Transfer of the personal data outside the European Economic Area
We do not transfer any of your personal data outside of the European Economic Area.
Profiling of personal data and automated decision-making
Profiling of personal data is understood as the automated processing of your data, which is based on the use of data to assess certain factors, in particular to analyse or predict aspects regarding your work efficiency, economic situation, health, personal preferences, interests, credibility, behaviour, location or movement.
We do not use your personal data for profiling or automated decision-making.