Why do we collect information about you?
We are always looking for bright networkers and customers and, if you are one, we encourage you to use our shopping platform. When you register as network partner, we process your personal data for sales partners and shopping purposes, to empower you for earnings, cash back and savings via our platform.
What information do we collect?
We collect, use, and store the information which is necessary for the sales partners and shopping purposes as described above:
Name and surname
Personal website URL
Tasks performed by you
Interview notes about you
Other information submitted by you
When applying please consider whether there is any other sensitive personal information, such as health information, information on family relations, or similar, that is not necessary for the onboarding process.
Why are we legally allowed to collect your information?
We collect information lawfully about you because:
We have the intention to enter into a contract with you (Art. 6 (1) (b) of GDPR) – when you apply for a network partner position
You have given consent to the processing of your personal data (Art. 6 (1) (a) of GDPR) – when you permit GG-ART to contact you about future network and/or shopping opportunities;
We have a legitimate interest to gather and process your personal data from legitimate sources (Art. 6(1) (f) of GDPR);
We never ask for special categories of data (e.g. health data) unless mandatory during the registration process. If you nevertheless and against our will provide us with such data, the legal basis for processing is your consent (Art. 9 (2) (a) of GDPR).
Which information do you have to provide and why?
You have to provide us with the information which we need to empower sales partner status or shopping processes. You are not legally obliged to provide us with your personal information under the statutory requirement. However, in case you do not provide us with this information, we will not be able to assess your application and your suitability to enter into a network partner or customer status.
Where do we get your information from?
Generally, we collect the information directly from you. However, some of the information we obtain from the following parties:
GG-ART group companies;
Our network members (referrals);
LinkedIn Corporation, and other business-related social media sources and/or collaboration platforms. If we collect any information from your social media profiles, we make sure that it is relevant to the sales partner position. We base the collection of data from social media profiles on our legitimate interest to assess specific qualities for specific network or product intermediation functions.
Do we share your information with other entities?
We share the information about you with the following entities only where necessary and permitted by applicable laws and only for the recruitment purposes as described above:
We use various service providers for the processing of your personal data, such as email service providers, web hosting service providers, other information technology infrastructure service providers, and others. They might have access to your personal data, but only to the extent necessary for us to receive their services. In any case, we make sure they protect personal data according to applicable legal requirements.
Do we disclose information about you outside the European Economic Area?
If any of our service providers are based outside of the European Economic Area, we make sure that they process personal data according to European privacy standards entering into agreements with us with standard data protection clauses adopted by the European Commission.
You may download a copy of the Model Contractual Clauses at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries.eu_.
How long do we use or keep information about you?
When you want to become a network member, we ask for your personal data. If you become a network member, we will save your information within the network member file. We delete your data in case you do not become a network member.
When you quit GG-ART network we will store your personal data for 3 (three) years.
What privacy-related rights do you have?
GDPR and other laws provide you with certain rights, procedures for implementation of and exceptions to these rights. When allowed by law, you have the following privacy-related rights that you can implement by contacting us at firstname.lastname@example.org
to request a confirmation that GG-ART is processing personal data related to you;
to get familiar with your personal data and how it is processed;
to demand to correct inaccurate data;
to request us to delete the information we have about you if we use it illegally or there are other legal grounds for deletion;
to request us to restrict the processing of your information – if you dispute the accuracy of the data or object to the processing of the data, if you do not accept that your data would be deleted
which was illegally processed, or if you need the data to claim, execute or defend legal claims;
to demand to transfer your personal data to another data controller or provide it directly to you in a convenient form (applicable to that personal data that you submitted and that is
processed on the basis of the agreement or consent);
to object to the processing of your personal data if it is processed on the basis of an illegitimate interest;
in cases where your personal data is processed on a consent basis, you have the right at any time to withdraw your consent to the processing of your personal data.
If you believe that your data is processed unlawfully, you have a right to contact a relevant data protection authority (State Data Protection Inspectorate in Austria or other authority in the Member State of your habitual residence or place of an alleged infringement of the GDPR and seek a judicial remedy). We would appreciate it if, in such cases, you would contact us first to resolve the problem together.
1 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)