General

We respect your privacy and are committed to protecting it. However, in order to do business, we need to collect and process some personal data about our prospects, customers and business partners. This privacy policy contains information about what personal data we collect, our key principles of processing the data and what rights you have related to your personal data.

Germany Artery processes your personal data in compliance with this privacy policy and applicable laws, so we ask you to read this policy carefully. We may update this privacy policy from time to time as needed based on the development of our business operations or changes in applicable laws. The updated privacy policy can be found on our website, so we ask you to visit this page every now and later.

Updating this privacy policy

We may make updates to this privacy policy when our operations change or develop. Also, changes in law may make it necessary to update this privacy policy. The changes become valid once we have published them in the form of an updated privacy policy. Please visit this page and read this privacy policy from time to time.

Parties

This privacy policy concerns the personal data registers relating to marketing, supplier, partner and customer contacts with the following parties (hereinafter also jointly referred as “Germany Artery”, “us” or “we”):

• Germany Artery Iraq.
• Our Legal associate.

Our fundamental principles

1. We use your personal data only for the purposes we have defined.
2. We make sure that we communicate to you what personal data we collect, for which purpose and how we use it.
3. If your permission is required, we will ask for it, and make sure that you can at any time withdraw the permission.
4. Your data is transferred to third parties only for the original purposes we have defined, in legally compliant ways and with adequate safeguards.
5. We protect your data as well as we can.
6. We make sure you can use your rights regarding your personal data, such as the right to access and correct the data.

The purposes and the use your personal data

We collect, store and use data about only for predefined purposes. The main purposes for processing personal data are:

• marketing purposes, including marketing analytics, marketing research and direct marketing in compliance with applicable laws;
• developing our website and its content;
• fulfilling our contractual obligations;
• fulfilling legal obligations and responding to legal claims;
• customer communications and responding to contact requests;
• customer relationship management;
• supplier & partner relationship management;
• provision of our web-based or other online services;
• running and developing our business, to the extent not overridden by your fundamental rights and freedom; and
• targeting and offering our products and services to you.

The data we collect and sources

We collect personal data about you mainly from yourself when you contact us or use our services. We typically obtain the following data directly from you:

• your work-related contact details (names, company, phone number, email address, postal address, country)
• your position (e.g. organizational role, job title and department)
• interest in our services
• data related to your inquiry and use history
• All data you provided when you apply for a job by Germany Artery or one of its clients.

We also collect personal data about our website visitors with marketing system and website analytics tools (such as Google Analytics), so that we can analyze our website use, develop it further and to target relevant advertising and marketing content for our customers and website visitors. These systems usually use online identifiers (such as cookies, internet protocol addresses and device identifiers) to provide us:

• Website use data
• Email marketing data
• Social media activity relating to our social media channels

In addition, we may collect personal data about you from other sources or registries you have used, such as third-party websites as well as advertising and social media channels. Examples of data from these sources could be your public profile information (e.g. LinkedIn, Instagram profile, Facebook page), interest in our products and services, and references from your colleagues or other people.

If you want to control how Google, social media channels and other third party websites collect and share your data, please check their privacy policies and terms & conditions for further information. Sometimes you can control it by simply updating the settings of your internet browser or social media profiles.

The basis for processing your data

We make sure that we always have a legal basis to use your personal data. Firstly, we may use your data to fulfill and execute a contract and to meet legal obligations. Secondly, we may use your data also to further our legitimate interests, which are the offering of our services and operating and developing our business, but only to the extent they are not overridden by interests for your fundamental rights and freedoms, especially in relation to privacy. Some personal data we may use based on your consent.

Users and the transferring of the data

Primarily your personal data is used by people in relevant functions within our own company. Customer information and requests are usually also disclosed to our local business partners who handle customer requests and take care of local Germany Artery services. They process personal data related to Germany Artery customers based on their own privacy policies.

We may also outsource some parts of the data processing to third parties, such as the data systems used to store and process personal data as well as some marketing functions. In these situations, we make sure with contracts and otherwise that the confidentiality of your personal data is secured and data is otherwise used lawfully. We may also disclose information to fulfill our other contractual or legal obligations or when a legal authority requires a disclosure. We may also disclose your personal data if we are a part of a business sale, such as a merger or an acquisition.

Transfering data outside the European Union (EU)

By default, EU citizens’ data is not transferred outside the EU. However, in some situations the transfer of personal data outside the EU is possible. For instance, possible transfers could concern such situations, where some of the servers where your personal data is stored are located outside of the EU. Secondly, we could transfer your personal data outside the EU to one of our group of companies or to a business partner for career purposes, but only for furthering the purposes we have defined in this policy for the processing of your personal data. Thirdly, some other service provider, such as a marketing services company, could also locate outside the EU with access to your personal data. If any of these situations would happen, we make sure that your data is transferred and processed in a legal manner with adequate safeguards, including contractual clauses and other documentation.

If you are a non-EU citizen and you provide your personal data and make requests through our website, we typically disclose your request to a local business partner who handles your request.

Period of storing your data

We will not store your personal data for a longer period than is necessary for its purpose or required by contract or law. The storage times for personal data may vary based on its purpose and the situation. We also intend to keep your data up to date. When the personal data is no longer needed for its purpose or is obsolete, we aim to delete it from our records.

Keeping your data secure

Your data is stored on the servers provided by our service providers, which are secured according to general industry standards and practices. We consider and keep your personal data confidential and do not disclose them to anyone else at Germany Artery than those who need it for their work or confidentially to our specific partners based on contracts we have made with them. Access to your personal data has been protected with user-specific logins, passwords and user rights.

mandatory to provide personal data

By default, it is not mandatory to provide us personal data. For instance, you can use our website without providing your personal data. However, in some instances, if you don’t provide us some of your personal data or allow processing of it, it may limit the services that we are able to provide you. For example, the use of our web-based services may require registration, filling forms, and maintaining a personal user-specific account.

Using cookies in our website

We use cookies on our website to provide the best possible user experience for our website visitors. Cookies are small text files that are placed on a web user’s computer and are designed to hold a modest amount of data particular to a user and a website. Cookies give us information about how users use our website. We may use cookies to develop our website and services, analyze website use as well as target and optimize marketing efforts. If you do not wish to receive cookies, you may set your web browser to disable them. Please note that most browsers accept cookies automatically. If you disable cookies, you should understand that certain services at our website may not function correctly.

Your rights relating to your personal data

• Withdraw your consentIf we process personal data based on your consent, you can at any time withdraw your consent by notifying us, for instance by sending an email to media@germanyartery.com.
• Access to dataYou have the right to get a confirmation if we are processing your personal data and to know what data we have about you. In addition, you have the right to some supplemental information described in the law about the processing activities.
• Right to have errors correctedYou have the right to request that we correct any inaccurate or outdated personal data we have about you.
• Right to prohibit direct marketingYou have the right to request that your personal data is not processed for direct marketing purposes by sending an email to media@germanyartery.com.
• Right to object processingIf we process your personal data based on public interest or our legitimate interest, you have the right to object the processing of your data, to the extent that there is no such significant reason that would override your rights or the processing is not necessary for handling legal claims. Please note that in this situation we may not be able to serve you anymore.
• Right to restrict processingIn certain situations, you have the right to require that we restrict the processing of your personal data.
• Right to data portabilityIf we process your personal data based on your consent or the fulfilling of a contract, you have the right to require the transfer of data you have provided to us to another service provider in a commonly used electronic format.

Using your rights

You can execute and use your rights by contacting us, for instance by sending an email to media@germanyartery.com. In such cases, we ask you to provide us your name, contact details, phone number as well as a copy of valid personal ID, such as a driver’s license or passport, so we can verify your identity. If you consider that the processing of your personal data is not lawful, you can always also make a notification to a supervisory authority.

Contact us for privacy matters

The registrant of the personal data register is Germany Artery UG.

You can contact us by sending an email to media@germanyartery.com.