Data protection

Version 2.0 (November 2020)

1. What is the purpose of this Privacy Policy?

2. Who are we?

3. What does "personal data" and "processing" mean?

4. For whom and for what is this Privacy Policy intended for?

5. Which personal data do we process and for what purposes?

6. Whom do we share your personal data with?

7. Do we disclose your personal data to countries abroad?

8. Do we perform profiling or make automated individual decisions?

9. How do we protect your personal data?

10. How long do we retain your personal data??

11. How do we process personal data of children?

12. What rights do you have in relation to the processing of your personal data?

13. What else needs to be considered?

14. Changes to this Privacy Policy

1. What is the purpose of this Privacy Policy?

This Privacy Policy sets out which personal data we process in which way and for what purposes.

With this Privacy Policy we inform you how and why we collect, process and use your personal data. It is important to us that you understand:

which personal data we collect about you;
the purpose for which we use your personal data;
how long we retain your personal data;
who has access to your personal data; and
what rights you have with regard to your personal data.

You will find corresponding notes and explanations below. Please find further details in the table at the end of this Privacy Policy. If you have any questions, please do not hesitate to contact us. You can find our contact details under section 2.

2. Who are we?

For each data processing activity a certain undertaking (the so called "controller") is responsible to ensure data protection. It is this entity that determines the purposes and means of the processing activity. In principle, the following entity ("we" or "us") is the controller with regard to the data processing in accordance with this Privacy Policy:

AMC Österreich
Alfa Metalcraft Corporation Handelsgesellschaft mbH
Handelskai 388/Top 222
1020 Wien
Österreich

Phone: +43 1 - 258 26 18 0
E-mail: hungary@amc.info

In certain cases the controller of your personal data is not us, but another group entity:

If you are in contact with another AMC group entity, then such entity is in principle the controller with regard to the respective data processing.
In certain cases, we may also transfer your personal data to another AMC group entity or to third parties, such as independent sales agents, who offer and sell AMC products and services on our behalf. In this case, the respective recipient is the controller.

3. What does "personal data" and "processing" mean?

“Personal data” is all information pertaining to a particular natural person, i.e. a human being. This for example includes the following information, provided that it can be related to a specific natural person:

contact information, e.g. name, address, e-mail address, telephone number;
further personal information, e.g. gender, birthday and age, marital status, nationality;
transaction data, e.g. information on orders, shopping history, preferences and affinity to certain product categories;
personal preferences, e.g. nutritional habits or cooking skills;
financial information, e.g. credit card number, account details, creditworthiness;
job-related information, e.g. profession, title, function, education, former employers, skills and experience, permits and admissions as well as memberships;
logs showing your visits on our websites.

We do not necessarily process all personal data mentioned in this paragraph. You will find specific information on the personal data we process in section 5 and in the table at the end of this Privacy Notice.

"Processing" means any operation or set of operations which is performed on personal data. This includes, for example, the following actions:

the collection, storage and retention;
the organisation, the arrangement and the administration;
adaptation and alteration;
retrieval and consultation;
the use and application;
the disclosure;
the alignment and the combination;
the restriction;
the erasure and destruction; and
the transfer and dissemination.

4. For whom and for what is this Privacy Policy intended for?

This Privacy Policy applies to any processing of personal data in connection with all our business activities in all our business areas. For certain services additional Privacy Policies may apply. We will inform you of these provisions in an appropriate manner where such is the case.

This Privacy Policy applies to the processing of personal data of all “data subjects”. The following persons are examples of data subjects:

Persons who write to us or contact us in any other manner;
customers or prospects who are visited by our sales staff or sales agents;
participants in sales parties, cooking classes and other customer events;
visitors of our premises;
visitors of our websites;
users of our applications;
recipients of our information and marketing communications;
participants in competitions, contests and surveys;
contact persons of our business partners and our sales agents; and
job applicants.

5. Which personal data do we process and for what purposes?

Depending on the occasion and purpose, we process very different personal data. You will find more details in this section and in the table at the end of this Privacy Policy:

Communication: We process personal data when you contact us or when we contact you, e.g. when you contact our customer service as well as when you write or call us. Normally, we only require information such as name and contact data and the content and time of the relevant messages. We use this data in order to provide you with information, process your request and to communicate with you. We can also forward messages within the AMC Group to the responsible entity offices, e.g. if your request concerns another entity.
Purchase of goods and services: We also receive and process personal data if you make use of our services, e.g. if you purchase goods or services from us. We need e.g. your name and contact data, information on the ordered goods or services as well as means of payment. In case you wish to pay in arrears, we may also need to verify your creditworthiness, for which we are retaining the services of credit agencies. We process your personal data, for example, for the processing of orders and contracts, including the dispatch of order and shipping confirmations, delivery confirmations, delivery and invoicing, as well as warranty services. From this, we may also derive information about your preferences and affinities to certain products or services. Such information helps us to provide you with specific information about offers and to generally tailor our offer more precisely to the demands of our customers.
Sales parties and customer events: When we hold sales parties and customer events (such as product demonstrations, cooking classes and promotional events), we also process personal data. Such data include the name and address of the participants or interested parties and, other data depending on the event, e.g. your date of birth. We process this information for the purpose of carrying out customer events, but also to get in direct contact with you and attract your interest for our products and services.
Information and direct marketing: We process personal data in many ways, including for information and marketing purposes. If you, for example, register for a newsletter, we will, for example, process your contact details, details about your nutritional habits, cooking skills and preferences, and information about your use of the newsletter and products previously purchased by you, in order to get to know you better and to attract your interest for our products.
Visiting websites; using apps: When you visit our websites, we process personal data. The processing depends on the offer and functionality of the website. This data includes, for example, log data, information about the time our website was accessed, the duration of the visit and the pages accessed. We use this data for reasons of IT security, but also to improve the user-friendliness of the website and its functions. We also use "cookies", which are small text files that are temporarily or permanently stored on your device when you visit our website. Cookies are often required for the functionality of the website. Others are used to personalize the offer. We also use analytic tools such as Google Analytics. These tools allow the evaluation of the users’ behaviour on the respective websites. Finally, we may use functionalities from providers such as Facebook, which may result in the provider concerned processing data about you. Please refer to the table at the end of this Privacy Policy for further details. There you will also learn how you can prevent these processing activities.
Competitions, contests and surveys: From time to time we also organise competitions, contests and surveys. In this case, we process your contact data and information about your participation for the purpose of carrying out the competitions, contests and surveys, as well as the contributions provided by you. Further details can be found in the respective conditions of participation.
Business partners: We work together with various companies and business partners, e.g. with independent sales agents, suppliers, commercial customers of goods and services, with cooperation partners and with service providers (e.g. IT service providers). We also process personal data about the contact persons in these companies, e.g. name, function and title, as well as information regarding deliverables and payments.
Job applications: We also process personal data when you apply to us. As a general rule, we require the usual information and documents as well as the ones mentioned in a job advertisement.
Protection of rights: We process personal data in various situations in order to protect our rights, e.g. to assert claims in and out of court and before local and foreign authorities or to defend ourselves against claims. For example, we can have process prospects clarified or submit documents to an authority. Authorities may also require us to disclose documents containing personal data.

The table at the end of this Privacy Policy describes in more detail what types of personal data we collect about you, how and for what purposes it is used, on what legal basis and whether you are obliged to provide us with personal data.

6. Whom do we share your personal data with?

Our employees and sales agents have access to your personal data as far as it is necessary for the described purposes and the work of the employees or sales agents concerned. They act in accordance with our instructions and are bound to confidentiality and secrecy when handling your personal data.

We may also transfer your personal data to other entities within the AMC Group for the purpose of internal group administration and for the various processing purposes described in this Privacy Policy. This means that your personal data can also be processed and combined with personal data originating from another AMC Group entity for the respective purposes.

We may also disclose your personal data to third party service providers who perform certain business operations on our behalf, in particular:

IT services, e.g. services in the areas of data storage (hosting), cloud services, dispatch of e-mail newsletters, data analytics etc.;
Consulting services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel recruitment and placement;
transport and logistics services, e.g. for the dispatch of ordered goods;
administration services, e.g. real estate management;
business information and debt collection, e.g. if you want to make a purchase on account or if due receivables are not paid;

There are also other cases where we may disclose your personal data. For instance, we may disclose your personal data to third parties (e.g. authorities) if this is required by law. We also reserve the right to process your personal data in order to comply with a court order or to assert or defend legal claims or if we deem it necessary for other legal reasons.

7. Do we disclose your personal data to countries abroad?

The recipients of your personal data (section 6) may be located abroad - even outside of the EU or the EEA. The AMC-Group is represented globally. A list of countries is available at the top right corner of this website. The countries concerned may not have laws that protect your personal data to the same extent as the laws in Switzerland, the EU or the EEA do. We refer to such countries that do not provide for adequate protection "third countries". If we disclose your personal data a third country recipient, we will take appropriate measures to ensure the protection of your personal data. For this purpose, we conclude data transfer agreements based on the EU standard contractual clauses. You may access a copy here.

8. Do we perform profiling or make automated individual decisions?

“Profiling” means any form of automated processing in order to analyse or predict certain personal aspects. We may perform such profiling for the purposes set out in section 5. For example, we analyse shopping behaviour, the use of our websites, portals and apps and, based on this, make assumptions about your personal interests, preferences, affinities and habits. This profiling helps us to better tailor our offerings to your individual needs. It also supports our IT security. In order to improve the quality of our analyses, we can also link personal data that originates from different sources, for example data collected offline and online as well as data collected through our different services or data that we receive from other companies in the AMC Group.

“Automated individual case decisions" are decisions which are made fully automatically, i.e. without any relevant human influence, and which have negative legal effects or other similar negative effects on you. As a matter of principle, we do not make automated individual decisions. We will inform you separately should we use automated individual decisions in individual cases.

9. How do we protect your personal data?

We apply appropriate technical and organisational security processes to safeguard the security of your personal data and to protect it against unauthorised or unlawful processing and to prevent the risk of loss, unintentional alteration, unintentional disclosure or unauthorised access. However, the electronic transfer of information in particular entails security risks that cannot be completely ruled out. If you transfer information in this way, you do so at your own risk.

10. How long do we retain your personal data?

We retain your personal data for no longer than this is necessary for the purposes for which the information is collected. We moreover retain personal data as long as we have a legitimate interest in the storage, e.g. if we need personal data for the performance of contractual duties (e.g. honouring of warranty claims) for the enforcement of or the defence against claims, for archiving purposes and for guaranteeing IT security or in the case of running statutes of limitations. We also retain your personal data as long as it is subject to a legal retention obligation. Other documents must only be retained for a short period, which is the case, for example, for video surveillance recordings or for recordings of certain Internet processes (log data).

11. How do we process personal data of children?

We do not process any personal data of children. Should this nevertheless be necessary, we take special care to protect children, and if we process personal data of children based on consent, we ask the parents or the legal representatives for their consent. If consent for a child has been given by its parents or legal representative, the adult person is free to revoke this consent at a later date.

12. What rights do you have in relation to the processing of your personal data?

You can at any time object to the processing of your personal data or freely withdraw your consent to the processing of your personal data. A right of objection exists in particular against data processing in the context of direct advertising. If you revoke your consent or effectively object to further processing for a specific purpose, we may no longer process your personal data for the corresponding purposes.

In addition, you have the following rights:

Right	Description	Remarks
Right of access	You have the right to request, at any time and free of charge, access to your personal data stored and processed by us. This gives you the opportunity to check which personal data we process about you and to verify that it is used in accordance with the applicable data protection regulations.	In some cases, the right to information may be limited or excluded, in particular: if you were not able to sufficiently identify yourself; to protect the rights and freedoms of other persons (e.g. confidentiality obligations or third party data protection rights); in the event of excessive exercise of the right to access (alternatively, we may demand payment for the information); or if a comprehensive provision of information would generate disproportionate efforts.
Right to rectification	You have the right to have incorrect or incomplete personal data corrected and to be informed of such rectification.
Right to erasure	You have the right to have your personal data erased. You can request the deletion of your personal data if: the personal data are no longer necessary for the purposes pursued; you have effectively withdrawn your consent or have effectively objected to the processing; the personal data is being processed unlawfully.	In individual cases, the right to erasure may be excluded, especially if processing is necessary: for the exercise of freedom of expression and information; to perform a legal task or a task in the public interest; for the establishment, exercise or defence of legal claims.
Right to restrict processing	Under certain circumstances, you have the right to request that the processing of your personal data be restricted. This may for example mean that personal data will (at least temporarily) not be processed any further or that personal data that has been published will (at least temporarily) be removed from a website.
Right to data portability	You have the right to receive the personal data concerning you, which you have provided to us, free of charge, in a commonly used and machine-readable format, provided that: the specific data processing is based on your consent or is necessary for the performance of the contract; and the processing is carried out by automated means.	Depending on the individual case, your personal data may be transferred to you or directly to another controller.
Right to lodge a complaint	You have the right to lodge a complaint with a competent supervisory authority about the way we handle or process your personal data.

13. What else needs to be considered?

Legal basis: The GDPR requires us to inform about the relevant legal basis for our data processing activities. In the table at the end of this Privacy Policy you will find information on the legal basis on which we usually base the respective data processing activities. Due to the complexity of many data processes, it cannot be ruled out, however, that in individual cases - depending on the circumstances - other legal bases may also apply.
Obligation to provide personal data: The GDPR also requires you to be informed whether you are obliged to provide your personal data due to a legal or contractual requirement or because the data is necessary to enter into a contract. We must moreover inform about the possible consequences when you fail to provide such data. You will also find corresponding information in the table at the end of this Privacy Policy. As a general rule, the disclosure of personal data is voluntary.
Third party personal data: You may wish or need to provide us with third party personal data. We would like to point out that in this case you are obliged to inform the relevant persons about such data disclosure and about this Privacy Policy. You are also obliged to obtain the consent of the relevant person for such disclosure.

14. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time if we change our data processing activities or if new legislation becomes applicable. We actively inform people registered with us of such modifications if this is possible without disproportionate effort. In general, however, a data processing activity is subject to version of the Privacy Policy which is the latest version at the beginning of the relevant processing.

Table: Reason for data collection; scope, purpose and obligation to make data available; legal basis for processing

Communication with us
Purchase of goods and services
Participation in sales parties and customer events
Electronic newsletters and direct marketing
Visiting our website (in general)
Visiting our website (cookies in general)
Visiting our website (analysis of user behaviour)
Using our applications
Participation in competitions, contests and similar events
Entering an area under video surveillance
Wi-Fi on our premises
Contact with our firm as business partner
Job applications
Compliance with legal requirements
Protection of rights

In this table you will find detailed information on the individual processing purposes, the personal data processed for these purposes, the applicable legal bases and information on whether you are obliged to provide us with the personal data concerned. Please note that in many cases it is not possible to provide a complete list. If you would like further information on the individual data processing steps, please contact us using the contact details provided in section 2.

Reason for the data collection	Personal data being processed	Processing purpose and obligation to make data available	legal basis for processing
Communication with us	We collect personal data when you contact us in writing, electronically or by phone, e.g. when you contact our customer service. We process contact and communication data, including in particular the following personal data: your name; depending on the type of communication, your contact data such as postal address, e-mail address and telephone number; content and time of the communication.	In this context, we process your personal data for the following purposes: Customer service and maintenance; general communication with you: It is important to us that you can contact us and report your concerns. Quality assurance and training: The possible recording of conversations helps us to analyse and improve our processes. Of course, you are not obliged to provide us with specific information. However, we can often only answer your queries if you provide us with certain minimum details.	The processing of data by our customer service is within our legitimate interests, as it enables us to improve the quality of our services, avoid errors in our processes and achieve higher customer satisfaction. If you contact us to conclude a contract, our legal basis is the performance of the contract or the taking of steps prior to entering into the contract.
Purchase of goods and services	When you shop with us, we process personal data in connection with your purchasing and payment behaviour. This includes, in particular, the following personal data that may be sensitive: your name; your contact details including delivery and invoice address; information about products ordered by you; payment information. For purchases on account we can check your creditworthiness. For this purpose, we usually obtain information from specialized companies, so-called credit agencies. We may also evaluate information about purchases and behaviour and link it to other personal information we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills).	In this context, we process your personal data for the following purposes: Processing: We process your personal data so that we can record your purchases and deliver the products when ordered. Customer services, e.g. with respect to the processing of warranty claims. Information about your purchasing behaviour: We analyse the purchasing behaviour of our customers and gain information from that, which we consider when improving our services. You are not obliged to provide us with personal data when making purchases. However, orders, the purchase of services and the purchase of certain goods are not possible without us processing personal data. Also shopping in online shops requires that we process the necessary personal data.	The legal basis for our processing is the performance of the contract. The processing of information about your purchasing behaviour is based on legitimate interests. Through the collected personal data we can tailor our services better and more specifically to your needs and interests and expand and improve our offerings.
Participation in sales parties and customer events	We process personal data when we invite you to sales parties or customer events (such as product demonstrations or cooking classes). In particular, this includes the following personal data: your name; your contact details; your participation or non-participation; further, event-specific data, such as your date of birth. We may also evaluate your personal data and combine it with other personal data that we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills).	We process your personal data in order to invite you to our events and to find out which customer events you are interested in. In this way, we can draw your attention specifically to the customer events that we hope will be of interest to you. Participation in customer events is voluntary, but usually not possible without the processing of personal data.	We process your personal data after you have given us your consent to inform you about the relevant customer events or if you have registered for one of our customer events. The processing mentioned to the left is also in our legitimate interest, because it enables us to get in touch with you personally and to get to know you better. This enables us to better tailor our services to your needs and interests and to expand and improve our services.
Portals, electronic newsletters and direct marketing	When you subscribe to an electronic newsletter or if you purchase products from us, we will in particular process the following personal data: your name; your contact details; your e-mail address; the information whether you have consented to the receipt of newsletters or have filed an objection. We may also process information about your use of the electronic newsletters; this includes in particular the following personal data: receipt of the newsletter; if and when you have opened and possibly forwarded the newsletter; links that you have clicked (target, date and time). We may also evaluate your personal data and combine it with other personal data that we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills cf. section 8 regarding profiling).	We process your personal data in order to send you the electronic newsletter. We process personal data about your use of the electronic newsletter in order to get to know you better and to be able to tailor our services more specifically to you. This data processing is voluntary for you. However, if you do not provide us with your personal data, in particular your e-mail address, we will not be able to offer you this service. You can withdraw your consent for electronic newsletters and other direct marketing at any time by unsubscribing from this service. Withdrawal can be done via a link which is included into every electronic newsletter, or you may contact us (section 2).	The processing of your personal data regarding the newsletter is based on your consent given to us when you sign up for the newsletter. All other processing mentioned to the left is in our legitimate interest, because it enables us to get in touch with you personally and to get to know you better. This enables us to better tailor our services to your needs and interests and to expand and improve our services.
Visiting our website (in general)	Every time you access our websites, for technical reasons, your browser transfers certain data to us and stores them in log files. This includes the following usage data, for example: IP address and device-specific information such as the MAC address of the device; contents accessed and the date and time of the visit to the website.	In this context, we process your personal data for the following purposes: Provision of the website: The recording of certain log files is compulsory in connection with the provision of the website. Website management: The processing of log files helps us to maintain and correct errors, to ensure the security of our website and to fight against fraud. Individualization and optimization of the website: We want to design our website as individual and user-friendly as possible. For this purpose, we store individual settings, e.g. that you have already called up the relevant website, which settings (e.g. language settings) you made at that time and which functionalities you used.	The processing of log files is in our legitimate interests.
Visiting our website (cookies in general)	This website uses cookies and similar functions as listed in our Cookie Notice. Cookies are small files that your browser automatically creates and that are stored on your device when you visit our website. On the one hand, we use session cookies in which a unique identification number is stored, a so-called session ID, and information about the origin and storage period of the cookie. These cookies are deleted after your visit of our website. On the other hand, we use permanent cookies that remain stored even after the end of the respective browser session. Such cookies are used to recognize a visitor at a later visit.	We use cookies for the following reasons: Cookies help us to ensure and safeguard the various functions and services of our website. The storage of cookies enables us to make it easier for you to use our website and to make functionalities as user-friendly as possible, for example by saving language settings or entries made for the duration of a browser session. Furthermore, cookies serve to adapt our online services to your needs. By collecting and evaluating information about the use in general and the behaviour of visitors of our website and the devices used for this purpose, we can provide you with targeted services of goods and services as well as other information that may be of particular interest to you. You are not obliged to accept cookies used by us. You can configure your device (tablet, PC, smartphone, etc.) so that a message appears before a new cookie is created. This allows you to decline cookies. You can also delete cookies from your terminal. Further, you have the option of preventing the collection of data generated by the cookie (including your IP address) and the processing of this data by downloading and installing an appropriate browser add-on. However, rejecting or deactivating cookies may imply that you are not able to use all functions of the website.	The use of necessary cookies serves our legitimate interests. Some cookies are necessary, for example, to save individual settings or to offer shopping baskets. This individualization is also in the interest of our website visitors. Our legal basis for statistics and marketing cookies is your consent given via the cookie banner when you accessed this website. You can at any time change or withdraw your consent by clicking the link “Change your consent” or “Withdraw your consent” in our Cookie Notice.
Visiting our website (evaluation of user behaviour)	On our website, we use Google Analytics, an analysis service of Google, Inc. Google Analytics uses cookies that enable an analysis of the website use. General information about cookies can be found in this table under "visiting our website (cookies in general)". Thereby, information about your behaviour on our website and the device used (PC, tablet, smartphone, etc.) are stored. This information is stored on a Google server in the USA. However, your IP address will first be shortened in the EU or the EEA. Only in exceptional cases will the full IP address be transmitted to the USA. Google Analytics also makes it possible to assign data, sessions and interactions across several end devices to a pseudonymous user ID and thus to analyse the activities of an unknown user across devices. For more information, please see Google's Terms of Use and Privacy Policy. We also use similar services from other providers as listed in our Cookie Notice. The providers often do not receive any personal data, but can record the user's use of the concerned website. These records may be linked to information from other websites that use the same service. The behaviour of a particular user can be recorded across multiple websites and devices. The respective provider can also use this data for his own purposes, e.g. for personalised advertising.	This information is used to better understand the use of our website and to improve its content, functionality and easy access. For example, we can see from which pages most visitors come to us, which pages are visited most often, and from which pages most visitors leave us. You can prevent the use of Google Analytics by installing an add-on for your browser, available here.	Our legal basis for statistics and marketing cookies is your consent given via the cookie banner when you first accessed this website. You can at any time change or withdraw your consent by clicking the link “Change your consent” or “Withdraw your consent” on our Cookie Notice.
Visiting our website (Facebook Pixel)	Our website uses the so-called "Facebook Pixel" by Facebook Irland Ltd. with offices at Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The Facebook Pixel is integrated on our web pages and can store a cookie on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our offers is noted in your profile. The data collected about you is anonymous to us and does not give us any information about the identity of the user. However, the data is stored and processed by Facebook in order to allow a connection to the respective user profile. We have entered into this Joint Controller Addendum with Facebook to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the collection of your personal data and its transmission to Facebook. Further information on how Facebook processes personal data, including the legal basis Facebook relies on and the ways to exercise data subject rights against Facebook can be found in Facebook’s Data Policy at https://www.facebook.com/about/privacy. Facebook is responsible for enabling data subjects’ rights under Articles 15-20 GDPR regarding the Personal Data stored by Facebook after the joint processing.	Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from this website and elsewhere on the Internet and use that information to provide measurement services and target ads. We use Facebook Pixel to allow the display of Facebook ads to those Facebook users who have shown interest in our online offers. By using Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were directed to our website after clicking on a Facebook ad. You can opt out of the collection and use of information for ad targeting by using the mechanism at http://www.youronlinechoices.eu.	Our legal basis for the use of Facebook Pixel is your consent given for marketing cookies via the cookie banner when you first accessed this website. You can at any time change or withdraw your consent by clicking the link “Change your consent” or “Withdraw your consent” on our Cookie Notice.
Using our applications	We develop various applications, for example, to operate selected AMC products via your mobile device. The use of our applications may require your registration. To register, you need to provide data including your name, email address and a password. You may choose to provide further information on your profile, such as information on your AMC products. Data on the user’s activities will be anonymized and aggregated for statistical analysis. This data cannot be assigned to individual users.	We will process your personal data in order to provide the functions of the applications according to their terms of use. The use of our applications is voluntary. However, the use requires the necessary information for your registration (to prevent misuse by unauthorized third parties).	Our processing is generally based on the performance of a contract - in this case, the terms and conditions of the respective application. If we ask you for a separate consent for specific processing, your consent will be the legal basis for said processing.
Participation in competitions, contests and surveys	We collect personal data when you participate in competitions, contests and surveys ("event"). The scope of the personal data processed may vary depending on the event. The personal data which will be processed in particular include the following personal data: Your name; Your date of birth; Your contact details; the fact that you participate; the result of the participation; the input that you provide; correspondence about the event, if applicable. Further details can be found in the corresponding conditions of participation. We may also evaluate your personal data and combine it with other personal data, such as non-personal statistical information and other personal data that we have collected about you, in order to derive information about your preferences and affinities with certain products or services.	We will process your personal data in order to carry out the respective event and to notify the winner. With your consent we will also use your name and contact details for analysis and marketing purposes. For these purposes, we may combine your information with other non-personal and personal data that we have stored about you. Participation in such events is voluntary, but not possible unless personal data is being processed.	The legal basis for our processing the performance of a contract - in this case, the conditions of participation. If we ask you for a separate consent for specific processing, your consent will be the legal basis for said processing.
Entering an area under video surveillance	We take video recordings in appropriately marked areas. We may thus obtain information about your behaviour in the relevant areas. The use of video surveillance cameras is limited to specific locations and clearly marked. In addition, the data collected in this manner is only available for processing to specific employees.	Such processing is carried out for your own safety, the safety of our employees and for evidence purposes. If criminal acts are suspected, we can make the recordings available to the prosecution authorities. If you do not want to be recorded, we must ask you not to enter the relevant areas.	It is within our legitimate interest to ensure our customers' and employees' safety in the relevant areas and to prevent possible crimes against our employees and our customers as well as to contribute to their investigation.
Wi-Fi in our premises	We collect device-specific data from your device as soon as you log in via our Wi-Fi infrastructure. This particularly includes the following information: the MAC address of your terminal device (a unique identifier for the device); date, time and duration of the connection. In most cases, we cannot assign this information to a specific person. When you use our Wi-Fi network, we will in particular process the following information: duration of the connection; location of the used Wi-Fi service; the volume of data used.	We process this information in order to provide you with Wi-Fi services and for IT security purposes. The use of our Wi-Fi service is voluntary. You are in principle also not obliged to disclose any personal data to us. However, it may not be possible to use the Wi-Fi service without your personal data being processed accordingly.	Our processing is based on the performance of a contract - in this case, the performance of the Wi-Fi services. The processing for IT security purposes is also within our legitimate interest
Contact with our firm as business partner	If you work for a company that supplies or purchases goods or services from us or that works together with us in some other way, we process personal data about you, such as, for example, Your name; your position, your title, your field of activity; stations of your professional career; your interactions with us; information on deliverables and payments.	The processing of personal data serves the following purposes: to check whether we obtain services from your company or deliver them to your company or whether we want and can work together with your company (e.g. in the course of suitability tests, checks for conflicts of interest, etc.); to check whether your company offers the required security standards, e.g. if it would process personal data on our behalf; to plan the work schedules of our employees and, if necessary, of you or of employees of your company; for the purpose of performing contracts with your undertaking; for monitoring and performance evaluation; for the preparation and processing of company takeovers and sales and similar transactions. You are not obliged to provide us with personal data . Yet, if you do not wish to provide us with the required personal data, we may not be able to work with you. In exceptional cases we are even legally obliged to process such personal data. We will always point out to you where this is the case.	We base our processing on the fact that we are allowed to process your personal for the performance of a contract. The processing mentioned is also within our legitimate interest because it enables us to make use of external services and thus increase our efficiency.
Job applications:	When you apply for a job at our company, we process your contact details and the information provided to us (e.g. application, contact details, curriculum vitae, qualifications, certificates, etc.; possibly sensitive personal data if you choose so). Other personal data may also be required in the course of a job application, depending on the position and profile.	We process your personal data to check your suitability for the position in question and to discuss possible employment with you. With your consent, we may also keep your application pending if we - or you - refrain from employment with a view to a possible later employment. It is voluntary to provide the respective personal data, but we cannot process an application without the necessary personal data.	Our basis for said processing is the taking of steps prior to entering into a contract. If we conclude an employment contract, we process data to perform the employment contract according to the privacy policy for our employees. If no employment contract is concluded, we will save your data after the application process with your consent only. If you provide sensitive personal data to us (e.g. health data), the processing will be based on your consent.
Compliance with legal requirements:	In order to comply with legal obligations, we may have to or want to process personal data. This is the case, for example, if an authority requires documents containing your name and contact details, or if we carry out an investigation. We may also conduct internal investigations in which your personal data may also be processed.	We in particular process your personal data for the following purposes: compliance with legal obligations, including orders from a court or authority; preventive measures to ensure compliance; measures to detect and clarify abuses.	Processing for the aforementioned purposes is necessary for compliance with legal obligations and for legitimate interests.
Protection of rights:	We process personal data in order to protect our rights, e.g. to assert claims in court, in or out of court and before local and foreign authorities or to defend ourselves against claims. For example, we can have process prospects clarified or submit documents to an authority. Authorities may also require us to disclose documents containing personal data. In addition to contact details of the persons concerned, we process other personal data depending on the constellation, e.g. information on processes that have given or could give rise to a dispute. This may also include sensitive personal data.	We process this personal data for the following purposes: Clarification and enforcement of our claims, which may also include claims by companies affiliated with us and our contractual and business partners; Defence against claims against us, our employees, companies affiliated with us and our contractual and business partners; Clarification of process prospects and other legal, economic and other issues; Participation in proceedings before courts and local and foreign authorities.	Processing for the aforementioned purposes may be necessary for the performance of contracts. It is also within our legitimate interests.