Privacy Information Joint Processing of Data from Online Surveys by IG Metall and Works Councils

To ensure that the survey, the display of questions, and the answer options can be used as intended, it is necessary to collect and store technical data (e.g., device type, browser).
This data is stored and used exclusively for the purpose of conducting the survey. The legal basis for the processing of your personal data is Article 6(1)(a) of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), which permits processing with your consent. This consent is given by clicking the link.
The data is collected on the online platform (Netigate) until the survey is completed.
Afterward, your responses will be transmitted to IG Metall in encrypted form.

The online platform is operated by Netigate Deutschland GmbH. Netigate Deutschland GmbH acts as a contractor for IG Metall under a data processing agreement that ensures your data is handled in compliance with the GDPR.

The data stored by Netigate will be deleted upon completion of the survey.
The stored data will be retained only for as long as necessary to achieve the purposes described.

IG Metall and your company’s works council are joint controllers for conducting the surveys via the Netigate tool.
For this reason, the companies have entered into a joint controller agreement in accordance with Article 26 of the GDPR, in which they have agreed on the allocation of data protection obligations. The key provisions of the agreement are briefly outlined below:

• Both IG Metall and the works council are each responsible for complying with data protection obligations within their respective areas of responsibility.
• Data subjects may assert their rights against either party; the parties shall fully cooperate in processing the relevant requests.
• IG Metall fulfills its disclosure obligations through the privacy policy posted on this website. The works council will draw attention to this privacy policy before conducting surveys.
• In the event of a data breach, the two parties will immediately notify each other and cooperate fully in addressing the incident.
• The parties are jointly liable to the data subject for violations of data protection law in accordance with statutory provisions

If you have any questions regarding your rights, please feel free to contact us. You can find our contact information in Section 1 above. Provided the legal requirements are met, you have the following rights under Articles 15 through 22 of the GDPR:

• Right of access, i.e., the right to receive confirmation from us as to whether personal data concerning you is being processed and, if so, to receive information about such data and further details;
• The right to rectification of personal data concerning you that is inaccurate;
• Right to erasure, for example, if the personal data is no longer necessary for the purposes for which it was processed;
• Right to restriction of processing,
• The right to data portability, i.e., the right to receive the personal data concerning you that you have provided to us in a specific format;
• The right to object to data processing in certain cases for reasons arising from your particular situation, or at any time in the case of direct marketing.

You may freely withdraw your consent to data processing at any time. However, this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. If you withdraw your consent or effectively object to further processing based on your consent, we will no longer process the data for these purposes. The exercise of your rights may be limited in individual cases due to legal restrictions, particularly where processing is necessary (see Article 17(3) of the GDPR), where retention obligations exist, or where the effort involved would be disproportionately high (see Section 34(1) and (4), Section 35 of the BDSG) or in the event of an overriding public interest (see Section 36 of the BDSG). If you have any questions regarding your rights or any restrictions on them, please contact our Data Protection Officer using the contact information provided.

If you believe that the processing of your personal data is not lawful, you have the right under Article 77 of the GDPR to lodge a complaint with a competent supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the location of the alleged infringement. The address of the supervisory authority responsible for IG Metall is: The Hessian Data Protection Commissioner, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Phone 0611 14 08-0