Privacy Policy

5. Data we collect when you contact us (either through our contact form, e-mail, phone or by fax)

You can reach us through our contact form, email, phone and fax.  Requests will be directed to the relevant entity listed in the imprint or as otherwise indicated.
We process your data to fulfill a contract, handle pre-contractual measures, or based on our legitimate interest in managing inquiries. 
In certain regions we may also process your personal data for our legitimate interest in order to provide you with personalized information about our products and services as well as conduct market research and satisfaction surveys. 
In case we process your data based on our legitimate interest, you have the right to object to such processing. More information on your rights and how to assert them can be found in section 10 “Your rights as a data subject”.

6. Product purchase or use of our services

We process your data to fulfill and execute your product purchase and use of our services, and base our processing on the fulfillment of the contract or legitimate interest. 
In certain regions we may also process your personal data for our legitimate interest in order to provide you with personalized information about our products and services as well as conduct market research and satisfaction surveys. 
In such case, you have the right to object to such processing. More information your rights, and how to assert them, can be found in section 10 “Your rights as a data subject”.

7. Application

You can apply for the positions we offer via the e-mail address provided and our contact form. 

We will treat your data with strict confidentiality and use it solely for processing your application. If an employment contract is concluded after the application process, we store the data from your application that is required for your employment relationship. If your application is not successful, your data will be deleted after one (1) month, except if your application is with our German affiliate where we delete your data six (6) months after rejection.  
If you'd like us to consider your application for other or future job openings, please indicate this in your application. We will then process your data on the basis of your consent for a one (1) year period.

We process the information you provide us with based on the legal basis of fulfilling or entering into a contract and, in rare cases, based on our legitimate interest to be able to defend us against any claims relating to the application. If your data is processed by our UK entity, it's based on our legitimate interest in assessing your suitability for the position.

In case we process your data based on our legitimate interest, you have the right to object to such processing. More information on your rights and how to assert them can be found in section 10 “Your rights as a data subject”.

8. Storage period

Unless we have already informed you in detail about the storage period, we delete personal data when they are no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) obligations mandate the storage of the data. Legal obligations might involve adherence to the controller's country's commercial code, tax obligations, or the need to defend against legal claims. These are especially relevant for data collected during a commercial relationship or employment.

9. Recipients

We may disclose your personal data to third parties to achieve the purposes outlined in this Privacy Policy.

Due to the Asteria group’s structure, your personal data might be processed by some departments and individuals on a strictly ‘need-to-know’ basis. This of course done in compliance with the applicable data protection laws.

Additionally, we have engaged external service providers, who may also receive data to assist us with the previously described purposes. These include (but are not limited to) service providers who support us with the following processing activities: payment/billing, IT services, hosting, customer service, email delivery, sales, data analysis, surveys, archive, advisory and consulting services.

In accordance with the applicable data protection laws, and only if there is a lawful basis, we may share your data with additional recipients. These could be law enforcement, tax authorities, data protection authorities, credit agencies, or other companies in so far relevant.

Only if there is a legal basis and we have implemented appropriate data transfer mechanisms, will we share your data to recipients outside of our group. 
For more information, you may contact us using the email address in the imprint or through our contact form.

10. Your rights as a data subject

When processing your personal data, you have certain rights as a data subject:

Right to access your data, as well as to receive a copy
Right to rectification and erasure
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority, if you believe that the processing of your data violates data protection regulations.

In order to assert your rights, please contact us using the details provided in the imprint.