Privacy Notice on the Use of Testimonials, Photos, and Videos for Marketing Purposes

In accordance with the requirements of Art. 13 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data in connection with the use of testimonials and statements about the collaboration with our company.  

I) Controller pursuant to Art. 4 No. 7 GDPR

The organiser is:

Yoummday GmbH 
Infanteriestraße 11a/Haus E2 
80797 Munich 
Tel.: +49 89 231 66 00 00
E-mail: info@yoummday.com
Managing Directors: Dr. Klaus Harisch, Pablo Harisch, Claas van Delden, Benjamin Tüzen

II) Contact Details of the Data Protection Officer

Björn Barthelmes 
Karl-Frank-Straße 35 
12587 Berlin 
E-Mail: datenschutz@yoummday.com  

III) Nature and Scope of Processing

As part of our marketing and communications activities, we process personal data that you voluntarily provide to us.

This may include in particular the following data:

For external publications – if approved (e.g. in marketing materials):

• Your first name and the first letter of your last name (e.g. "Max M.")
• Quotes or statements from you about your work or your experiences with our company, provided you make such statements available to us
• Photo and video recordings in which you are recognizable, provided you make such recordings available to us

Content you provide may be editorially processed as part of its use for marketing purposes:  

• Shortening, linguistic adaptation, or translation of quotes or statements
• Editing of image and video material (e.g. cropping, selection of excerpts, or adding subtitles)

In some cases, content may be shortened or used in excerpts. However, we take care to ensure that the essential substance of the statement is preserved and that your interests are not adversely affected.

IV) Purposes and Legal Basis of Processing

The processing is carried out for the purpose of external representation, reference communication, and the marketing of our services.

This includes in particular marketing and communications activities directed at:

• existing and prospective business clients
• existing and prospective freelance talents

For this purpose, personal data may be used on the communication and publication channels referred to in Section V.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Any consent given may be withdrawn at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

V) Recipients or Categories of Recipients of Personal Data and Third-Country Transfers

Within our company, only those departments that require access to personal data for the purposes stated above will receive such access.

This includes in particular:

• our Talent Marketplace department
• our Client Marketing / Sales / Brand department
• our IT department

As part of our marketing and communications activities, provided content may be published on:

• our websites: yoummday.com and join.yoummday.com
• in sales and company presentations
• in other marketing materials (e.g. flyers)

When content is published on the internet, it cannot be ruled out that it may also be viewed, stored, or further processed by third parties, including by providers outside the European Union or the European Economic Area.

In addition, we use external service providers for publication.
This includes:

VI) Storage Period

The data will be deleted once it is no longer required for the purposes stated above.

If you withdraw your consent, we will delete the affected quotes, photos, and video recordings after receipt of your withdrawal, to the extent possible for us. Please note that a complete recall of already distributed content is not possible in all cases – for example, quotes on flyers that have already been distributed or other physical materials already in circulation.

Likewise, with regard to content published on the internet (e.g., quotes, photos, and video recordings), it cannot be ruled out that such content has been copied or further processed by third parties. As a result, such content may still be found elsewhere even after its deletion from the website or channel on which it was originally published.

VII) Your Rights

You may exercise your rights under Articles 15–21 GDPR at any time.

Right of access pursuant to Art. 15 GDPR
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access that personal data in accordance with Art. 15 GDPR.

Right to rectification pursuant to Art. 16 GDPR
You have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.

Right to erasure ("Right to be forgotten") pursuant to Art. 17 GDPR
Subject to Art. 17(3) GDPR, you have the right to request that personal data concerning you be erased without undue delay.

Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to request the restriction of processing in accordance with Art. 18 GDPR.

Notification obligation pursuant to Art. 19 GDPR
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Articles 16, 17(1), and 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided, where Art. 20(1)(a) or (b) GDPR applies.

Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. This right exists without prejudice to any other administrative or judicial remedy.

The data protection supervisory authority responsible for us is:

Right to withdraw consent
Where the processing of your personal data is based on consent pursuant to Art. 6(1)(a) GDPR, you have the right under Art. 7(3) GDPR to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. Upon receipt of your withdrawal, we will no longer process the affected personal data, unless another legal basis permits or requires further processing.

Right to object
Where the processing of your personal data is based on Art. 6(1)(f) GDPR for the purposes of legitimate interests, you have the right under Art. 21 GDPR to object at any time to the processing of that data on grounds relating to your particular situation. We will then no longer process that personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

To exercise your rights, you may contact us at datenschutz@yoummday.com or privacy@yoummday.com.