This Initiative is Absolutely Voluntary
First, it is important to point out that, while we would be delighted to have strong support for our initiative, it is absolutely voluntary and nobody will be forced or pressured to take part.
Data Categories and Purpose
The Hundreds of Reasons to Love SUSE Initiative has been created for the purpose of engaging with our various stakeholders such as communities, customers, employees and partners to demonstrate the reasons why we “love SUSE”. To share such personal sentiments, we need to process personal data such as your selfie, your name, your email, your role as well as the input you provide (“Personal Data”).
Publication of your Personal Data
If you would like to participate, you can consent to Personal Data being published publicly on SUSE.com. If you indicate accordingly in the email you send to SUSEComms@suse.com containing your Personal Data, you thereby consent to the SUSE Group (SUSE Software Solutions Germany GmbH and its corporate affiliates) using the Personal Data to promote SUSE as part of the Hundreds of Reasons to Love SUSE initiative only. You acknowledge that the SUSE Group may publish the Personal Data publicly on SUSE.com. Personal Data shared publicly in this manner is processed according to Art 6 (1)(a) GDPR. Your Personal Data will be stored for the duration of the 100 Reasons to Love SUSE Initiative and for a reasonable wind-down time afterwards. The SUSE Group privacy policy is available here.
Publication of your Personal Data on Twitter and LinkedIn
You can also consent to your Personal Data being published externally on Twitter and/or LinkedIn. If you indicate accordingly in the email you send to SUSEComms@suse.com, a social media post containing your Personal Data will be created under SUSE’s social media accounts and will be promoted and shared accordingly. You therefore consent to the SUSE Group (SUSE Software Solutions Germany GmbH and its corporate affiliates) using the Personal Data to promote the SUSE Group’s Hundreds of Reasons to Love SUSE initiative. You acknowledge that the SUSE Group may publish the Personal Data on Twitter and Facebook. You acknowledge use of such platforms may involve the Personal Data being transferred to third parties in third countries which may not provide the same level of protection to the rights of individuals as the GDPR does. Further, you understand that once the Personal Data has been published by the SUSE Group to the aforementioned platforms, due to the nature of such platforms, complete removal of the Personal Data may not be possible. Personal Data shared externally in this manner is processed according to Art 6 (1)(a) GDPR.
The privacy policy for Twitter, Inc is available here.
The privacy policy for LinkedIn, Inc is available here.
Appendix A (Your Rights)
You have the right:
- pursuant to Article 7 (3) GDPR, to revoke your consent to us at any time, for Personal Data shared externally. Thereafter, we will not be allowed to continue the data processing based on your revoked consent for the future and we will make reasonable efforts to delete the corresponding social media post.
- pursuant to Article 15 GDPR, to request information about your Personal Data processed by us. In particular, you may request information about the processing purposes, the categories of Personal Data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a right to complain, the source of their data, if not collected from us, and the existence of automated decision-making, including profiling, and - if necessary - meaningful information about their details.
- pursuant to Article 16 GDPR, to immediately demand the correction of incorrect or completed Personal Data stored by us.
- pursuant to Article 17 GDPR, to demand the deletion of your Personal Data stored by us, except where the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
- pursuant to Article 18 GDPR, to demand the restriction of the processing of your Personal Data, insofar as the accuracy of such Personal Data is disputed by you; or the processing is unlawful, you reject the deletion of such unlawfully processed Personal Data and we no longer need the Personal Data, but where you assert, exercise or defence of legal claims or you have objected to the processing in accordance with Article 21 GDPR.
- pursuant to Article 20 GDPR, to receive the Personal Data that you have provided to us in a structured, standard and machine-readable format or to request the transfer to another controller.
- pursuant to Article 77 GDPR, to complain to a supervisory authority. For example, you can contact the supervisory authority of your location or workplace or our corporate office (see Appendix A)
To exercise any of the rights listed above, please contact privacy@suse.com. You can revoke your consent at any time, effective for the future by sending email to privacy@suse.com. This will not affect the legitimacy of processing under the consent up to the time of revocation.
Information about your right of objection under Article 21 GDPR
Case-specific Right of Objection
You have the right at any time, for reasons arising out of your particular situation, to object to the processing of your Personal Data pursuant to Article 6 (1)(e) GDPR (Data Processing in the Public Interest) and Article 6 (1)(f) GDPR (Data processing on the basis of a balance of interests). This also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR. Should you object, we will not further process your Personal Data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. Your objection should be directed to privacy@suse.com.
Appendix B (Contact Details)
1. Name and Contact Details of the Controlling Entity
The entity responsible for the collection and use of your personal information is:
SUSE Software Solutions Germany GmbH
Maxfeldstraße 5
90409 Nuremberg
Germany
Phone: +49 (0)911 74053 0
Email: privacy@suse.com
2. Contact Details of our Supervisory Authority
Our Supervisory Authority can be contacted as follows:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
3. Contact Details of the Data Protection Officer
Our Data Protection Officer can be contacted as follows:
Andrew Colyer
Phone: +65 9187 5662
Email: privacy@suse.com