Protecting your personal data is a top priority for the ASYS company group (hereinafter also referred to as “ASYS”) and plays a key role in our business processes.
With the introduction of the EU General Data Protection Regulation (GDPR), new and more extensive data protection regulations apply. In view of this legal situation, we would like to inform you about the processing of your personal data by ASYS and the rights to which you are entitled under data protection law.
The data collection is carried out for the purpose of operating a website, for data transmission via a contact form, for writing and reading cookies. The collection is based on Art. 6, (1) (a) GDPR, as well as on Art. 6, (1) (f) GDPR. Your visit to this website creates a relationship between you and the operator of this website according to Art. 6, (1) (f) GDPR.
Personal data means any information relating to an identified or identifiable natural person. With this data protection notice, we inform you about the type, scope and purpose of the collection of personal data at ASYS and how ASYS handles this data. In addition, you will learn what rights you have with regard to the processing of your personal data.
The following information applies to all natural persons whose personal data is stored and who are in a business relationship with ASYS.
Responsible Body According to the Data Protection Act
Information according to Art. 13 GDPR
Person responsible:
ASYS Automation Systems GmbH
Benzstr. 10
89160 Dornstadt, Germany
E-mail: info(at)asys-group.com
Internet: https://www.asys-group.com
Represented by: Werner Kreibl, Klaus Mang, Jürgen Ries, Dr. Alexander Näser
Your personal data will be processed in compliance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant legal provisions.
The contact details of our data protection officer are as follows:
Tobias Marx
dsg Datenschutz GmbH
Zeppelinstr. 9
89231 Neu-Ulm, Germany
E-Mail: datenschutz(at)dsg-ulm.de
Internet: https://dsg-ulm.de
Purpose of the Data Processing
The data collection is carried out for the purpose of
a) the operation of a website.
b) the transmission of data within an online contact form.
c) the writing and reading of cookies.
d) the evaluation of website accesses.
The following categories of data are processed:
1) Customer Data
The data processing is carried out for the purpose of maintaining the customer relationship.
2) Supplier Data
Data processing is carried out for the purpose of maintaining the supplier relationship.
3) Personnel/Applicant Data
Data processing is carried out for the purpose of employee management.
Data processing is carried out for the purpose of employee recruitment.
The data you provide will be stored and processed for the above-mentioned purposes on the basis of Art. 6 Para. 1 Sentence 1 (b) Basic Data Protection Regulation (GDPR) and Art. 6 Para. 1 Sentence 1 (a) GDPR in conjunction with Art. 7 GDPR.
The fields marked as mandatory are required for accepting agreements; failure to provide them may mean that the corresponding transaction cannot be processed. No automated decision-making including profiling pursuant to Article 22(1) and (4) GDPR takes place.
Measures within ASYS
All of our employees who process personal data are trained in accordance with the GDPR and are therefore obligated to comply with the GDPR principles for the processing of personal data and the requirements of data protection law as set out in Article 5 (1) of the GDPR.
Use and Disclosure of Personal Data
As a matter of principle, personal data is not transferred to third parties.
Exception: A transmission to public authorities, for example law enforcement agencies or tax advisors, takes place if there is a legal obligation. Furthermore, data will only be transferred to third parties if this is necessary for the above-mentioned purposes and is permitted by law or if you have given your prior consent. Furthermore, we are obliged to transmit data to official recipients in accordance with Art. 6 (1) (c) GDPR in the event of mandatory background checks. In the case of employment of applicants from third countries, data is transferred to the central foreign and specialist placement office of the German Employment Office.
Categories of recipients of personal data are:
Technical operator of the website, person responsible for the website within the meaning of the GDPR, affiliated ASYS group companies, processors within the meaning of Art. 28 GDPR. Corresponding contracts with third-party data processors have been concluded.
Duration of Storage
The storage period of your personal data depends on the legal retention periods or on the existence of any consent you may have given.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the computer system of a user. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. We use cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. Therefore, it is necessary that the browser is recognized even after a page change.
We also use cookies on our website for the purpose of analyzing the surfing behavior of our site visitors. Furthermore, we use cookies for the purpose of subsequently addressing site visitors on other websites with targeted, interest-related advertising. The processing is carried out on the basis of your consent given with the help of the consent tool and Art. 6 (1) (a) GDPR.
The data collected from you in this way is pseudonymized by technical precautions. An assignment of the data to your person is therefore no longer possible. The data will not be stored together with other personal data from you.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your Internet browser, you can prevent the storage of cookies and transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
The following cookies are used:
Privacy Policy for the Use of Google Tag Manager
What personal data is collected and to what extent is it processed?
On our site, we use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programs by means of so-called "tags". In this context, Google Tag Manager stores cookies on your computer and analyzes your surfing behavior (so-called "tracking"), insofar as web tracking tools are executed by the Google Tag Manager. These individual tags are aggregated within the Google Tag Manager, where they are stored and processed under a unified user interface. All integrated "tags" are listed separately again in this privacy policy. You can find more information on the data protection of the tools integrated in Google Tag Manager in the respective section of this data protection notice. In the course of using our website when the integration of tags from Google Tag Manager is activated, data such as, in particular, your IP address and your user activities are transferred to servers of Google Ireland Limited and processed and stored outside the European Union, e.g. in the USA. This is the case with Google Ireland Limited. With regard to the web services integrated by means of Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager before transmission by means of IP anonymization of the source code. In doing so, Google Tag Manager is only enabled to collect IP addresses anonymously (so-called IP masking). Data protection information of Google can be found at https://policies.google.com.
Privacy Policy for the Use of Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). For this web analysis service, Google Analytics uses so-called "cookies", i.e. text files are stored on your computer, which in turn enable an analysis of your use of the website. The information generated by the cookie about your use of our website will be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on our website, your IP address will only be shortened beforehand by Google within the member states of the EU or in other contracting states of the Agreement on the European Economic Area. In a few exceptional cases, the full IP address may be transmitted to a Google server in the USA and then shortened there. Google can then evaluate your use of the website on the basis of this information, which is stored, in order to then provide a compilation of a report on the website activities. Based on this report, Google can then also provide further services to the website provider related to website and internet usage. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data. If this evaluation based on your visit to our site is not in your interest, you can prevent the storage or installation of cookies by selecting the appropriate settings on your browser software. At the same time, we would like to inform you that in this case you will not be able to use all functions of our website to their full extent.
By using this website, you consent to the processing of your data by Google in the manner and for the purposes set out above. However, you can prevent the collection of data generated by the cookie relating to your use of this website and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Privacy Policy for the Use of Hotjar
We use Hotjar to better understand the needs of our users and to optimize the services and experience on our website. Using Hotjar's technology, we get a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click, what they like and dislike, etc.) and this helps us tailor our offerings based on our users' feedback. Hotjar works with cookies and other technologies to collect data about our users' behavior and about their devices, in particular IP address of the device (collected and stored only in anonymized form during your website use), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred for viewing our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf. For more information on the collection and use of data, please visit https://www.hotjar.com.
Privacy Policy for the Use of Google Search Console
We use Google Search Console so that we can monitor the presence of our website in Google and also to check the website for functionality. For more information on the collection and use of data, please visit https://search.google.com.
Privacy Policy for the Use of Cloudflare
We use the Content Delivery Network (CDN) provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, to enhance the security and delivery speed of our website. The legal basis for this processing is your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, where such consent will be obtained. In all other cases, processing is based on our predominant legitimate interest in protecting our online offering from abusive and/or automated access and in improving the security of the service. The legal basis in these cases is Art. 6(1)(f) GDPR.
A CDN is a network of geographically distributed servers that can efficiently deliver content to website users. For this purpose, personal data may be processed in Cloudflare’s server log files.
Cloudflare is the recipient of your personal data and acts as a data processor on our behalf. You have the right to object to this processing. Whether the objection is successful will be determined through a balancing of interests.
The processing of the data described in this section is neither legally nor contractually required. However, the functionality of the website cannot be guaranteed without this processing.
Your personal data will be stored by Cloudflare for as long as necessary to fulfill the purposes described. Further information on how to object to or remove data from Cloudflare can be found at: Cloudflare DPA.
For data transfers to the USA, Cloudflare has joined the EU-U.S. Data Privacy Framework as an active participant. Based on an adequacy decision by the European Commission, this ensures compliance with the European level of data protection. The provider is certified under the Data Privacy Framework. Therefore, the transfer of data to the USA is based on Art. 45 GDPR in conjunction with the adequacy decision C(2023) 4745 of the European Commission.
Privacy Policy for the Use of Artificial Intelligence (AI)
These AI Terms of Use apply to all AI-powered interactions and generative features provided through services on the ASYS website. These services are hereinafter referred to as “AI Services.”
1) Nature and Limitations of the Content
The AI Services generate content exclusively for general informational purposes. While this content may relate to ASYS, its products, and solutions, it is subject to the inherent limitations of AI and is based on the training data available at the time. It may therefore be inaccurate, incomplete, or outdated. This content does not constitute legal, medical, or professional advice and contains neither binding offers nor precise price quotations. In particular, AI services are not intended to provide financial information—including forward-looking statements or capital market-related information. The user must not rely on the results of the AI services for such purposes and is solely responsible for verifying the accuracy and suitability of the content before relying on or using it. ASYS assumes no liability whatsoever for inaccuracies, omissions, or reliance on such content.
2) Restrictions on the Use of the AI Services
The user is prohibited from:
- using the AI Services beyond the scope defined in the Terms of Use;
- allowing third parties to access or use the AI Services for the purpose of developing, training, or improving other AI—in particular, competing or functionally similar products or services;
- use data extraction methods such as web scraping, web harvesting, or automated data queries, or other methods to extract data from the AI Services;
- Use AI Services to create or use content that the user knows or should know infringes, misuses, or otherwise violates the intellectual property rights or other rights of third parties, or violates applicable laws, regulations, or rules.
3) High-Risk Applications
AI services are not intended for use in high-risk contexts. ASYS assumes no liability for any claims, damages, losses, costs, or other liabilities arising from the use of our AI services in such contexts. The user further agrees to indemnify and hold ASYS harmless from any third-party claims in this regard.
“High-risk contexts” include all use cases in which the AI services are used for information gathering or decision-making and where there are heightened requirements for safety or risk management—such as in particularly fault-tolerant or fail-safe systems. Such contexts include scenarios in which a failure or malfunction of the AI service could potentially lead to fatalities, personal injury, property damage, environmental harm, or significant infringements of fundamental rights. High-risk contexts include, in particular but not exclusively: critical infrastructure, healthcare, traffic safety, biometric identification procedures, education and employment decisions, law enforcement, migration, the judiciary, and democratic processes. In addition, all other use cases are classified as high-risk AI practices if they are defined and/or prohibited as such under applicable law or on the basis of legal regulations.
4) ASYS’s Rights of Use
ASYS may collect, store, and analyze AI-supported interactions (entered and generated content) to train and improve products or services and to optimize the overall user experience. This use includes—but is not limited to—in particular the identification of patterns, the correction of inaccuracies, and the improvement of response quality.
5) User’s Rights of Use
Content generated by the AI services’ code-generation features may be subject to third-party licenses, including—but not limited to—open-source licenses (“Third-Party Licenses”) or proprietary licenses from ASYS. Subject to the User’s compliance with these AI Terms of Use, and to the extent that such a grant of rights is permitted under applicable law and does not infringe upon any third-party rights (including Third-Party Licenses) or ASYS’s proprietary licenses, ASYS grants the User a non-exclusive, worldwide, and royalty-free right to use the content generated by the code-generation functions of the AI Services. Except for the rights of use expressly granted herein, the User does not acquire any rights to existing, underlying, or independently developed data, information, or the intellectual property of ASYS.
6) Changes to these AI Terms of Use
ASYS reserves the right to change these terms at any time.
Social Media
We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and active users and to be able to inform them about our services.
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. With regard to U.S. providers certified under the Privacy Shield, they are obligated to comply with EU data protection standards.
Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).
The processing of the users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 (f) GDPR. If users are asked by the respective providers for consent to data processing (i.e. declare their consent, e.g. by ticking a checkbox or clicking on a confirming button), the legal basis for processing is Art. 6 (1) (a), Art. 7 GDPR.
For a detailed description of the respective processing and the objection options, we refer to the information of the providers linked below.
In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
- Vimeo (Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. – Privacy Policy: https://vimeo.com
- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) – Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
- Xing (Xing AG, Dammtorstraße 30, 20354 Hamburg) – Privacy Policy: https://privacy.xing.com
Using Our Contact Options
If you contact us via our contact options (e.g. via e-mail or the contact form), we store your name and contact details as well as your request. The data is used to process your request and to communicate with you. We use your e-mail in order to be able to reply to you by e-mail (Art. 6 (1) (a) and (b) GDPR). If the purpose of the data storage (your request) is finally processed and there are no other storage obligations, the data will be deleted again.
The data will not be passed on to third parties. You have the possibility to revoke your consent to data processing by sending an e-mail to sales(at)asys-group.com at any time.
Sending Newsletters
On our website, users have the option of subscribing to our newsletter or notifications via various channels (hereinafter referred to collectively as the newsletter). We only send newsletters to recipients who have consented to receive the newsletter and in accordance with the legal regulations.
To subscribe to a newsletter sent by us, it is necessary to provide an e-mail address. We may collect additional data, for example to personalize our newsletter.
Our newsletter is only sent after the double-opt-in procedure has been completed. If visitors to our website decide to subscribe to our newsletter, they will receive a confirmation email, which serves to prevent the misuse of false email addresses and to prevent the newsletter from being sent by a simple, possibly inadvertent click. You can unsubscribe from our newsletter at any time in the future. An unsubscribe link (opt-out link) is included at the end of each newsletter.
We are also obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store the IP address and the time of subscription and unsubscription.
Our newsletters are designed in such a way that it is possible for us to gain insights into improvements, target groups or the reading behavior of our subscribers. This enables us to use a so-called web beacon or tracking pixel, which reacts to interactions with the newsletter, for example whether links are clicked on, whether the newsletter is opened at all or at what time the newsletter is read. If we have been granted special consent for the tracking in our newsletter (so-called tracking permission), we can draw conclusions about the usage behavior of our newsletter subscribers. The tracking permission can be revoked separately, meaning without revoking the consent to receive the newsletter itself. Without granted tracking permission, we cannot draw any conclusions about the usage behavior of individual subscribers.
The legal basis for processing is the consent of the subscriber in accordance with Art. 6 para. 1 lit. a) GDPR. The processing is carried out for the purposes of marketing, customer retention and new customer acquisition as well as analyzing and evaluating the success of the campaign. If consent is given by the subscriber to the newsletter, we process their master data (e.g. name, address), contact data (e.g. email address, telephone number), meta and communication data (e.g. device information, IP address) and usage data (e.g. interests, access times).
We use Inxmail as a mailing tool. For this purpose, we collect, process and store your data and pass it on to Inxmail. The data is stored in accordance with the statutory retention periods and then deleted. We have concluded a contract with Inxmail in accordance with Article 28 GDPR. You can revoke your consent to the collection of data and thus to the sending of emails at any time. Please let us know by sending an email to info(at)asys-group.com. Your data will not be passed on to other third parties.
Webinar Software GoTo Webinar
To conduct webinars, we use the tool “GoTo Webinar”. By participating, the participant agrees to the use of the tool for the purpose described above. Use for purposes other than those described is not permitted. The participant must be informed in advance about the recording of a video conference, as well as about the storage of image files. Disclosure of such data to third parties is not permitted. Your consent is voluntary and can be revoked in writing at any time. For further data protection information, please refer to the company providing the tool: https://www.goto.com/de/company/trust/privacy.
Applicant Management Tool “Bite”
The data you provide will only be used to process your application and is justified by Article 88 GDPR and § 26 BDSG (Federal Data Protection Act). Data will not be passed on to third parties or transferred to third countries. The data will be deleted immediately after completion of the application process (award of the job to you or another person). If you would like to have your data stored in our applicant pool longer for further job openings, we request that you give your consent by E-mail or mail. You have the right to information about the personal data collected, as well as the right to rectification or deletion or restriction of processing, a right to object to processing and the right to data portability. These rights cannot be exercised retroactively and may have an impact on the application process (e.g. in case of deletion).
Online Survey Tool SurveyMonkey
We use SurveyMonkey (SurveyMonkey Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Road, Dublin 4, Ireland) to gather feedback on our products, services, and events. Participation in a survey is voluntary and occurs via a link that is sent to you by email for a specific survey.
When you click on the link provided in the email, you will be redirected to an external website operated by SurveyMonkey. At this point, a connection is established with SurveyMonkey's servers, and SurveyMonkey automatically collects information about the device used, even in anonymous surveys. This information may include the IP address, your operating system version, the device type, the device ID/MAC address, system and performance information, and the browser type. If you use a mobile device, SurveyMonkey may also collect the UUID of that device. Additionally, SurveyMonkey places cookies in your device’s browser, which may include an individual identifier ("cookie ID"). The cookies are automatically deleted no later than one year after being set.
When you participate in a survey, your responses and entries are collected and processed. Surveys are designed by us in such a manner that no personal data is required.
We reserve the right to use and publish anonymous responses in comment fields for the purposes of documentation, accompanying or subsequent reporting, and for promotions, as well as for public relations purposes, or to pass them on to third parties (e.g., the press) for the above-mentioned purposes, without any entitlement to compensation.
Your responses and entries are transmitted to SurveyMonkey’s server. Please note that data may also be transmitted to other service providers employed by SurveyMonkey, including those outside the EU or EEA, particularly in the USA. If data is transmitted to the servers of SurveyMonkey’s parent company based in the USA (SurveyMonkey Inc., One Curiosity Way, San Mateo, California 94403, USA), this is done on the basis of the EU Commission's adequacy decision in accordance with Art. 45 GDPR, as SurveyMonkey Inc. is certified under the EU-U.S. Data Privacy Framework. Any further data transfers to third countries are also carried out based on adequacy decisions by the EU Commission, where legally permissible. Otherwise, SurveyMonkey has secured the data transfers, in particular through the conclusion of standard data protection clauses, so that these are carried out in accordance with Art. 46 para. 2 lit. c) GDPR. We have entered into a data processing agreement with SurveyMonkey in accordance with Art. 28 GDPR.
We conduct our surveys only with your consent. The legal basis for using SurveyMonkey’s services and the associated data processing is therefore Art. 6 para. 1 lit. a) GDPR. The cookies used by SurveyMonkey on the external survey pages are technically necessary cookies required for the proper and secure execution of the survey. The legal basis for the use of cookies is therefore § 25 para. 2 no. 2 TTDSG. If you do not agree to the use of cookies by SurveyMonkey, please do not participate in the survey. Please note that the subsequent processing and evaluation of the survey results are also carried out based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest here lies in the proper evaluation of your voluntary feedback provided by participating in the survey.
For more information on data processing, please refer to SurveyMonkey's privacy policy at: https://www.surveymonkey.com/mp/legal/privacy/.
Information about the cookies used by SurveyMonkey on the survey pages can be found at: https://www.surveymonkey.com/mp/legal/survey-page-cookies/.
You may revoke your consent to data processing at any time by sending an email to info(at)asys-group.com.
Right to Information
You have extensive rights with regard to the processing of your personal data. It is of particular concern to us to familiarize you with these rights:
Right to information: You have the right to information about the data stored by us, in particular, for what purpose the processing is carried out and how long the data is stored (Article 15 GDPR).
Right to rectify inaccurate data: You have the right to demand that we rectify the personal data concerning you without delay if it should be inaccurate (Article 16 GDPR).
Right to erasure: You have the right to request that we erase the personal data concerning you. These conditions provide that you can request the erasure of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, we should process the data unlawfully or you should have legitimately objected, or if there is a legal obligation to erase it (Article 17 GDPR).
Right to restriction of processing: You have the right to request restriction of the processing of your data. This right exists in particular for the duration of the examination if you have disputed the accuracy of the data concerning you and in the event that you wish to have restricted processing instead of deletion in the case of an existing right to deletion. Furthermore, processing will be restricted in the event that the data is no longer necessary for the purposes pursued by us, but you need the data to assert, exercise or defend legal claims, as well as if the successful exercise of an objection is disputed between us and you (Article 18 GDPR).
Right to data portability: You have the right to obtain from us the personal data concerning you that you have provided to us in a structured, commonly used, machine-readable format (Article 20 GDPR), insofar as it has not already been deleted.
Right to object: You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation (Article 21 GDPR). We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.
If you wish to object to the processing of your personal data, please contact us in writing at.
ASYS Automation Systems GmbH
Benzstrasse 10
89160 Dornstadt
E-mail: info(at)asys-group.com
Right to Complain to a Supervisory Authority
Right to complain to a supervisory authority: If you believe that the processing of personal data concerning you is in breach of the General Data Protection Regulation, please contact the data protection officer mentioned above or the responsible data protection supervisory authority.