Data processing principles at Invest in Bavaria
You would like to find information on our use of (your) personal data. To fulfil our duty toprovide information according to Art. 12 et seq. of the General Data Protection
Regulation (GDPR), we are pleased to present you with our information regarding thetopic of data protection:

Who controls the processing of your data?
In compliance with data protection law, the controller isInvest in BavariaPrinzregentenstr. 2280538 Munich
You can find further information about our company, details about authorised
representatives and further contact opportunities in the legal notice on our website:
https://www.invest-in-bavaria.com
What data regarding your person do we process? And for what purposes?
If we receive data from you, we will generally only process this data for the purposes forwhich we received it or collected it.
A data processing for other purposes will only be considered if the necessary legal
requirements exist according to Art. 6(4) GDPR. In such a case, we will naturally comply witha possible duty to provide information according to Art. 13(3) GDPR and Art. 14(4) GDPR.
What is the legal basis?
In the absence of any other specific legal provisions, the legal basis for the processing of
personal data is generally Art. 6 GDPR. In this case, the following possibilities are
considered:
••
•
•
•

Consent (Art. 6(1)(a) GDPR)
Data processing for the fulfilment of contracts (Art. 6(1)(b) GDPR)
Data processing on the basis of a balancing of interests (Art. 6(1)(f) GDPR)
Data processing for the fulfilment of a legal obligation (Art. 6(1)(c) GDPR)
Data processing to carry out tasks in the public interest (Art. 6(1) (e) GDPR)Prepared by ComFor-IT® oHG
External Data Protection Officer

Page 1 of 3
Version number V3
Version: 02/2019

If your personal data are processed on the basis of your consent, as regards ourcompany, you have the right to withdraw this consent with future effect at any time.
With the submission of your business card, we assume that you have provided us withyour consent to the processing of data for the purpose of informing you about ourservices. In this case, we take the unambiguous confirmatory act, as stated in Art. 13,GDPR, as the basis. You are subsequently able to withdraw your consent with future
effect at any time and without stating any reasons.
If we process data on the basis of a balancing of interests, as the data subject, inconsideration of the provisions of Art. 21 GDPR, you have the right to object to theprocessing of your personal data.
For how long will the data be stored?
We will process the data for as long as this is required for the appropriate purpose.
Insofar as legal storage obligations exist – in terms of commercial or tax law, for example– the personal data in question will be stored for the duration of the storage obligation.
After the storage obligation has elapsed, we will verify whether a further processing isnecessary. If no such necessity exists, the data will be erased.
We will generally verify data concerning the requirement for further processing towards theend of a calendar year. Due to the volume of data, this verification will take place in terms ofspecific types of data or processing purposes.
Of course, you can at any time (see below) request access to the data concerning yourperson which is stored in our company, and if no necessity for processing exists, demand
the erasure of the data or a restriction of processing.
To which recipients are the data disclosed?
As a matter of principle, your personal data will only be disclosed to third parties if this isnecessary to execute the contract concluded with you, if disclosure is permissible based ona balancing of interests in terms of Art. 6(1) (f) GDPR, if we are legally obliged to disclose
these or if you have granted us your consent to do so.
Where are the data processed?
We will predominantly process your personal data in data processing centres in theFederal Republic of Germany. Mainly on our server at the site in Munich.
Any disclosure of personal data to third countries only takes place as part of service
provision.
Prepared by ComFor-IT® oHG
External Data Protection Officer

Page 2 of 3
Version number V3
Version: 02/2019

Your rights as a “data subject”
You have the right to access the personal data that we process about you.
In the case of a request for access which does not occur in writing, please understand that
we may request proof from you that you are the person that you claim to be.
You further have the right to rectification or erasure or to the restriction of processing,insofar as the legal entitlement exists.
You also have the right to object to the processing in the scope of the legal
provisions. The same applies to the right to data portability.
In particular, according to Art. 21(1) and (2) GDPR, you have the right to object to theprocessing of your data in the context of direct advertising if this takes place on the basis of abalancing of interests.
Our Data Protection Officer
We have appointed a Data Protection Officer in our company. He can be contacted asfollows:
ComFor-IT® oHG
Mr Andreas Bornhagen
Bahnhofstraße 684405 Dorfen
E-mail: datenschutz@comfor-it.de
Right to Lodge a Complaint
You have the right to complain about our processing of your personal data to a supervisory
authority for data protection.

Prepared by ComFor-IT® oHG
External Data Protection Officer

Page 3 of 3
Version number V3
Version: 02/2019