Source: https://www.wista-plan.de/en/privacy-policy/
Timestamp: 2020-01-19 14:01:30
Document Index: 792598042

Matched Legal Cases: ['Art. 20', 'Art. 77', 'Art. 6', 'Art. 6', 'Art. 6', '§ 3', 'Art. 6', 'Art. 28', '§ 26', 'Art. 6', '§ 26', 'Art. 28', '§ 3', '§ 2', 'Art. 6', 'Art. 6', '§ 6', 'Art. 6', 'Art. 28']

Privacy Policy - WISTA.Plan
WISTA.Plan - WISTA.Plan - Privacy Policy
Protecting your data and privacy is very important to us. In the following document, we outline how we process your personal data and provide you with other relevant information regarding your privacy.
If you have any questions relating to the processing of your personal data, or to exercising your rights under the GDPR, please contact our data protection officer at:
Depending on each individual case, you have the following rights relating to your personal data. If you wish to exercise any of these rights, please contact us, or our data protection officer, by using the provided contact details.
You have the right to obtain information about the personal data processed by us and to gain access to your personal data and/or request a copy of these data. This includes information on the use and the categories of processed data, the recipients and authorised processors, as well as, where applicable, the planned duration of storage, or, where not possible, the criteria for data storage.
b) Rectification, erasure, and restriction of processing
You have the right to request the rectification of false personal data without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
For personal data processed based on point (e) or (f) of Article 6 (1), you have the right to object, on grounds relating to your particular situation, to the processing of personal data at any time. We will cease to process these personal data unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.
Where data processing is based on consent, you have the right to withdraw this consent. This does not affect the lawfulness of processing based on consent before its withdrawal. Please contact us, or our data protection officer, any time using the provided contact details.
You have the right to request erasure of your personal data without undue delay, and we are obligated to erase personal data without undue delay where one of the following points applies:
You withdraw consent on which the processing is based according to point 2 c) and there is no other legal ground for the processing
To comply with a legal obligation which requires processing by Union or Member State law to which we are subject.
You contest the accuracy of the personal for a period enabling us to verify the accuracy of the personal data,
we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims,
you object to processing pursuant to point 2 c) pending the verification whether our legitimate grounds override yours.
Where processing has been restricted under this point f), such personal data shall, with the exception of storage, only be processed with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. Where you have obtained restriction of processing, we will inform you before the restriction of processing is lifted.
According to Art. 20 GDPR, you have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data, if technically possible, to another controller where the processing is based on consent.
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
Bidders / Applicants in Procurement Procedures
Back to the General section
I. For Real Estate Enquiries:
WISTA.Plan GmbH, urban development agency and trustee of the State of Berlin, Rudower Chaussee 19, 12489 Berlin is the controller according to the EU General Data Protection Regulation (‘GDPR’).
We process data related to your real estate enquiry. These include general personal information such as your contact details (name, address, email, phone number) as well as data that you provide by communicating with us, including, for example, your planned use of a property, your professional affiliation, emails, telephone notes, correspondence, or other information submitted relating to your request.
3. For which purpose and on which lawful basis do we process your personal data?
We collect the personal data named in I. (2) in accordance with data protection regulation:
a) For the performance of a contract Art. 6 (1) (b) GDPR
We process your data for the purpose of responding to your request for a property.
b) Based on your consent Art. 6 (1) (a) GDPR
Processing for one or more specific purposes is lawful because you have consented to the processing of your personal data for one or more specific purposes.
c) For the performance of a task carried out in the public interest Art. 6 (1) (e) GDPR in conjunction with § 3 BDSG
Processing of your personal data is necessary for the performance of a task carried out in the public interest. The State of Berlin has commissioned us as an urban development agency with the task of performing a development measure. This includes the marketing and selling of properties in the context of the Berlin-Johannisthal/Adlershof development measure.
d) Based on legitimate interests Art. 6 (1) (f) GDPR
We may process your personal data where it is required to reject legal claims in the context of selling properties. Our legitimate interest is, for example, the obligation of proof during a procurement procedure.
Moreover, we may process your personal data, if required, to perform a local needs assessment and to comply with accountability obligations towards the State of Berlin, our trustor and the owner of the properties.
4. What are the sources of personal data, where they are not obtained from you?
In principle, we only process data provided to us directly by you. However, we may process publicly available, company-related information from, for example, company websites.
We may transmit your personal data to cooperating companies as well as the State of Berlin, our trustor and owner of the properties, where this is lawful pursuant to the purposes and legal basis laid out in I. (3). Moreover, we carry out processing of personal data pursuant to Art. 28 GDPR.
6. Do we intend to transmit data to a third country?
We have no intention to transmit data to a third country.
7. What is the duration of storage?
We store your personal data for the duration of the development measure, where this is necessary. Your data will be erased, when either the development measure has been completed and after the periods have expired allowing the establishment of legal claims against us, or our trustor, the State of Berlin. The duration of storage extends in the case of legal disputes.
8. Are you required to provide us with your personal data
You are neither legally, nor contractually required to provide us with personal data. However, providing us with your personal data is required to complete a building lease. We are not able to respond to your enquiries if you do not provide us with the necessary personal data.
II. For Job Applications:
WISTA.Plan GmbH, Rudower Chaussee 19, 12489 Berlin is the controller according to the EU General Data Protection Regulation (‘GDPR’).
2. For which purpose and on which lawful basis do we process your personal data?
We process your personal data pursuant to § 26 Abs. 1 in conjunction with Abs. 8 S. 2 BDSG for the purpose to respond to your application for employment to the extent that the establishment of an employment relationship requires it.
Moreover, we may process your personal data pursuant to Art. 6 (1) 1 f) GDPR where this is required for the defence of legal claims against us. Legitimate interest may include, for example, the obligation of proof during legal procedures based on the General Act on Equal Treatment.
If you are recruited, we may process your provided personal data for recruitment purposes pursuant to § 26 Abs. 1 BDSG, if this is necessary to complete the recruitment process, or to terminate employment, or to exercise a right or comply with a duty resulting from legislation, or collective agreement, or a company agreement, which pertains to the representation of employees.
We process data related to your application. This may include general personal information (name, address, or contact details), information on your qualification, training, and education, or other information you provide with relation to your application.
In principle, we only process data provided directly by you.
We may transmit your personal data to cooperating companies, where this is lawful pursuant to the purposes and legal basis laid out in II. (2). Moreover, we carry out processing of personal data pursuant to Art. 28 GDPR.
We store your personal data for 6 months, after which we delete your data. Your data are stored for the duration required by the decision over your job application, or after expiration of the period required for defence against the establishment of legal claims by applicants. The duration of storage extends in the case of legal disputes.
8. Are you required to provide us with your personal data?
You are neither legally, nor contractually required to provide us with personal data. However, providing us with your personal data is required to sign a recruitment contract with us. We will not be able to recruit you if you do not provide us with your personal data as part of your application.
III. For Bidders / Applicants in Procurement Procedures:
Depending on the procurement procedure, the data controller is either WISTA.Plan GmbH, urban development agency and trustee of the State of Berlin, Rudower Chaussee 19, 12489 Berlin, data controller in accordance with the GDPR, or WISTA.Plan GmbH, authorised representative of the State of Berlin, Rudower Chaussee 19, 12489 Berlin, or WISTA.Plan GmbH, Rudower Chaussee 19, 12489 Berlin.
Please note that this privacy policy only applies to the processing of personal data as a part of procurement procedures and, where applicable, a subsequent contractual relationship. The Senate Department for Urban Development and Housing is the data controller as laid out in the EU General Data Protection Regulation (‘GDPR’) for the procurement platform of the State of Berlin and responsible for processing personal data as part of the communication through that procurement platform.
We process your personal data pursuant to § 3 in conjunction with. § 2 Abs. 2 BlnDSG for the purpose of conducting a procurement procedure and, where this is required, the initiation, establishment, and performance of a contractual relationship.
Moreover, we may process your personal data pursuant to Art. 6 (1) 1 f) GDPR, where this is required for the defence of legal claims against us. Legitimate interest may include, for example, the obligation of proof in legal proceedings. Moreover, your personal data are processed pursuant to Art. 6 (1) (c) GDPR where this is required to comply with legal obligations (for example, enquiries into the corruption register pursuant to § 6 Abs. 1 Bln KRG, enquiries into the financial sanction list on the basis of the EU regulation for combating terrorism, as well as legal regulation pertaining to procurement and taxes).
Processing for one or more specific purposes is lawful because you have consented to the processing of your personal data for one or more specific purposes pursuant to Art. 6 (1) a) GDPR.
We process data related to your tender and your interest in the procurement procedure. This may include personal data of your management as well as data you have provided on your staff.
In principle, we collect data from you directly. We only process data that you have provided to us in the context of a procurement procedure.
We may transmit your personal data to cooperating companies, where this is lawful pursuant to the purposes and legal basis laid out in III. (2). (Example: Accounting).
Moreover, we transmit your data to our contracting authority, funding body, and trustor to the extent to which that is necessary to fulfil contractual and accountability obligations.
Furthermore, processing of your personal data is carried out on our behalf based on contracts pursuant to Art. 28 GDPR.
Where legally required, we transmit your personal data for the purpose of an enquiry to the government agency responsible for the corruption register.
We store your personal data for the duration of the procurement procedure pursuant to Bln. LHO and, in addition, for seven years after the completion of the procurement procedure. If we enter a contractual relationship, we will store your personal data for the duration of said contractual relationship and, in addition, for seven to eleven years after termination of the contractual relationship in accordance with the requirements of tax regulation.
Where your data are processed to perform a procurement procedure as part of the trust order, or to acquire funding, the storage period for your personal data is based on legal storage periods for trust assets and funding. This applies whether we enter a contractual relationship at the end of the procurement procedure.
You are neither legally, nor contractually required to provide us with personal data. However, providing us with your personal data is required to sign a building lease with us. We will not be able to respond if you do not provide us with your personal data as part of your inquiry.