Source: http://www.streumaster-agriculture.com/data-protection-declaration/
Timestamp: 2020-08-07 21:41:34
Document Index: 716567243

Matched Legal Cases: ['art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 12', 'art. 6', 'art. 12', 'art. 6', 'art. 5', 'art. 9', 'art. 78', 'art. 6', 'art. 88', 'art. 6', 'art. 88', 'art. 6', 'art. 6', 'art. 9', 'art. 9', 'art. 6', 'art. 9', 'art. 88', 'art. 26', 'art. 6', 'art. 9', 'art. 88', 'art. 6', 'art. 9', 'art. 88', 'art. 26', 'art. 12', 'art. 6', 'art. 12', 'art. 6', 'art. 5', 'art. 9', 'art. 78', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 12', 'art. 6', 'art. 12', 'art. 6', 'art. 5', 'art. 9', 'art. 78', 'art. 12', 'art. 6', 'art. 88', 'art. 6', 'art. 6', 'art. 9', 'art. 88', 'art. 26', 'art. 6', 'art. 9', 'art. 88']

Data protection declaration - streumaster-agriculture.com
Data protection information for visitors of our Website
Your contact person as the data controller within the meaning of the European General Data Protection Regulation ("GDPR") and other national data protection laws of the member states as well as other data protection regulations is:
Phone: +49 (0) 8639 608-0
Fax: +49 (0) 8639 608-51
Website: www.streumaster.com
The protection of your personal data is of utmost priority to us. We have therefore commissioned a company specialising in data protection and security to supervise data protection in our company.
The advice is provided by:
Email: datenschutz@streumaster.de
The legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is art. 6 para. 1 lit. f GDPR.
Your personal data are stored in log files to ensure the functionality of the website. In addition, your personal data are used to optimize the website and to ensure the security of our information technology systems. In this context, your personal data are not evaluated for marketing purposes.
These purposes also constitute our legitimate interest in the processing of data in accordance with art. 6 para. 1 lit. f GDPR.
Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. With respect to the collection of your personal data for the purpose of providing the website, this is the case as soon as the respective session has ended.
If your personal data are stored in log files, these will be deleted after a maximum of seven days. The log files may also be stored beyond this period. In this case, your personal data will be deleted or altered in such a way that it is no longer possible to attribute the calling client.
The legal basis for the processing of your personal data in the context of technically necessary cookies is art. 6 para. 1 lit. f GDPR.
The use of technically necessary cookies is intended to make our website easier for you to use. Some functions of our website cannot be offered without the use of cookies. This requires your internet browser being recognised even after a page change. User data collected through technically necessary cookies is not used to create user profiles.
4.3. Storage duration
Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected; this is particularly applicable if you deactivate any cookies.
4.4. Possibility of objection and removal
Cookies are stored on your computer and transmitted from there to our website. This gives you complete control over the use of cookies. By changing the settings in your web browser, you can deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
The transmission of Flash cookies cannot be prevented with any settings of your web browser. This requires changes in the settings of the Adobe Flash Player.
The legal basis for the processing of your personal data transferred in the context of establishing contact is art. 6 para. 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, art. 6 para. 1 lit. b GDPR is an additional legal basis for the processing of your personal data.
The processing of your personal data in the case of establishing contact serves only to process your request.
5.3. Storage duration
Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. For personal data sent in the context of establishing contact, this is the case if your request has been processed and if there are no statutory retention periods that would prevent a deletion.
5.4. Possibility of objection and removal
You are entitled to object at any time to any future processing of your personal data in the context of establishing contact. In this case, however, we will not be able to further process your request. Consequently, all personal data stored in the course of establishing contact will be deleted, unless legal retention periods prevent deletion.
6.1. Scope of processing
This website uses Google Analytics, the web analysis service of Google Inc. (hereinafter "Google"). Google Analytics uses so-called "cookies", text suggestion files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google if it is located in any member state of the European Union or in any other state which is party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the US and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to the use of the website and the internet. The IP address transmitted by your internet browser within Google Analytics is not merged with other data from Google.
The legal basis for the processing of your personal data is art. 6 para. 1 lit. f GDPR.
The processing of your personal data enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the use of individual components of our website. This helps us to constantly improve our website and its user-friendliness. By making your IP address anonymous, your interest in the protection of personal data is sufficiently taken into account.
Your personal data will be deleted as soon as they are no longer required for the previously mentioned purposes.
If you do not want your data to be collected by Google Analytics, you can install the browser add-on to deactivate Google Analytics. This add-on instructs the JavaScript of Google Analytics (ga.js, analytics.js and dc.js) executed on websites not to allow the sending of information to Google Analytics.
If you wish to deactivate Google Analytics, go to this page and install the Google Analytics deactivation add-on for your web browser. For detailed information on installing and uninstalling the add-on, please refer to the relevant help resources for your web browser.
Updating the browser and the operating system may cause the deactivation add-on to stop working as intended. For more information on managing add-ons for Chrome, click here. If you are not using Chrome, check directly with the provider of your Internet browser to see if add-ons work properly in the browser version you are using.
The latest versions of Internet Explorer occasionally download the add-on to disable Google Analytics after data are sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, the add-on will reset these cookies within a short period of time to ensure that your Google Analytics browser add-on continues to work properly.
For more detailed information on the terms of use and data protection, please visit
7. Other data processing besides our website
7.1. Contact and moderation (Facebook fan page)
The information provided under 6. Contact form and contact via e-mail applies accordingly.
7.2. Facebook Insights (Facebook fan page)
7.2.1. Shared responsibility
We operate our Facebook fan page jointly with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter "Facebook"). To this end, we have concluded an agreement with Facebook to determine which of us fulfils which obligation under the GDPR.
The main processing contents can be viewed at www.facebook.com/legal/terms/page_controller_addendum.
Information on the processing of your personal data by Facebook can be found at www.facebook.com/legal/terms/information_about_page_insights_data.
7.2.2. Legal basis
7.2.3. Purpose
The processing of your personal data by Facebook Insights enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to gather information about the attractiveness of our Facebook fan page. This helps us make our Facebook fan page more demand-oriented and user-friendly.
7.2.4. Origin
Your personal data collected during the operation of our Facebook fan page are made available to us by Facebook.
7.2.5. Storage duration
7.2.6. Possibility of objection and removal
If you do not want your data to be collected by Facebook Insights, you have the possibility to object to any future processing of your personal data within Facebook Insights at any time. In this case, we will forward your objection to Facebook.
8. Submissions by data subjects according to art. 12 seq. GDPR
8.1. Legal basis
The legal basis for the processing of your personal data in the context of processing your data protection request ("data subject submissions") is art. 6 para. 1 lit. c in conjunction with art. 12 seq. GDPR. The legal basis for the subsequent documentation of the lawful processing of data subject submissions is art. 6 para. 1 lit. f GDPR.
The purpose for processing your personal data in the context of processing data subject submissions is to answer your data protection request. The subsequent documentation of the lawful processing of the respective data subject submission serves to fulfil the legally required obligation to provide evidence pursuant to art. 5 para. 2 GDPR.
8.3. Storage duration
Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. With respect to the processing of data subject submissions, this is the case three years after the end of the respective process in accordance with sec. 41 BDSG in conjunction with sec. 31 para. 2 no. 1 OWiG [Administrative Offences Act].
8.4. Possibility of objection and removal
You are entitled to object at any time to any future processing of your personal data in the context of processing data subject submissions. In this case, however, we will not be able to further process your data protection request.
The documentation of the lawful processing of the respective data subject submission is absolutely necessary. Consequently, there is no possibility for you to object.
9. Legal defence and enforcement
9.1. Legal basis
The legal basis for the processing of your personal data in the context of legal defence and enforcement is art. 9 para. 2 f lit. f; 6 para. 1 lit. f GDPR.
The purpose for processing your personal data in the context of legal defence and enforcement is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.
9.3. Storage duration
Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected.
9.4. Possibility of objection and removal
Within our company, the departments and divisions that receive personal data are those that need them in order to fulfil the aforementioned purposes. In addition, we sometimes use different service providers and transfer your personal data to other trustworthy recipients. These include:
§ Scanning service
§ Print shops
§ Letter shops
§ IT services provider
§ Lawyers and courts
If your personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights against us:
11.1.Right to be informed
You have a right to be informed as to whether and which of your personal data are processed by us. In this case, we will also inform you about
(1) the purpose for processing
(2) the data categories;
(4) the intended storage period or the criteria for the intended storage period;
(5) your other rights;
(6) unless your personal data were provided by you: any available information about their origin;
(7) where applicable: the existence of an automated decision-making process and information on the logic involved, the scope and the intended impact of the processing operations.
11.2.Right to rectification
You have the right to request a rectification and/or completion if your personal data processed by us is incorrect or incomplete.
11.3.Right to restriction of processing
You have the right to restrict the processing, provided
(1) we verify the accuracy of your personal data processed by us;
(3) you need your personal data processed by us for legal proceedings after the purpose ceases to apply;
(4) you have lodged an objection to the processing of your personal data and we will examine this objection.
11.4.Right to erasure
You have the right to erasure, provided
(1) we no longer need your personal data for their original purpose;
(2) you withdraw your consent and there is no further legal basis for the processing of your personal data;
(3) you object to the processing of your personal data and, except in the case of direct marketing, there are no overriding reasons for further processing;
(6) your personal data were collected for information society services when you were a minor.
11.5.Right to be informed
If you have asserted your right to rectification, erasure or restriction of processing, we will inform all recipients of your personal data of this rectification, erasure or restriction of processing.
11.6.Right to data portability
You have the right to receive your personal data processed by us on the basis of your consent or for the purpose of contract implementation in a structured, common and machine-readable format and to transfer it to another data controller. Insofar as this is technically feasible, you have the right to request that we transfer these data directly to another data controller.
11.7.Right to object
You have the right to object to the processing of your personal data for specific reasons. In this case, we will undertake no further processing operations with respect to your personal data, unless we can prove that there are compelling legitimate grounds for processing.
In case your personal data is processed for the purpose of direct marketing, you have the right to object at any time.
11.8.Right to withdraw consent
You have the right to revoke any consent given to us at any time. The revocation of consent shall not affect the lawfulness of processing operations carried out on the basis of the consent given until revocation.
11.9.Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by us is in breach of the GDPR.
The competent regulatory authority for us is:
The supervisory authority to which you have submitted a complaint will inform you of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to art. 78 GDPR.
We would like to provide you with comprehensive information about the processing of your personal data in the context of the application procedure, as mandated by the provisions of the European General Data Protection Regulation (GDPR).
The protection of your data is extremely important to us. For this reason, we always take care to ensure that they are processed in a safe and proper manner. Should you have any questions regarding your applicant data and/or their processing, you are welcome to contact our data protection officer at any time. As he is independent from instructions and is legally obliged to maintain secrecy and confidentiality, do not hesitate to contact him at any time.
With regard to the processing of your personal data in the context of your application procedure, we would like to inform you of the following:
Your contact person as the data controller within the meaning of the European General Data Protection Regulation ("EU-GDPR") and other national data protection laws of the member states as well as other data protection regulations is:
The protection of your personal data is of utmost priority to us. For this reason, we have commissioned a specialised consulting firm for data protection. Our data protection officer is an employee of this firm. Our company is advised by:
Generally, we process your personal data only insofar as they are necessary for an employment relationship. Any further processing of your personal data is regularly only carried out if we have obtained your prior consent to do so. An exception applies in cases where prior consent cannot be obtained for factual reasons or where the processing of your personal data is permitted by legal authorisation.
4. Data processing in the context of the application procedure
a) Legal basis for the processing of
Insofar as we obtain your consent for the processing of personal data, art. 6 para. 1 lit. a EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with sec. 26 para. 2 BDSG [German Federal Data Protection Act] serve as the legal basis.
Our legal basis for processing personal data which are necessary for the establishment, execution or termination of the employment contract is art. 6 para. 1 lit. b EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with sec. 26 para. 1 BDSG, sec. 611a BGB [German Civil Code].
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, art. 6 para. 1 lit. c EU-GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of ours or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former, art. 6 para. 1 lit. f EU-GDPR serves as the legal basis for the processing.
Insofar as we obtain your consent for the processing of special categories of personal data (art. 9 para. 1 EU-GDPR) such as, among others, religious affiliation, nationality and health data, art. 9 para. 2 lit. a EU-GDPR serves as the legal basis.
If the processing of special categories of personal data is necessary to enable us to exercise our rights under labour law, social security and social protection law and to comply with our obligations in this respect, the legal basis for the processing is derived from art. 6 para. 1 lit. c EU-GDPR, art. 9 para. 2 lit. b EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with art. 26 para. 3 BDSG.
If the processing relates to special categories of personal data obviously made public by you, the admissibility of the processing results from art. 6 para. 1 lit. f EU-GDPR, art. 9 para. 2 lit. e EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with sec. 26 para. 1 BDSG.
If the processing of special categories of personal data is necessary for the purposes of health care, occupational medicine or for the assessment of fitness for work, the legal basis is derived from art. 6 para. 1 lit. b EU-GDPR, art. 9 para. 2 lit. h EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with art. 26 para. 1 BDSG.
The processing of your personal data is carried out for the purpose of establishing the employment relationship, in particular for the fulfilment of contractual, legal, collective agreement (where applicable) and social security obligations arising from this relationship.
Your personal data will be deleted or blocked as soon as the purpose for which they were stored no longer applies. The storage of personal data is also possible if provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or deleted upon the expiry of a storage period prescribed by the aforementioned standards, unless there is a need for further storage of the data for the purpose of concluding or fulfilling a contract.
Afterwards, we will store your data for the following periods, among others:
§ application documents, application dates, after a decision not to hire the applicant, up to 6 months, burden of proof of discrimination, period pursuant to sec. 21 para. 5 and sec. 22 AGG (General Equal Treatment Act)
§ application documents, other: immediately upon dissolution/termination of the employment relationship
The processing of your personal data in the context of the application procedure is absolutely necessary for the establishment of the employment relationship. Consequently, there is no possibility for you to object.
If the processing of your personal data is based on consent, you are entitled to revoke your consent at any time.
5. Submissions by data subjects according to art. 12 seq. EU-GDPR
The legal basis for the processing of your personal data in the context of processing your data protection request ("data subject submissions") is art. 6 para. 1 lit. c in conjunction with art. 12 seq. EU-GDPR. The legal basis for the subsequent documentation of the lawful processing of data subject submissions is art. 6 para. 1 lit. f EU-GDPR.
The purpose of processing your personal data in the context of processing data subject submissions is to answer your data protection request. The subsequent documentation of the lawful processing of the respective data subject submission serves to fulfil the legally required obligation to provide evidence pursuant to art. 5 para. 2 EU-GDPR.
6. Legal defence and enforcement
The legal basis for the processing of your personal data in the context of legal defence and enforcement is art. 9 para. 2 f lit. f; 6 para. 1 lit. f EU-GDPR.
The purpose of processing your personal data in the context of legal defence and enforcement is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.
7. Recipient categories
Within our company, the departments and divisions that receive personal data are those that need them in order to fulfil the aforementioned purposes. Potential recipients on our side include:
§ HR department
§ Any superiors
§ Specialist departments
§ Works Council
§ Data Protection Officer
§ Representative council for severely disabled employees
§ Equal Opportunities Officer
§ Controlling/Auditing
§ Arbeitsagentur [Employment Agency]
§ Integrationsamt [Integration Office] in case of severe disability
§ Banking institutions
§ External service providers
§ Document shredder
§ Lawyers, courts, tax consultants
§ Personnel services provider
If your personal data are processed by us, you are a data subject within the meaning of the EU-GDPR and you have the following rights against us:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by us is in breach of the EU-GDPR.
The supervisory authority to which you have submitted a complaint will inform you of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to art. 78 EU-GDPR.
The protection of your data is extremely important to us. For this reason, we always take care to ensure that they are processed in a safe and proper manner.
Should you have any questions regarding the processing of your personal data, our data protection officer will be happy to answer them at any time. As he is independent from instructions and is legally obliged to maintain secrecy and confidentiality, do not hesitate to contact him at any time.
With regard to the processing of your personal data in the context of our contractual relationship, we would like to inform you of the following:
We generally process your personal data as well as the personal data of the contact persons of your company only insofar as this is necessary to provide our services. The processing of your personal data is regularly carried out on the exclusive basis of fulfilling a contract or implementing a pre-contractual measure.
Insofar as we obtain the consent of the data subject for any processing of personal data, art. 6 para. 1 lit. a EU-GDPR serves as the legal basis.
When processing personal data that is required for the fulfilment of a contract between you and us, art. 6 para. 1 lit. b EU-GDPR serves as our legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
If the processing is necessary to protect a legitimate interest of ours or of a third party and if your interests, fundamental rights and freedoms or those of your company’s contact persons do not outweigh the former, art. 6 para. 1 lit. f EU-GDPR serves as the legal basis for the processing.
c) Erasure of data and storage duration
Your personal data as well as those of your company’s contact persons will be deleted or blocked as soon as the purpose for which they were stored no longer applies. The storage of personal data is also possible if provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or deleted upon the expiry of a storage period prescribed by the aforementioned standards, unless there is a need for further storage of the data for the purpose of concluding or fulfilling a contract.
4. System for our customers, conclusion of transactions and ongoing business relationship
The legal basis for the processing of your personal data as well as those of your company’s contact persons in the context of the system for our customers, the conclusion of transactions and the ongoing business relationship is art. 6 para. 1 lit. b EU-GDPR and art. 6 para. 1 lit. f EU-GDPR, respectively.
If you or your company’s contact persons have given consent, art. 6 para. 1 lit. a EU-GDPR is an additional legal basis for the processing of your personal data and the personal data of your company’s contact persons.
The purpose for processing your personal data as well as the personal data of your company’s contact persons in the context of the system for our customers, the conclusion of transactions and the ongoing business relationship is the establishment, execution and termination of the respective order as well as the consideration for future contract awards or tenders.
If we have not received your personal data directly from you, your company’s contact person has provided us with and named your personal data in the context of the system for our customers.
Your personal data as well as those of your company’s contact persons will be deleted as soon as they are no longer required for the purpose for which they were collected.
With respect to the system for our customers, the conclusion of transactions and the ongoing business relationship, this is the case when the contract on which the order or offer is based has been fulfilled and all claims arising from the contractual relationship have become statute-barred or when all statutory retention periods have expired.
With respect to the consideration for future contract awards or tenders, this is the case if your company is definitely no longer interested in being considered for future contract awards, tenders or offers.
The processing of your personal data as well as the personal data of your company’s contact persons is absolutely necessary for the establishment, execution and termination of the respective contract, order or offer. There is therefore no possibility for you or your company’s contact person to object.
If you or the contact persons of your company have given consent to the processing of your personal data, this consent can be revoked at any time for the future and you can object to any future processing of personal data in the context of consideration for future orders or offers.
5. Direct marketing by post
The legal basis for the processing of your personal data as well as those of your company’s contact persons in the context of direct marketing by post is art. 6 para. 1 lit. f EU-GDPR.
The purpose for processing your personal data as well as those of your company’s contact persons in the context of direct marketing by post is to promote the sale of our services. This purpose constitutes our legitimate interest in the processing of data in accordance with art. 6 para. 1 lit. f EU-GDPR.
Your personal data as well as those of your company’s contact persons will be deleted as soon as they are no longer required for the purpose for which they were collected; this is particularly applicable upon receipt of any objection.
You as well as your company’s contact persons can object to any future processing of your personal data in the context of direct marketing by post at any time.
The legal basis for the processing of your personal data as well as those of your company’s contact persons which are transferred to us by e-mail is art. 6 para. 1 lit. f EU-GDPR. If the e-mail correspondence is aimed at the conclusion of a contract, art. 6 para. 1 lit. b EU-GDPR is an additional legal basis for the processing of personal data.
The processing of personal data in the case of establishing contact via e-mail serves only to process the correspondence received.
The personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. With respect to personal data sent by e-mail, this is the case when the respective conversation with you or your company’s contact persons has ended. The conversation ends when it can be concluded from the circumstances that the matter in question has been fully resolved between us.
It is always possible to object to any future processing of personal data in the context of establishing contact via e-mail. In such a case, the conversation between us cannot be continued. All personal data stored in the course of establishing contact will consequently be deleted.
7. Submissions by data subjects according to art. 12 seq. EU-GDPR
The legal basis for the processing of your personal data as well as those of your company’s contact persons in the context of processing a data protection request ("data subject submissions") is art. 6 para. 1 lit. c in conjunction with art. 12 seq. EU-GDPR. The legal basis for the subsequent documentation of the lawful processing of data subject submissions is art. 6 para. 1 lit. f EU-GDPR.
The purpose for processing personal data in the context of processing data subject submissions is to answer the data protection request. The subsequent documentation of the lawful processing of the respective data subject submission serves to fulfil the legally required obligation to provide evidence pursuant to art. 5 para. 2 EU-GDPR.
The personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. With respect to the processing of data subject submissions, this is the case three years after the end of the respective process in accordance with sec. 41 BDSG in conjunction with sec. 31 para. 2 no. 1 OWiG [Administrative Offences Act].
8. Legal defence and enforcement
The legal basis for the processing of your personal data as well as those of your company’s contact persons in the context of legal defence and enforcement is art. 9 para. 2 f lit. f; 6 para. 1 lit. f EU-GDPR.
The purpose for processing personal data in the context of legal defence and enforcement is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.
The processing of your personal data in the context of legal defence and enforcement is absolutely necessary for legal defence and enforcement. Consequently, there is no possibility to object.
9. Recipient categories
Within our company, the departments and divisions that receive personal data are those that need them in order to fulfil the aforementioned purposes. In the context of personnel leasing, e.g. as a master vendor, your personal data and those of your company’s contact persons may be transferred to personnel service providers and the receiving employer. In addition, we sometimes use different service providers and transfer your personal data to other trustworthy recipients. These include:
§ Controlling / Auditing
§ Supervisory / occupational safety authorities
§ Tax office
§ Hirers
§ Customer relationship service provider
§ Tax consultants, lawyers and courts
If we process your data and the personal data of your company’s contact persons, you or the respective contact person of your company are the data subject as defined by the EU-GDPR. Data subjects have the following rights towards us:
Data subjects have a right to be informed as to whether and which of their personal data are processed by us. In this case, we will also inform the data subject about
(7) where applicable: the existence of an automated decision-making process and information on the logic involved, the scope and the intended impact of the processing operations
Data subjects have the right to request a rectification and/or completion if the personal data processed by us is incorrect or incomplete.
The data subjects shall have a right to restrict the processing, provided that
(1) we verify the accuracy of the personal data processed by us;
(2) the processing of the personal data is unlawful;
(3) we need the personal data processed by us for legal proceedings after the purpose ceases to apply;
(4) the data subject has lodged an objection to the processing of his/her personal data and we will examine this objection.
The data subject shall have a right to erasure, provided that
(1) we no longer need the personal data for their original purpose;
(2) the consent is withdrawn and there is no further legal basis for the processing of the personal data;
(3) the data subject objects to the processing of his/her personal data and, except in the case of direct marketing, there are no overriding reasons for further processing;
(4) the processing of the personal data is unlawful;
(5) the deletion of the personal data is required by law;
(6) the personal data were collected for information society services when the data subject was a minor.
If the data subject has asserted his/her right to rectification, erasure or restriction of processing, we will inform all recipients of the personal data of this rectification, erasure or restriction of processing.
The data subject has the right to receive his/her personal data processed by us on the basis of consent or for the purpose of contract implementation in a structured, common and machine-readable format and to transfer it to another data controller. Insofar as this is technically feasible, he/she has the right to request that we transfer these data directly to another data controller.
Data subjects have the right to object to the processing of their personal data for specific reasons. In this case, we will undertake no further processing operations with respect to the personal data, unless we can prove that there are compelling legitimate grounds for processing.
In case the personal data are processed for the purpose of direct marketing, the data subjects have the right to object at any time.
Data subjects have the right to revoke any consent given to us at any time. The revocation of consent shall not affect the lawfulness of processing operations carried out on the basis of the consent given until revocation.
Without prejudice to any other administrative or judicial remedy, you as the data subject have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by us is in breach of the EU-GDPR.
The supervisory authority to which the complaint has been submitted will inform you of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to art. 78 EU-GDPR.
Information requirements for employees according to art. 12, 13 seq. EU-GDPR
Due to the legal provisions of the European General Data Protection Regulation ("EU-GDPR"), we are obliged to provide you with comprehensive information about the processing of your personal data in the context of your employment relationship, which we are very happy to do.
Data protection and the handling of your personal data is very important to us. Therefore, we always ensure that your personal data is processed properly.
If you have any questions about your employee data and their processing, our data protection officer will be happy to answer them at any time. He is not subject to any instructions, is independent in his position and is legally obliged to maintain secrecy and confidentiality, so please do not hesitate to contact him.
With regard to the processing of your personal data in the context of your employment relationship, we would like to inform you of the following:
Generally, we process your personal data only to the extent necessary to establish, execute and terminate the employment relationship. Any further processing of your personal data is regularly only carried out if we have obtained your prior consent to do so. An exception applies in cases where prior consent cannot be obtained for factual reasons or where the processing of your personal data is permitted by legal authorisation.
4. Data processing in the context of the employment relationship
Insofar as we obtain your consent for the processing of personal data, art. 6 para. 1 lit. a EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with art. sec para. 2 BDSG [German Federal Data Protection Act] serve as the legal basis.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, art. 6 para. 1 lit. c EU-GDPR serves as the legal basis. We are subject to the following legal obligations, among others:
- sec. 28a SGB (Social Security Code) IV; sec.198 seq. SGB V; sec. 190 seq., sec. 281c SGB VI DEÜV (Data Acquisition and Transmission Ordinance) concerning reporting to the authorities
- sec. 829 para. 2 sent. 1 ZPO (Code of Civil Procedure) concerning salary attachments
- sec. 16 para. 2 ArbZG (Working Hours Act) and sec. 7d para. 1 sent. 1 SGB IV concerning the documentation of working time accounts
- sec. 16, 17 MiLoG (Minimum Wage Act) concerning the documentation of working hours and the fulfilment of reporting requirements imposed by the authorities
- sec. 49, 50 JArbSchG (Youth Employment Protection Act) concerning the fulfilment of information and documentation requirements imposed by the authorities
- sec. 7, 17 b AÜG (Personnel Leasing Act) concerning the fulfilment of information and documentation requirements imposed by the authorities
- sec. 76, 88, 101 BBiG (Vocational Training Act) concerning the fulfilment of information and documentation requirements imposed by the authorities
- sec. 163 SGB IX (Rehabilitation and Participation of People with Disabilities in the Labour Market) concerning the implementation of the cooperation between the employer, the Agentur für Arbeit and integration offices
- sec. 312 SGB III concerning the issuing of the employment certificate to the Agentur für Arbeit
- sec. 27 MuSchG concerning the fulfilment of the notification and retention obligations imposed by the authorities
If the processing of special categories of personal data is necessary to enable us to exercise our rights under labour law, social security and social protection law and to comply with our obligations in this respect, the legal basis for the processing is derived from art. 6 para. 1 lit. c EU-GDPR, art. 9 para. 2 lit. b EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with art. 26 para. 3 BDSG. We are subject to the following legal obligations, among others:
If the processing relates to special categories of personal data obviously made public by you, the legal basis results from art. 6 para. 1 lit. f EU-GDPR, art. 9 para. 2 lit. e EU-GDPR, art. 88 para. 1 EU-GDPR in conjunction with sec. 26 para. 1 BDSG.
The processing of your personal data is carried out for the purpose of establishing, executing and terminating the employment relationship, in particular for the fulfilment of contractual, legal, collective agreement (where applicable) as well as social security obligations.
- Receipts for the payroll account for up to 10 years in accordance with sec. 147 para. 1 no. 4.5 in conjunction with para. 3 AO (German Fiscal Code); sec. 41 para. 1 sent. 9 EStG (German Income Tax Act); sec. 257 para. 1 no. 1, 4 in conjunction with sec. 238 para. 1 HGB (German Commercial Code)
- Cautions up to 2.5 years (depending on the jurisdiction)
- Application documents, application dates, after a decision not to hire the applicant, up to 6 months, burden of proof of discrimination, period pursuant to sec. 21 para. 5 and sec. 22 AGG (General Equal Treatment Act)
- Application documents, other: In the event of dissolution or termination of the employment relationship
- Time sheets 2 years according to sec. 16 para. 2 ArbZG (Working Time Act)
- Time sheets 2 years according to sec. 50 JArbSchG (Youth Employment Protection Act)
- Time sheets 2 years according to sec. 17 para. 1 MiLoG (Minimum Wage Act)
- Other time sheets 6 years, sec. 147 para. 1 no. 5, para. 3 AO
e) The processing of your personal data in the context of the employment relationship is absolutely necessary for the establishment, execution and termination of the employment relationship. Consequently, there is no possibility for you to object.
Within our company, the departments and divisions that receive personal data are those that need them in order to fulfil the aforementioned purposes. We transfer your data to interested customers and hirers in the context of the leasing of personnel. In addition, we sometimes use different service providers and transfer your personal data to other recipients. The potential recipients on our side as well as on the side of the customer or hirer include:
- Supervisor of the employee in question
- Representative council for severely disabled employees
- Controlling/Auditing
- Social security agency: Health insurance companies, medical care funds, pension insurance companies
- Arbeitsagentur [Employment Agency]
- Supervisory / occupational safety authorities
- Integrationsamt [Integration Office] in case of severe disability
- Employer's liability insurance association
- Creditors, in the case of wage and salary attachments
- Lawyers, courts, tax consultants
- Personnel services provider
- Hirers
If your personal data are processed by us, you are a data subject as defined by the EU-GDPR, and you have following rights against us: