Information obligation according to Art. 13 GDPR
Contact details
Data controller (Art. 13 Para. 1 a GDPR)
S. Siedle & Söhne Telefon- und Telegrafenwerke OHG
Bregstraße 1
78120 Furtwangen
Email: info@siedle.de
Data protection officer (Art. 13 Para. 1 b GDPR)
ENSECUR GmbH
Kaiserstraße 86
76133 Karlsruhe
Person responsible: Thorsten Jordan
Email: dsb-siedle@ensecur.de
Information obligation for visitors
Purpose and legal basis for data processing (Art. 13 Para. 1 c GDPR)
Ensuring the access control and the householder’s rights at the locations or at events of the Controller, to track security breaches and for the safety of the visitors in the event of a fire (Art. 6 Para. 1 f GDPR)*
Implementation of EU regulations through security checks according to EU regulations 881/2002 and 753/2011. AEO sanction list checks (Art. 6 Para. 1 c GDPR)
Provision of information to the public health department or local police authority to trace infection chains according to the current German Protection Against Infection Act (IfSG)
The email address is used to ensure that only authorised persons gain access to the visitor Wi-Fi. (Art. 6 Para. 1 f GDPR)*
*Interests of the Controller in the event of weighing of interests (Art. 13 Para. 1 d GDPR)
Data processing is carried out in the interest of only granting access to the business premises to authorised and authenticated visitors, to implement the legal and contractual requirements of effective and traceable access control. Likewise, the data is used to track security breaches by a visitor.
At the same time, the data is also used in the event of a fire to identify any present/missing persons and report to emergency personnel for rescue.
The recipients of categories of recipients of the personal data (Art. 13
Para. 1 e GDPR)
Associated companies, disposal service providers, software manufacturers, cloud providers, security service providers, law enforcement agencies, fire brigade, event agencies
Transfer to third countries (Art. 13 Para. 1 f GDPR)
There is no transfer to third countries.
The period of storage according to statutory retention requirements (Art. 13 Abs. 2 a GDPR)
Deletion of personal data normally takes place within 7 days following the end of the visit. The data collected as part of the current covid regulations/current Protection Against Infection Act is deleted after four weeks.
The right of access to, rectification, erasure, restriction, data portability or objection (Art. 13 Para. 2 b GDPR)
As a data subject, you have the right to access, rectify and delete your data and to restrict the processing, as well as the right to data portability. To do so, please contact the Controller using the contact details provided.
Right to object (Art. 21 Para. 1 GDPR)
Provided your data is being processed for the purposes of legitimate interests you have the right to object to this processing at any time on grounds relating to your particular situation that oppose this data processing. We will then stop this processing unless it serves our overriding legitimate interests.
The right to lodge a complaint (Art. 13 Para. 2 GDPR)
As a data subject, in the event of a complaint, you can contact the State Officer for Data Protection and Freedom of Information for Baden-Württemberg at any time.
Existence of a requirement to provide personal data (Art. 13
Para. 2 e GDPR)
Provision of one’s first name and surname is required in order to identify visitors. Without this information, access cannot be granted to the Controller’s site. Provision of an email address is voluntary and is used to ensure that only authorised persons gain access to the visitor Wi-Fi.
Information obligation for prospects and customers
Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)
Handling and processing enquiries from interested parties (Art. 6 para. 1 f GDPR)*
Sanction list screening (Art. 6 para. 1 c GDPR in connection with Regulation (EC) No. 2580/2001 against miscellaneous persons and organizations suspected of terrorism and Regulation (EC) No. 881/2002 against Osama bin Laden, Al-Qaida and the Taliban)
Preparing quotations for prospects (Art. 6 para. 1 f GDPR*)
Concluding purchase contracts (Art. 6 para. 1 f GDPR*)
Fulfilling legal obligations (Art. 6 para. 1 c GDPR)
Support of operating processes by service providers (Art. 28 GDPR)
Order management and delivery (Art. 6 para. 1 c GDPR)
Handling of complaints (Art. 6 para. 1 c GDPR)
*Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)
Assertion of legal claims and defence in legal disputes
Guaranteeing IT security and the IT operations of the company
Prevention of crimes
Measures for business management and further development of services and products
Information on new services or products
Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
Public authorities, banks, auditors, software producers, affiliates, waste disposal service providers, advertising agency, IT service providers, suppliers.
Transfer to third countries (Art. 13 para. 1 f GDPR)
Data transmission to third countries takes place according to the statutory admissibility regulations pursuant to Article 45 GDPR, read in conjunction with Art. 46 (5) S. 2 GDPR). The GDPR provides for continued validity of the appropriateness resolutions already issued. For the EU-US Privacy Shield, the Commission has determined the appropriateness of the level of data protection (C(2016) 4176 final).
Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR))
Generally 10 years on revocation by a customer.
Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the controller in this connection using the contact details provided.
Right to object (Art. 21. para. 1 GDPR)
Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.
Right to withdraw consent (Art. 13. (2) c GDPR)
If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.
Right to lodge a complaint (Art. 13. para. 2 d GDPR)
As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected are necessary for the conclusion of the purchase contract. Data for marketing purposes are provided voluntarily.
Information obligation for service providers and suppliers
Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)
Purchase and management of support services for fulfilling business purposes (Art. 6 para. 1 f GDPR)*
Fulfilling legal obligations (Art. 6 para. 1 c GDPR)
Sending information material (Art. 6 para. 1 b GDPR)
*Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)
Assertion of legal claims and defence in legal disputes
Guaranteeing IT security and the IT operations of the company
Prevention of crimes
Measures for business management and further development of services and products
Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
Public authorities, banks, auditors, waste disposal service providers
Transfer to third countries (Art. 13 para. 1 f GDPR)
Data transmission to third countries takes place according to the statutory admissibility regulations pursuant to Article 45 GDPR, read in conjunction with Art. 46 (5) S. 2 GDPR). The GDPR provides for continued validity of the appropriateness resolutions already issued. For the EU-US Privacy Shield, the Commission has determined the appropriateness of the level of data protection (C(2016) 4176 final).
Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR)
Erasure of the personal data generally takes place within ten years after termination of the business relationship unless a longer statutory storage period exists in exceptional cases or in the case of revocation by an data subject.
Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the responsible office in this connection using the contact details provided.
Right to object (Art. 21. para. 1 GDPR)
Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.
Right to withdraw consent (Art. 13. (2) c GDPR)
If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.
Right to lodge a complaint (Art. 13. para. 2 d GDPR)
As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected are for concluding and performing the employment relationship.
Information obligation for applicants
Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)
Management of applications/e-recruiting (Section 26 (1) German Federal Data Protection Act BDSG-neu)
Inclusion in an applicants’ pool for contact at a later date (Art. 6 para. 1 a GDPR)
Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)
Not applicable.
Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
E.g: Human resources service providers, payroll office, providers of the software-supported applicant portal, waste disposal service providers.
Transfer to third countries (Art. 13 para. 1 f GDPR)
No transfer to a third country takes place.
Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR)
Erasure of the personal data takes place six months after termination of the application process, taking due account of Section 61b (1) of the German Labour Court Act (ArbGG) in conjunction with Section 15 of the German General Act on Equal Treatment (AGG). If the applicant is accepted in the applicant pool, erasure takes place after 2 years have elapsed if no suitable position can be offered.
In the event of employment, the necessary data will be included in the personnel file. The information on erasure of the relevant data is available under the duty of information on employee data processing.
Right to object (Art. 21. para. 1 GDPR)
Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.
Right to withdraw consent (Art. 13. (2) c GDPR)
If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.
Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the controller in this connection using the contact details provided.
Right to lodge a complaint (Art. 13. para. 2 d GDPR)
As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.
Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The data collected are necessary for performing the application procedure. If the data are not provided, it will not be possible to perform the application procedure.