privacy

DATA PROTECTION INFORMATION FOR CUSTOMERS AND INTERESTED PARTIES

 

Information on data protection about our processing of customer and prospect data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

 

 

CSP building cleaning

 

 

 

Dear customer, dear prospective customer,

 

In accordance with the requirements of Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data collected about you and your related data protection rights. Which data is processed in detail and how it is used depends largely on the requested or agreed services. In order to ensure that you are fully informed about the processing of your personal data in the context of the performance of a contract or the implementation of pre-contractual measures, please take note of the following information.

 

    RESPONSIBLE BODIES IN THE MEANING OF DATA PROTECTION LAW

 

CSP building cleaning

Settlement 1 66919 Schauerberg

Person responsible for data protection law: Managing Director Mr. Michael Feick


 

    CONTACT DETAILS

 

Mail:               datenschutz@CspGebäudereinigung.de

Telephone: 06375 3133132

Fax:               06375 3133132

 

 

    PURPOSE AND LEGAL BASIS OF PROCESSING

 

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU-DSGVO) and the Federal Data Protection Act (BDSG), insofar as these are necessary for the establishment, implementation and fulfillment of a contract and for the implementation of pre-contractual measures. Insofar as the provision of personal data is required for the initiation or implementation of a contractual relationship or in the context of the implementation of pre-contractual measures, processing according to Art. 6 Para. 1 lit. b GDPR lawful. If you give us your express consent to the processing of personal data for certain purposes (e.g. disclosure to third parties, evaluation for marketing purposes or advertising), the legality of this processing is based on your consent according to Art. 6 Para. 1 lit. a GDPR. A given consent can be revoked at any time with effect for the future (see section 9 of this data protection information).

 

If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfill legal obligations in accordance with Article 6 (1) (c) GDPR. In addition, processing may be carried out to safeguard our legitimate interests or those of third parties in accordance with Art. 6 Paragraph 1 lit. f GDPR. If necessary, we will inform you separately, specifying the legitimate interest, insofar as this is required by law.

 

    CATEGORIES OF PERSONAL DATA

 

We only process data that is related to the establishment of the contract or the pre-contractual measures. This can be general data about you or people in your company (name, address, contact details, etc.) as well as other data that you transmit to us as part of the justification of the contract.

 

    SOURCES OF THE DATA

 

We process personal data that we have received from you as part of establishing contact or establishing a contractual relationship or as part of pre-contractual measures.

 

    RECIPIENT OF THE DATA

 

We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests. We can transfer your personal data to companies affiliated with us, as far as this is permissible within the scope of the purposes and legal bases set out in section 3 of this data protection information sheet. Your personal data will be processed on our behalf on the basis of order processing contracts according to Art. 28 GDPR. In these cases, we ensure that personal data is processed in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of Internet service providers and providers of customer management systems and software. Otherwise, data will only be passed on to recipients outside the company to the extent that legal provisions permit or require it, the transfer is necessary for processing and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, we have your consent or we are authorized to provide information. Under these conditions, recipients of personal data can be, for example:

 

    Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) in the event of a legal or official obligation, recipients to whom the disclosure is immediately necessary for the establishment or fulfillment of the contract, other data recipients for whom you have expressly given us your consent to data transmission have (separate written consent required).

 

    TRANSFER TO A THIRD COUNTRY

 

A transfer to a third country is not intended. A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization only takes place insofar as this is necessary for the processing and thus for the fulfillment of the contract or, at your request, to carry out pre-contractual measures is required by law or you have given us your consent. In these cases, recipients can include local agencies, airlines and hotels within the framework of service contracts.

 

    DURATION OF DATA STORAGE

 

If necessary, we process and store your personal data for the duration of our business relationship or to fulfill contractual purposes. This also includes the initiation and processing of a contract. In addition, we are subject to various retention and documentation obligations, which result, among other things, from the Commercial Code (HGB) and the Tax Code (AO). The periods for storage and documentation specified there are two to ten years. Ultimately, the storage period is also based on the statutory limitation periods, which, for example, according to Sections 195 ff. Of the German Civil Code (BGB) can usually be three years, but in certain cases up to thirty years.

 

    YOUR RIGHTS

 

Every person concerned has the right to information according to Art. 15 GDPR, the right to correction according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to notification according to Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR if you are of the opinion that your personal data is not being processed lawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy. If the processing of data takes place on the basis of your consent, you are entitled according to Article 7 of the GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected. Please also note that we may have to keep certain data for a certain period of time in order to meet legal requirements (see section 8 of this data protection information).

Right of objection Insofar as the processing of your personal data in accordance with Art. 6 Paragraph 1 lit. f DSGVO is carried out to safeguard legitimate interests, you have the right, in accordance with Art. 21 DSGVO, to object to the processing of this data at any time for reasons that arise from your particular situation. We will then no longer process this personal data unless we can prove compelling legitimate reasons for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims. In individual cases we process your personal data in order to operate direct mail. You have the right to object to processing for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with this direct mail. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Please feel free to contact us to protect your rights.

 

    NECESSITY TO PROVIDE PERSONAL DATA

The provision of personal data for the establishment, execution, fulfillment of a contract or for the implementation of pre-contractual measures is usually not required by law or by contract. You are therefore not obliged to provide information about personal data. Please note, however, that these are usually required for the decision on the conclusion of a contract, the performance of the contract or for pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision within the framework of contractual measures. We recommend that you only ever provide personal data that is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures.

 

    AUTOMATED DECISION MAKING

In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish, fulfill or implement the business relationship or for pre-contractual measures. Should we use these procedures in individual cases, we will inform you about this separately or obtain your consent if this is required by law.


Share by: