Information on data handling in accordance with Art. 13 or 14 GDPR

Information on the handling of personal data

The protection of your private rights and freedoms is important to us; we only use your data for the purposes intended. Since it is important to us that you know at all times to what extent we collect, use and, if necessary, transfer your data to third parties, we will inform you in detail below about the processing of your personal data collected by us or stored by us. When processing personal data, we strictly adhere to the provisions of the EU General Data Protection Regulation (GDPR) and, if applicable, other data protection-relevant provisions.

Name and address of the controller

TUBS GmbH
Ingo Einacker
Hardenbergstr. 16-18
10623 Berlin
Germany

Phone: +49 (0) 30 44720222
E-mail: info@tubs.de

Name and address of the data protection officer

Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster


Data protection team for general data protection inquiries:
Team e-mail: dsb.tubs@cortina-consult.de
Website: https://cortina-consult.com/

If you have any questions regarding the processing of your personal data, if you wish to exercise your rights as a data subject (such as the right to information, correction, blocking or deletion of data) or if you wish to withdraw your consent, please contact our data protection officer directly.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Data security information

We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all dangers is not possible.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

  1. Right to information

    This requirement concerns in particular information on the following details of data processing:

    • Processing purposes
    • Data categories
    • Recipients or categories of recipients, if applicable
    • If applicable, the planned storage duration or the criteria for determining this duration.
    • Note on the respective right of correction, deletion, restriction or objection
    • Existence of the right to complain to a supervisory authority
    • If applicable, origin of the data (if not collected from you)
    • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
    • If applicable, (planned) transfer to a third country or international organization
  2. Right to rectification

    We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

  3. Right to erasure (right to be forgotten)

    Provided that the processing is no longer necessary and one of the following conditions is met:

    • Discontinuation of the purpose of processing
    • Withdrawal of their consent and absence of any other legal basis for processing
    • Objection to processing without an important reason to the contrary
    • Unlawful processing
    • Required to fulfill a legal obligation
    • Data collection was carried out in accordance with Art. 8 (1) GDPR

    Within the scope of the deletion request, we will, if necessary, pass on your request to those third parties to whom a transfer of your data had previously taken place.

  4. Right to restriction of processing

    Provided that one of the following conditions is met:

    • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
    • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
    • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
    • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
  5. Right to data portability

    If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

  6. Right to object

    If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

  7. Automated decisions in individual cases including profiling

    If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

  8. Right to revoke consent under data protection law

    You have the right to revoke consent to the processing of personal data at any time.

  9. Right to complain to a supervisory authority

    A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General administration
Purpose of the processing of general data
Data typePurpose of the survey
1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - File management
- General administration
- Order management
- Office communication
- Incoming mail
- External consultants
- Paper and document destruction
- Mailroom
- Key management
- Appointment management
- Contract management
Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • Recipient (if applicable)Re 1) Processor (Details: Processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR) Re 1) External (Details: Service providers, other organizations, other third parties) Re 1) Internal (Details: Internal department) Re 1) Public body (Details: Public body: Public authority, body of the administration of justice, public-law institution of the federal government, federally directable corporations, institutions, foundations and their associations pursuant to § 2 para. 1-3 BDSG).
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Purchasing tasks
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Ordering
    - Supplier management
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Recipient (if applicable)Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out in the context of purchasing tasks.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Customer support
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Call processing
    - Call center
    - Service
    - Customer support
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Recipient (if applicable)Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the processing described in the context of customer support cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Logistics tasks
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Warehouse management
    - Delivery and shipping
    - Customs clearance in own company
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • Recipient (if applicable)Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out as part of logistics tasks.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Marketing Management
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Acquisition
    - Pictures and videos at events
    - Competitions
    - Blog with comment function
    - Contact form
    - Customers
    - Photo and film
    - Customer survey (anonymous)
    - Marketing measures
    - Trade fair photos
    - Trade fair stand support
    - Newsletter
    - Online marketing
    - Press
    - Print mailings
    - Social media marketing
    - Events and functions
    - Website evaluation
    Legal basis (according to Art. 6 / 9 GDPR)
  • Consent pursuant to Art. 6 para. 1 lit. a GDPR is given. The requirements for consent pursuant to Art. 7 para. 1-4 GDPR are met.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Recipient (if applicable)Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityNo
    Consequences of non-compliance (in case of failure to provide the required data)There is no obligation to provide personal data.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Accounting
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - (Online) banking
    - Direct debit billing
    - Quotation, order and invoice preparation
    - Credit insurance
    - Invoicing, dunning and financial accounting
    - Credit reports, credit checks, debt collection
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • Recipient (if applicable)Re 1) External (details: service providers, other organizations, other third parties) Re 1) Internal (details: internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out in the context of accounting.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Technical data security measures
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - General network protection
    - Backup
    - User administration
    - Data carrier disposal
    - Internet usage control
    - Emergency concept
    - Logging in IT systems
    - Handling passwords
    - Access control (authorization concept)
    - Access control
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR (please name the legal obligation here!).
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Recipient (if applicable)Re 1) Processor (details: IT service provider) Re 1) Public body (details: law enforcement authorities, if applicable)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing in the area of IT security cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (Details: The data was collected directly from the data subject).
    Company management
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Analysis and reporting
    - Third-party inquiries
    - Legal and court documents
    - Information procedures for data subjects
    - Tenders
    - Controlling
    - Data to tax advisors, auditors, customs authorities
    - Data to management consultants
    - Project management
    - Audit, compliance
    - Technical equipment
    - Improvement process
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • Recipient (if applicable)Re 1) Processor (Details: Processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR) Re 1) External (Details: Service providers, other organizations, other third parties) Re 1) Internal (Details: Internal department) Re 1) Public body (Details: Public body: Public authority, body of the administration of justice, public-law institution of the federal government, federally directable corporations, institutions, foundations and their associations pursuant to § 2 para. 1-3 BDSG).
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing in the company management area cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Sales tasks
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Address purchasing
    - Order processing
    - Order entry (patients)
    - Distribution
    - External sales support
    - Prospect management
    - POS system
    - Contact management
    - Customer care and CRM
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Consent pursuant to Art. 6 para. 1 lit. a GDPR is given. The requirements for consent pursuant to Art. 7 para. 1-4 GDPR are met.
  • Recipient (if applicable)Re 1) Processor (Details: Processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR) Re 1) External (Details: Service providers, other organizations, other third parties) Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityNo
    Consequences of non-compliance (in case of failure to provide the required data)There is no obligation to provide personal data.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (Details: The data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation) Re 1) Publicly accessible (Details: Data collected from publicly accessible sources (e.g. telephone directory)).
    Central IT systems and services
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - CRM system (Customer Relationship Management)
    - Data exchange portal
    - DMS document management system
    - Print and copy jobs
    - Email archiving
    - Electronic processing by email
    - ERP software
    - Groupware system
    - Hosting
    - Internet and telephone use
    - Intranet use
    - IT support (remote)
    - Communication systems (e.g. telephone system) - Microsoft 365 - Mobile, cell phone, smartphone use - Online meetings - Data centers - Ticket system - Company website - Webshop - Microsoft 365 - Mobile, cell phone, smartphone usee.g. telephone system)
    - Microsoft 365
    - Mobile, cell phone, smartphone use
    - Online meetings
    - Data centers
    - Ticket system
    - Company website
    - Webshop
    - Whistleblowing
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • Recipient (if applicable)Re 1) Processor (Details: Processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR) Re 1) External (Details: Service providers, other organizations, other third parties) Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)
    Central IT systems and services (internal)
    Purpose of the processing of general data
    Data typePurpose of the survey
    1) All company data (details: billing data, address data, bank details/credit card data, creditworthiness data, date of birth, IT usage data/log data/log files, IP address, interests/preferences, contact data, CV, surname/first name/surname/title, social security data, contract and contract master data, payment data, time recording data, wage/salary data, correspondence, miscellaneous) - Data protection documentation (audatis MANAGER)
    - Device management
    - E-learning
    - Mobile working
    - WLAN
    - Time recording system
    - Access control
    - Access control
    Legal basis (according to Art. 6 / 9 GDPR)
  • The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
  • The processing is necessary to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
  • The processing is necessary for the purposes of the employment relationship pursuant to Section 26 (1) sentence 1 BDSG.
  • Recipient (if applicable)Re 1) Processor (Details: Processor within the meaning of Art. 4 No. 8 GDPR in conjunction with Art. 28 GDPR) Re 1) External (Details: Service providers, other organizations, other third parties) Re 1) Internal (Details: Internal department)
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityYes
    Consequences of non-compliance (in case of failure to provide the required data)If the data is not provided, the described processing cannot be carried out.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)Re 1) Direct collection (details: the data was collected directly from the data subject through: e.g. questionnaire, contract, contact form, online store, conversation)