Information der betroffenen Personen (Partner) bei Direkterhebung (Art. 13 DS-GVO)
Bülow AG, Heilbronner Str. 190, 70191 Stuttgart (Germany)
0711/1653-0, firstname.lastname@example.org, www.buelow-ag.de
Data protection officer:
Ingo Krause, e-mail: email@example.com
Information on data processing:
Purpose of processing:
The contact details of project partners, their contact partners, tenants, customers, and suppliers are collected and processed to complete the project.
Legal basis for processing:
Processing is required for the execution of a contract or a pre-contractual measure in accordance with Art. 6(1) point b GDPR.
Processing is required to comply with a legal obligation in accordance with Art. 6(1) point c GDPR (please state that legal obligation here!).
Categories of recipients:
- Internal: staff in the planning division, sales, accounting, and the management
- Public bodies: Planning authorities, etc.
- Third parties: Project partners / downstream contractors
Data transfer to third countries:
No data transfer to third countries is planned.
Additional information obligations:
Storage period for personal data:
10 years (AO [General Fiscal Law]) (Erasure after 10 years. Retention period for tax-relevant documents in accordance with section 147 AO).
Rights of the data subject:
You have a right to be given access (in accordance with Art. 15 GDPR) to your personal data by the controller as well as a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and the restriction of processing (Art. 18(1) GDPR). Furthermore, you can file an objection against processing (Art. 21 GDPR) and you have the right to data portability (Art. 20 GDPR).
If you would like to exercise your rights, please contact the data protection officer named above.
Right to file a complaint:
You have the right to file a complaint with the responsible supervisory authority.
Obligation to provide personal data:
Providing the personal data of the data subject is in part required by law or by contract.
The data subject is required to provide the personal data.
Consequences of not providing the data:
Execution of the contract is not possible.
No automated decision-making or profiling takes place.