Data protection information pursuant to Article 13 of the EU General Data Protection Regulation (GDPR): Business cards and contact informations

We exchanged business cards at an event, we spoke on the phone and you sent us your contact details by e-mail. Now we process your contact data. And as the reponsible body, we inform you about data processing in accordance with Article 13 of the EU General Data Protection Regulation (GDPR).

This information does not have to provided if you already have this information. There is a general tenor in Germany about the processing of contact data. But we think that it does no harm to inform you formally correctly.

Who we are

Bochumer Verein Verkehrstechnik GmbH
vertreten durch den Geschäftsführer Herrn Karlheinz Springer
Alleestr. 70
D-44793 Bochum
E-Mail: datenschutz_bvv@bochumer-verein.de
Tel: 0234 / 6891-0

Data protection officer

We have appointed a data protection officer.
You can reach the data protection officer via these contact details:

Bochumer Verein Verkehrstechnik GmbH
Datenschutzbeauftragter
Alleestr. 70
D-44793 Bochum
E-Mail: datenschutz_bvv@bochumer-verein.de

What data do we process when you provide us with your contact details

We process the data which is on the business card or which you have given us in the mail as contact data. In addition, we note the occasion on which we met or communicated, normally we also note the date of our meeting or telephone call or visit and perhaps the rèsumè of our conversation.

We process these data in order to remember you better and to be able to contact you in the future, e.g. if we would like to submit an inquiry or an offer. This is always relatet to the content of our contact. This means that we will not send you any advertising or harass you by mail or telephone. The processing takes place because we – and in fact you – have legitimate interest in it (Article 6 (1) lit. f GDPR).

Perhaps we also agreed in our conservation that we would contact you specifically on a topic after our conservation, send you documents, call you. By this agreement you have consented to data processing for this purpose (Article 6 (1) lit. a GDPR).

If we then enter into concrete contractual discussions or conclude a contract, your contact data will be further processed for this purpose. The legal basis is then (Article 6 (1) lit. b GDPR).

We delete your contact types when the repective purpose has ceased to apply and there are no legal retention periods that prohibit deletion. For example, if we have a contract, some of your contact information may appear on the invoices you receive. These must be kept for 10 years. We go through all stored contacts on a regular basis and check whether the legal basis for further storage still exists.

We do not pass on your data to third parties. However, there are some exceptions:

You have asked us to pass on the data (Article 6 (1) lit. a GDPR, if necessary (Article 6 (1) lit. b GDPR)), for example, you have asked us to establish contact with a third party.

You have asked us for something for which it is necessary to disclose the data (Article 6 (1) lit. a GDPR, if necessary Article 6 (1) lit. b GDPR),

It is necessary for legitimate interest to pass on the data. In this case, we will weigh up whether you might have anything against it. If you do not have anything against it in the usual discretion, we may then pass on your data (Article 6 (1) lit. f GDPR). For example, you offer a service and another business contact of ours has a need for your service. Then we have a legitimate interest in doing our other business contact a favour and you will be happy to do so after usual consideration.

And there is the exception that we have to transmit the data legally (Article 6 (1) lit. c GDPR). However, we cannot think of a concrete example  here.

In general, this entire processing takes place within the framework oft he General Date Protection Regulation and the Data Protection Law of the Federal Republic of Germany. A transfer of your personal data to a third country or an international organisation does not take place and is not planned. For example, we do not use a cloud solution from a non-German provider for contact storage.

Logically, automatic decision making such as profiling does not take place.

What if you don’t share data with me

We cannot contact you without your contact details. If you do not tell us individual contact types, we cannot contact you exactly in these ways.

Your rights as a data subject

You have at all times the comprehensive right to information from us as to whether and which personal data of yours is processed or disclosed by us or another person for which purposes.

You have the right at any time that we correct incorrect data and delete unlawfully processed data immediatly. You may also request that your personal data be processed only if, on the one hand, the continuation of processing is not longer lawful but, on the other hand, immediate cancellation does not yet appear necessary (for example, it the correctness is disputed, but this has yet to be checked).

If the processing is based on your consent, you can revoke it at any time – naturally only for the future.

You also have the right to data transferability and the right to complain to the following supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de

Amendments

Legal, economic and technical developments may make it necessary to adapt this data protection infomation. We will make the updated version available to you promptly on our website