Content:

I. Responsible person in the sense of the data protection laws
II General information on data processing
III. automatic data processing when calling up the website www.bbb-bobingen.de
IV. Use of cookies
V. Processing of personal data via the contact form
VI. Processing of personal data via e-mail
VII. Processing of personal data by telephone
VIII. Processing of personal data via fax
IX. Processing of personal data in the context of the application procedure
X. Rights of the data subject

Data processing by us

When using the website www.bbb-bobingen.de, its functionalities, your contact and an inquiry, you transmit personal data to us, which we process for the purpose of handling your inquiries. This data will be treated by us only strictly for the intended purpose within the framework of data protection laws.

I. The responsible person in the sense of the data protection laws is:

BBB Building Services Engineering GmbH
Haunstetter Street 2
86399 Bobingen
Phone: 08234/96676-0
Email: info@bbb-bobingen.de
Represented by: Berthold Böhm

II General information on data processing

Scope of the processing of personal data in general

In principle, we process personal data only insofar as this is necessary for the provision of a functional website and our content and services.

Legal basis for the processing of personal data:

The respective legal basis for the processing of personal data results from the Basic Data Protection Regulation, Article 6 (1) a) - f) DS-GVO.

In the case of consent of the data subject, Art. 6 (1) a) DS-GVO is the legal basis.

Article 6(1)(b) DS-GVO is the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party or for processing operations relating to pre-contractual measures.

If processing is necessary for the fulfilment of a legal obligation of the controller, Art. 6 (1) lit. c) DS-GVO is the legal basis.

If vital interests of the data subject or another natural person make the processing necessary, Art. 6 (1) d) DS-GVO is the legal basis.

Is the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority is entrusted to the controller, the legal basis is Art. 6(1)(e) DS-GVO.

If the processing is necessary to protect a legitimate interest of our company and the interests, fundamental freedoms or fundamental rights of the data subject do not override, the legal basis is Art. 6 (1) f) DS-GVO.

Provision of personal data required for the conclusion of a contract or due to legal storage obligations

When you contact us, we collect personal data. This data is stored by us partly due to legal requirements and partly necessary for the conclusion of a contract. If you wish to conclude a contract with us, you must provide us with your data so that we can provide our services to you. In addition, we are subject to legal obligations to retain data for tax and commercial law purposes, which we must comply with. Otherwise, we may not be able to provide our services to you.

Before providing us with your personal data, you are welcome to ask your respective contact person in our company whether we require your data for the conclusion of a contract and/or our statutory retention obligations and what the consequences are if you do not provide us with the data.

Data deletion and storage period

We store your personal data as long as this is necessary for the fulfilment of the purpose or a storage is prescribed on the basis of legal regulations, Art 6 para. 1 lit. c) DS-GVO.

If the purpose for the storage of personal data is no longer given, this data will be deleted after 6 months or restricted in processing, unless there is a need for further storage of the data for a contract or contract performance.

Any storage beyond this is only carried out if this has been provided for by the European or national legislator.

SSL or TLS encryption

On the entire website, we use SSL or TLS encryption for security reasons and to protect your confidential data.

Through this encryption, confidential data, such as inquiries or orders that you send to us, can not be seen by third parties.

You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and a green lock symbol is displayed in the address line.

III. automatic data processing when calling up the website www.bbb-bobingen.de

IP address

1. description and scope of data processing

When this page is called up, requests are sent to the server which it must answer. For this purpose, your IP address must be collected and processed in order to be able to answer the corresponding server requests.

2. legal basis for data processing

The legal basis for the processing of this data is Art. 6 para. 1 lit. f) DS-GVO.

3. purpose of the data processing

The purpose of the processing of your IP address is the functionality of the website and the provision of the technical retrieval option.

4. legitimate interest

The legitimate interest in the temporary storage of the IP address is that the functionality and provision of the technical accessibility of the website is not possible without it.

5. duration of storage

The data is deleted again as soon as the further storage is no longer necessary due to the achievement of the purpose.

In the case of the collection of data for the provision of the website, this is the case when the retrieval process is completed.

6. recipients of personal data

The IP address is processed by the following hosting provider on behalf on the basis of a commissioned processing agreement pursuant to Art. 28 Para. 2, Para.4 DS-GVO:

Alfahosting GmbH
Ankerstrasse 3b
06108 Halle (Saale)
Germany
Phone: +49 (345) 279 58 0
Email: info@alfahosting.de

Hosting

1. description and scope of data processing

We use the services of our hosting service provider for the technical implementation of the website and its accessibility as well as its technical maintenance.

This includes the provision of storage and database services as well as their maintenance and support.

2. legal basis for data processing

The legal basis for the processing of this data is Art. 6 para. 1 lit. f) DSGVO.

3. purpose of the data processing

The purpose of the processing is the realization of the online offer as well as the detection of malfunctions and intrusion attempts.

4. legitimate interest

The legitimate interest in commissioning the hosting service provider is the external technical expertise and the provision of a functional and uncompromised technical website environment.

5. recipients of personal data and categories of data:

The following hosting provider acts on our behalf on the basis of a contract processing agreement pursuant to Art. 28 Para. 2, Para. 4 DS-GVO:

Alfahosting GmbH
Ankerstrasse 3b
06108 Halle (Saale)
Germany
Phone: +49 (345) 279 58 0
Email: info@alfahosting.de

Categories of data concerned are:

  • User data
  • Communication data
  • Contact details
  • Contract data

Server log files

1. description and scope of data processing

The IP addresses collected when this page is called up are also stored in so-called server log files in order to detect technical faults and/or attempts to manipulate or break into the server structure and to enable them to be rectified.

In addition, the hosting provider of this website automatically collects, stores and processes information in so-called server log files, which are automatically transmitted by your browser.

This information is:

  • Browser type and browser version
  • operating system used
  • referrer URL
  • Host name of the accessing computer
  • Time of the server request

However, this information is not merged with other data sources.

2. legal basis for data processing

The legal basis for the processing of this data is Art. 6 para. 1 lit. f) DSGVO.

3. purpose of the data processing

The purpose of processing your IP address and the above information is to detect malfunctions and intrusion attempts.

4. legitimate interest

The legitimate interest in processing the IP address and the above information is to provide a functional and uncompromised technical website environment.

5. duration of storage

The data will be deleted within 7 days.

6. recipients of personal data

The IP address and the above-mentioned information are processed by the following hosting provider on behalf of us on the basis of a commissioned processing agreement pursuant to Art. 28 Para. 2, Para.4 DS-GVO:

Alfahosting GmbH
Ankerstrasse 3b
06108 Halle (Saale)
Germany
Phone: +49 (345) 279 58 0
Email: info@alfahosting.de

IV. Use of cookies

1. description and scope of data processing

The page www.bbb-bobingen.de uses so-called "cookies". Cookies are text files that are stored in the memory and/or on a data carrier of your device used to visit the site and that are processed by your Internet browser according to the settings stored there.

2. legal basis for data processing

The legal basis for the processing is Art. 6 para. 1 lit. f) DS-GVO.

3. purpose of the data processing

These cookies contain technical information for the provision of website functionalities within the scope of use. This enables the technical implementation of the website.

4. legitimate interest according to Art. 6 para. 1 lit. f) DS-GVO

The cookies used only contain technical data. The use of these cookies is necessary in order to be able to offer the user a functionality of our website that meets his expectations.

5. duration of storage and possibilities of objection and elimination

The cookies used on this site are so-called "session cookies". These are automatically deleted from your computer's browser cache / memory after the end of your visit to the website and/or when you close your browser, provided that you have activated this functionality in your browser.

Please check the settings of your Internet browser (e.g. Firefox, Internet Explorer, Edge, Chrome, Opera, Safari). Your Internet browser also gives you the option of regulating the handling of cookies or deactivating them altogether. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

V. Processing of personal data via the contact form

1. description and scope of data processing

A contact form is available on our website, which is only used for electronic contact. We process your personal data only insofar as you provide us with them in the context of your contact.

The following data is processed for inquiries via the contact form:

  • Name
  • E-mail address*
  • Phone
  • Postcode or city*
  • Subject
  • Message*

The fields marked with a "*" symbol are mandatory fields. Without their completion, no enquiry can be sent to us via this contact form.

Please only enter the telephone number if you would like us to contact you by telephone.

The specification of the postal code or the city is necessary in order to check whether we can provide our offer at your place of residence or place of stay.

The indication of the name serves the personal address in the context of the treatment of your inquiry.

When merely entering the data in the forms, no data is transmitted to us, this only happens after pressing the "Send" button.

The following data is also processed at the time the message is sent:

- Date and time of the request

2. legal basis for data processing

The legal basis for the processing of personal data for handling and answering your inquiries is Art. 6 para. 1 lit. f) DS-GVO.

The legal basis for the processing of personal data that serve the preparation and/or implementation of a contractual relationship is Art. 6 (1) lit. b) DS-GVO.

3. purpose of the data processing

The processing of personal data via the contact form serves the sole purpose of establishing contact and enabling the company to address the customer for information purposes on the customer's initiative.

Depending on the intention and content of your inquiry, the purpose may also be the initiation and/or implementation of a contractual relationship, in which case the purpose is also to maintain the customer relationship.

4. legitimate interest

The legitimate interest in the data processing lies in the possibility to process your request and to respond to you according to your request. The data collected is processed on the basis of a request from you. This processing is also in your interest to be able to respond to your request according to your expectation.

5. duration of storage

The data will be deleted within 6 months after they are no longer required to achieve the purpose for which they were collected or are not subject to any further legal retention obligations (e.g. 10 years according to AO, 6 years according to HGB). For your data entered in the contact form, this is the case when the respective conversation with the user has ended.

In this context, the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

VI. Processing of personal data via e-mail

1. description and scope of data processing

In the case of enquiries by e-mail, personal data are processed depending on the content of your e-mail:

This is in any case your e-mail address, date and time and the content of the message. In addition, depending on the content of your e-mail, the following personal data may be processed, for example:

  • First name, last name
  • Phone number

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. legal basis for data processing

Due to the express request of the user via e-mail, the legal basis for the processing of the data is Art. 6 (1) lit. f) DS-GVO. If the contact via e-mail also aims at the conclusion and/or execution of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DS-GVO.

3. purpose of the data processing

The processing of personal data via your e-mail inquiry serves the sole purpose of establishing contact and enabling the company to contact the customer for information purposes on the customer's initiative.

Depending on the intention and content of your request, the purpose may also be the initiation and/or implementation of a contractual relationship.

4. legitimate interest

The legitimate interest in the data processing lies in the possibility to process your request and to respond to you according to your request. The data collected is processed on the basis of a request from you. This processing is also in your interest to be able to respond to your request according to your expectation.

5. duration of storage

The data will be deleted within 6 months after they are no longer required to achieve the purpose of their collection or are not subject to any further legal retention obligations (e.g. 10 years according to AO, 6 years according to HGB). For your e-mail, this is the case when the respective conversation with the user has ended.

In this context, the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

VII. Processing of personal data by telephone

1. description and scope of data processing

In the case of telephone enquiries, personal data are processed depending on the content of the conversation:

This may include the following personal information depending on the information you provide during the call:

  • First name, last name
  • Phone number
  • Customer number
  • Payment data
  • Contract data

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. legal basis for data processing

Due to the explicit request of the user via telephone, the legal basis for the processing of the data is Art. 6 (1) lit. f) DS-GVO. If the contact via telephone also aims at the conclusion and/or execution of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DS-GVO.

3. purpose of the data processing

The processing of personal data via the telephone call serves the sole purpose of establishing contact and enabling the company to address the customer for information purposes on the customer's initiative.

Depending on the intention and content of your inquiry, the purpose may also be the initiation and/or implementation of a contractual relationship, as well as the maintenance of the customer relationship.

4. legitimate interest

The legitimate interest in the data processing lies in the possibility to process your request and to respond to you according to your request. The data collected is processed on the basis of a request from you. This processing is also in your interest to be able to respond to your request according to your expectation.

5. duration of storage

The data will be deleted within 6 months after they are no longer required to achieve the purpose of their collection or are not subject to any further legal retention obligations (e.g. 10 years according to AO, 6 years according to HGB). For your e-mail, this is the case when the respective conversation with the user has ended.

In this context, the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

VIII. Processing of personal data via fax

1. description and scope of data processing

For requests sent by fax, personal data will be processed depending on the content of your message:

This is in any case your fax number, date and time as well as the content of the message. In addition, depending on the content of your message, the following personal data may be processed, for example:

  • First name, last name
  • Phone number
  • Customer number
  • Payment data
  • Contract data

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. legal basis for data processing

Due to the express request of the user via fax, the legal basis for the processing of the data is Art. 6 (1) lit. f) DS-GVO. If the contact via fax also aims at the conclusion and/or execution of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DS-GVO.

3. purpose of the data processing

The processing of personal data concerning your request by fax serves the sole purpose of contacting you and enabling the company to contact the customer for information purposes on the customer's initiative.

Depending on the intention and content of your request, the purpose may also be the initiation and/or implementation of a contractual relationship.

4. legitimate interest

The legitimate interest in the data processing lies in the possibility to process your request and to respond to you according to your request. The data collected is processed on the basis of a request from you. This processing is also in your interest to be able to respond to your request according to your expectation.

5. duration of storage

The data will be deleted within 6 months after they are no longer required to achieve the purpose of their collection or are not subject to any further legal retention obligations (e.g. 10 years according to AO, 6 years according to HGB). For the fax inquiry, this is the case when the respective conversation with the user has ended.

In this context, the conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

IX. Processing of personal data in the context of the application procedure

1. description and scope of data processing

We regularly provide information about current vacancies in job advertisements or on our website. You have the opportunity to apply for these positions. You can send us this application data either by post or by e-mail.

Data that you provide to us as part of the application process may include:

  • Name, address and contact details
  • Curriculum vitae including all other details
  • Personal cover letter
  • Qualifications
  • Interests

If you send us your data by e-mail, we also process your e-mail address, date and time as well as the content of the message. In addition, depending on the content of your e-mail, the following personal data may be processed, for example:

  • First name, last name
  • Phone number

The data will be used exclusively within the framework of the application procedure for the purpose of deciding whether to fill the vacancy.

2. legal basis for data processing

The legal basis for the processing of data within the scope of the application procedure is Art. 6 Para. 1 lit. b) DS-GVO, § 26 Para. 1 BDSG.

Insofar as you provide us with special categories of personal data within the scope of the application procedure, such as e.g. an existing severely disabled status or health data, which are necessary for the assessment of your employability for a specific position, the processing of these data provided on your initiative is carried out in accordance with Art. 9 Para. 2 lit. b), lit. h) DS-GVO, § 26 Para.3 BDSG.

3. purpose of the data processing

The processing of personal data within the scope of the application procedure serves the sole purpose of personnel planning and the establishment of employment relationships.

4. legitimate interest

The legitimate interest in data processing lies in the need to fill vacancies with suitably qualified applicants within the framework of viable personnel planning and corporate management.

5. duration of storage

The data in case of rejection of an application will be deleted within 6 months after rejection. Data of successful applications are subject to the retention obligations resulting from the labour law and social law regulations, the AO and the HGB.

6. recipients of personal data

The address data is processed by the following service provider on behalf of us on the basis of a commissioned processing agreement pursuant to Art. 28 Para. 2, Para.4 DS-GVO:

Lochbronner Design Studio
Schrannenplatz 9
86830 Schwabmünchen
Phone: 08232 9958990
Email: info@lochbronner.com

X. Rights of the data subject

If personal data is processed by you, you are the data subject within the meaning of the General Data Protection Regulation. You therefore have the following rights vis-à-vis the controller.

To exercise your data protection rights against us as the person responsible, please contact us at the following e-mail address: info@bbb-bobingen.de.

1. right of access - Art. 15 DS-GVO

You have the right to obtain confirmation from the controller as to whether personal data concerning you are being processed.

If there is such processing, you have the right to access this personal data and to receive the following information:

  • the purposes for which the personal data are processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • if possible, the envisaged duration for which the personal data will be stored or, if not possible, the criteria for determining the duration of storage;
  • the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • any available information on the origin of the data, if the personal data are not collected from the data subject;
  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

In addition, you have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may also request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

2. right of rectification - Art. 16 DS-GVO

You have the right to obtain from the controller the rectification and/or integration without delay of data concerning you, where the personal data processed are inaccurate or incomplete.

3. right to erasure - Art. 17 DS-GVO

Obligation to delete:

You have the right to request the immediate deletion of your personal data at any time, provided that one of the following reasons is given:

  • the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You have revoked your consent on which the processing was based pursuant to Art. 6 (1) a) or Art. 9 (2) a) DS-GVO and there is no other legal basis for the processing;
  • You have objected to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Article 21(2) DS-GVO;
  • the personal data concerning you have been processed unlawfully;
  • the deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
  • the personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

Exceptions:

A right to erasure does not exist insofar as the processing is necessary

  • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the field of public health, in accordance with Article 9(2)(h) and (i) and Article 9(3);
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
  • for the assertion, exercise or defence of legal claims.

4. right to restriction of processing - Art. 18 DS-GVO

You have the right to request the restriction of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • if the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  • if the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
  • if you have objected to the processing pursuant to Art. 21 (1) DS-GVO and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

Where the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

If the restriction of processing has been restricted on the basis of the above conditions, you will be informed by the controller before the restriction is lifted.

5. right to information - Art. 19 GDPR

If you have exercised one of your rights to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom the personal data relating to you has been disclosed of the rectification, erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You also have the right to be informed about these recipients.

6. right to data portability - Art. 20 DS-GVO

You have the right to obtain the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller to whom the personal data has been provided, provided that

a) the processing is based on consent pursuant to Art. 6 (1) a) DS-GVO or Art. 9 (2) a) DS-GVO or on a contract pursuant to Art. 6 (1) b) DSGVO and

(b) the processing is carried out by automated means.

In exercising this right to data portability, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, where this is technically feasible.

7. right to object - Art. 21 DS-GVO

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

8. right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9. right to complain to a supervisory authority - Art. 77 DS-GVO

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation.

The supervisory authority to which you lodge a complaint shall inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

This data protection notice is updated at regular intervals.