Obligation d’information selon l’article 13 du RGPD

Coordonnées

Entité responsable (art. 13, par. 1, point a du RGPD)

S. Siedle & Söhne Telefon- und Telegrafenwerke OHG
Bregstraße 1
D-78120 Furtwangen

E-mail : info@siedle.de

Délégué à la protection des données personnelles (art. 13, par. 1, point b du RGPD)

ENSECUR GmbH
Kaiserstraße 86
D-76133 Karlsruhe

Personnellement responsable : Thorsten Jordan

E-mail : dsb-siedle@ensecur.de

Objectif et bases juridiques du traitement des données (art. 13, par. 1, point c du RGPD)

  • Garantie du contrôle d’accès et du droit de domicile sur les sites ou lors d’événements organisés par le responsable, pour le suivi des infractions à la sécurité et pour la sécurité des visiteurs en cas d’incendie (art. 6, par. 1, point f du RGPD)*

  • Mise en œuvre des règlements de l’UE par le biais de contrôles de sécurité conformément aux règlements de l’UE 881/2002 et 753/2011. Contrôles de la liste de sanctions AEO (art. 6, par. 1 c du RGPD)

  • Fourniture de renseignements au service de santé publique ou à l’autorité de police locale pour la traçabilité des chaînes d’infection conformément à la loi allemande en vigueur sur la protection contre les infections (IfSG)

  • L’adresse e-mail est utilisée pour garantir que seules les personnes autorisées ont accès au réseau Wi-Fi des visiteurs. (art. 6, par. 1, point f du RGPD)*

 

*Intérêts du responsable en cas de mise en balance des intérêts (art. 13, par. 1, point d du RGPD)

Le traitement des données est effectué dans un souci de n’accorder l’accès aux locaux du responsable qu’aux visiteurs autorisés et authentifiés, afin de mettre en œuvre les exigences légales et contractuelles relatives à un contrôle d’accès efficace et traçable. De même, les données sont utilisées pour pouvoir suivre les infractions à la sécurité commises par un visiteur.

Parallèlement, les données sont utilisées en cas d’incendie afin d’identifier les personnes éventuellement présentes/disparues et de pouvoir les signaler aux forces d’intervention chargées de les secourir.

 

Destinataire(s) ou catégorie(s) de destinataires des données à caractère personnel (art. 13, par. 1, point e du RGPD)

Sociétés affiliées, prestataires de services de gestion des déchets, développeurs de logiciels, fournisseurs de cloud, prestataires de services de sécurité, représentants des forces de l’ordre, pompiers, agences événementielles

 

Transfert vers des pays tiers (art. 13, par. 1, point f du RGPD)

Aucun transfert de données n’est effectué vers des pays tiers.

 

Durée de stockage conformément aux obligations légales de conservation (art. 13, par. 2, point a du RGPD)

Un effacement des données personnelles a lieu en règle générale dans les 7 jours suivant la fin de la visite. Les données collectées dans le cadre des dispositions actuelles relatives au Covid-19/de la loi actuelle sur la protection contre les infections sont effacées au bout de quatre semaines.

 

Droit d’accès, de rectification, d’effacement, de limitation, de portabilité des données et d’opposition (art. 13, par. 2, point b du RGPD)

En tant que personne concernée, vous disposez à tout moment d’un droit d’accès, de rectification et d’effacement de vos données, d’un droit de limitation du traitement et d’un droit à la portabilité des données. Pour ce faire, veuillez vous adresser au responsable aux coordonnées indiquées.

 

Droit d’opposition (art. 21, par. 1 du RGPD)

Dans la mesure où le traitement de vos données a lieu dans le but de préserver des intérêts légitimes, vous avez le droit de vous opposer à tout moment à ce traitement en nous contactant à l’aide des coordonnées indiquées, si votre situation particulière justifie un tel traitement des données. Nous mettrons alors fin à ce traitement, à moins qu’il ne serve de manière prépondérante des intérêts légitimes de notre part.

 

Droit de réclamation (art. 13, par. 2, point d du RGPD)

En tant que personne concernée, vous pouvez à tout moment vous adresser au délégué régional compétent chargé de la protection des données et de la liberté d’information du Bade-Wurtemberg en cas de réclamation.

 

Existence d’une nécessité de fournir des données à caractère personnel (art. 13, par. 2, point e du RGPD)

L’indication du prénom et du nom est nécessaire pour identifier le visiteur. Sans cette indication, l’accès au site du responsable ne peut pas être accordé. L’indication de l’adresse e-mail est facultative et est utilisée pour garantir que seules les personnes autorisées ont accès au réseau Wi-Fi des visiteurs.

Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)

  • Handling and processing enquiries from interested parties (Art. 6 para. 1 f GDPR)*

  • Sanction list screening (Art. 6 para. 1 c GDPR in connection with Regulation (EC) No. 2580/2001 against miscellaneous persons and organizations suspected of terrorism and Regulation (EC) No. 881/2002 against Osama bin Laden, Al-Qaida and the Taliban)

  • Preparing quotations for prospects (Art. 6 para. 1 f GDPR*)

  • Concluding purchase contracts (Art. 6 para. 1 f GDPR*)

  • Fulfilling legal obligations (Art. 6 para. 1 c GDPR)

  • Support of operating processes by service providers (Art. 28 GDPR)

  • Order management and delivery (Art. 6 para. 1 c GDPR)

  • Handling of complaints (Art. 6 para. 1 c GDPR)

 

*Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)

  • Assertion of legal claims and defence in legal disputes

  • Guaranteeing IT security and the IT operations of the company

  • Prevention of crimes

  • Measures for business management and further development of services and products

  • Information on new services or products

 

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)

Public authorities, banks, auditors, software producers, affiliates, waste disposal service providers, advertising agency, IT service providers, suppliers.

 

Transfer to third countries (Art. 13 para. 1 f GDPR)

Data transmission to third countries takes place according to the statutory admissibility regulations pursuant to Article 45 GDPR, read in conjunction with Art. 46 (5) S. 2 GDPR). The GDPR provides for continued validity of the appropriateness resolutions already issued. For the EU-US Privacy Shield, the Commission has determined the appropriateness of the level of data protection (C(2016) 4176 final).

 

Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR))

Generally 10 years on revocation by a customer.

 

Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)

As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the controller in this connection using the contact details provided.

 

Right to object (Art. 21. para. 1 GDPR)

Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.

 

Right to withdraw consent (Art. 13. (2) c GDPR)

If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.

 

Right to lodge a complaint (Art. 13. para. 2 d GDPR)

As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.

 

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected are necessary for the conclusion of the purchase contract. Data for marketing purposes are provided voluntarily.

Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)

  • Purchase and management of support services for fulfilling business purposes (Art. 6 para. 1 f GDPR)*

  • Fulfilling legal obligations (Art. 6 para. 1 c GDPR)

  • Sending information material (Art. 6 para. 1 b GDPR)

 

*Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)

  • Assertion of legal claims and defence in legal disputes

  • Guaranteeing IT security and the IT operations of the company

  • Prevention of crimes

  • Measures for business management and further development of services and products

 

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)

Public authorities, banks, auditors, waste disposal service providers

 

Transfer to third countries (Art. 13 para. 1 f GDPR)

Data transmission to third countries takes place according to the statutory admissibility regulations pursuant to Article 45 GDPR, read in conjunction with Art. 46 (5) S. 2 GDPR). The GDPR provides for continued validity of the appropriateness resolutions already issued. For the EU-US Privacy Shield, the Commission has determined the appropriateness of the level of data protection (C(2016) 4176 final).

 

Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR)

Erasure of the personal data generally takes place within ten years after termination of the business relationship unless a longer statutory storage period exists in exceptional cases or in the case of revocation by an data subject.

 

Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)

As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the responsible office in this connection using the contact details provided.

 

Right to object (Art. 21. para. 1 GDPR)

Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.

 

Right to withdraw consent (Art. 13. (2) c GDPR)

If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.

 

Right to lodge a complaint (Art. 13. para. 2 d GDPR)

As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.

 

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected are for concluding and performing the employment relationship.

Purpose and legal basis of the data processing (Art. 13 para. 1 c GDPR)

  1. Management of applications/e-recruiting (Section 26 (1) German Federal Data Protection Act BDSG-neu)

  2. Inclusion in an applicants’ pool for contact at a later date (Art. 6 para. 1 a GDPR)

 

Interests of the controller in a balancing of interests (Art. 13 para. 1 d GDPR)

Not applicable.

 

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)

E.g: Human resources service providers, payroll office, providers of the software-supported applicant portal, waste disposal service providers.

 

Transfer to third countries (Art. 13 para. 1 f GDPR)

No transfer to a third country takes place.

 

Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a GDPR)

Erasure of the personal data takes place six months after termination of the application process, taking due account of Section 61b (1) of the German Labour Court Act (ArbGG) in conjunction with Section 15 of the German General Act on Equal Treatment (AGG). If the applicant is accepted in the applicant pool, erasure takes place after 2 years have elapsed if no suitable position can be offered.

In the event of employment, the necessary data will be included in the personnel file. The information on erasure of the relevant data is available under the duty of information on employee data processing.

 

Right to object (Art. 21. para. 1 GDPR)

Insofar as the processing of your data takes place in order to maintain legitimate interests, you have the right to object to this processing at any time using the contact details we have provided if reasons arise from your special situation that conflict with this data processing. We will then terminate this processing unless it serves compelling legitimate interests on our part.

 

Right to withdraw consent (Art. 13. (2) c GDPR)

If you have given your consent to the processing of your data, you have the right to withdraw such consent at any time, effective for the future. The lawfulness of processing until the time of revocation shall not be affected in this regard. For further information, please contact the responsible office under the contact data provided.

 

Right of access, correction, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)

As a data subject you have a right of access, correction and erasure of your data and of restriction of the processing as well as a right of data portability. Please contact the controller in this connection using the contact details provided.

 

Right to lodge a complaint (Art. 13. para. 2 d GDPR)

As a data subject, you can contact the competent state office for data protection and freedom of information for Baden-Württemberg in the event of complaints.

 

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)

The data collected are necessary for performing the application procedure. If the data are not provided, it will not be possible to perform the application procedure.