Data protection information
for LABCO GmbH & LABCO BTC GmbH
Information requirements
Responsible person in the legal sense of the DSGVO
LABCO GmbH
Alfred-Nobel-Strasse 15
27612 Loxstedt-Stotel
Germany
Telephone: +49 4744 – 913 93 – 0
E-mail: info@labco.de
Homepage: www.labco.de
Contact the data protection commissioner
scope & focus Service-Gesellschaft mbH
Leonhardtstrasse 2
30175 Hanover
Germany
Telephone: 0511 / 364 221-0
Fax: 0511 / 364 221-99
Homepage: www.scope-and-focus.com
E-mail: information@scope-and-focus.com
Purpose and legal basis for data processing
Processing of personal data is only permitted if it serves a specific purpose and has a legal basis. The purpose and the relevant legal basis for the specific processing activity shall be communicated to the data subject in a transparent manner at the time of collection.
Change of purpose
The use of personal data for purposes other than the purpose of collection is not permitted.
Your rights as a data subject
Information, correction and deletion
Within the framework of the applicable legal provisions, you have the right to information (Art. 15 DSGVO) at any time about your stored personal data, its origin and recipient and the purpose of the data processing. If applicable, you have the right to correction (Art. 16 DSGVO) of your data. You have the right to have your data deleted, provided that the requirements of Art. 17 DSGVO are met and there are no legal retention periods or other legal reasons to the contrary.
Right to restrict processing
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Right to object to data collection in specific cases and to direct marketing
If data processing is carried out on the basis of Art. 6(1)(e) or (f) DSGVO, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this information. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).
Right to restrict processing
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Right to object to data collection in specific cases and to direct marketing
If data processing is carried out on the basis of Art. 6(1)(e) or (f) DSGVO, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this information. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling if it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Art. 21 (2) DSGVO).
Right to data portability
Pursuant to Art. 20 DSGVO, you have the right to have data that we process on the basis of your consent or in fulfilment of a contract, to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically practicable.
Revocation of your consent to data processing
You can informally revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to complain to the supervisory authority
In the event of breaches of the GDPR, you have the right to complain to the competent supervisory authority in accordance with Article 77 of the GDPR. The right of complaint is without prejudice to other administrative or judicial remedies. You can view the competent supervisory authority at this website:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
However, you may submit your complaint to any authority. This applies irrespective of any rules of jurisdiction.
This information corresponds to the legal status as of 25 May 2018. We reserve the right to adapt our data protection information to changes in regulations or case law.
Information for ‘Enquiries by telephone, e-mail and fax’
according to Art. 13 DSGVO
Purpose of processing
Personal data is processed in order to be able to answer customer and prospective customer enquiries.
Legal basis
- 6 para. 1 lit. b DSGVO
The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures which are carried out at the request of the data subject.
- 6 para. 1 lit. f DSGVO
Processing is necessary to protect the legitimate interests of the controller.
Legitimate interest
The data controller has a legitimate interest in the effective processing of customer and
enquiries from interested parties.
Categories of recipients
Processors (category)
- Cloud services
Transfer to third countries
Third country or international organisation
USA
Legal basis in data transfer
Standard data protection clauses
Storage period
- Until the end of the purpose or revocation.
Details for ” Execution of e-mail advertising”
according to Art. 13 DSGVO
Purpose of the processing
Use of customer data to send advertising on products and services by e-mail.
Legal basis
- 6 para. 1 lit. f DSGVO
The processing is necessary to protect the legitimate interests of the controller.
Legitimate interest
The controller has a legitimate interest in advertising to existing customers.
Storage period
- Deletion after revocation
Information for ‘Execution of customer satisfaction surveys’
Purpose of the processing
- Personal data is processed to conduct customer satisfaction surveys with current customers.
Legal basis
- 6 para. 1 lit. b DSGVO
The processing of personal data is based on the consent of the data subject.
Recipient
easyfeedback GmbH
Storage period
Personal data will be deleted after the respective satisfaction survey has been carried out and evaluated.
Information for ‘Execution of the application procedure’
according to Art. 13 and 14 DSGVO
Purpose of the processing
Selection of suitable applicants for recruitment, storage of applicant data
Legal basis
- 6 para. 1 lit. b DSGVO
Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures which are carried out at the request of the data subject.
- 26 para.1 BDSG – Establishment of the employment relationship.
- 9 para. 2 lit. b DSGVO
Storage period
- Application documents after consent to storage in the applicant pool for 12 months or until revocation of storage, permanently after employment transfer to personnel file.
Obligation to provide data
Obligation of the data subject
Consequences of not providing data
No employment relationship possible
In this processing activity, your personal data was collected from another source, therefore we additionally inform you according to Art. 14 DSGVO:
Other source(s)
Your personal data have not been collected directly from you, but from this third party:
Employment Agency,
Personnel service provider
Data subjects and data categories
Personal data have been collected. You will find the relevant information in the data subject group that applies to you:
As applicant
Profession/Education
Academic degree, education, profession, job title, previous employers, further education, references, school attendance, certificates, testimonials
Demographics
Age groups, marital status, gender
Contact (private)
Address, e-mail address, country, telephone number (landline), telephone number (mobile)
Person
Salutation, birthday, surname, language, title, first name
Sensitive data
Health data
Data for ‘Keeping an applicant pool’
according to Art. 13 DSGVO
Purpose of processing
Storage of applicant data in an applicant pool for later selection.
Legal basis
- 6 para. 1 lit. a DSGVO
The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes.
- 9 para. 2 lit. a DSGVO
Storage period
- Application documents after consent to storage in the applicant pool 12 months, after recruitment
- Transfer to personnel file permanently
Obligation to provide data
Obligation of the data subject
Consequences of not providing data
Applicant is not included in the applicant pool or is removed. An employment contract cannot be concluded.
Information for “Provision of online services (web hosting)”
according to Art. 13 DSGVO
Purpose of the processing
Personal data are processed in order to provide a website (web hosting).
Legal basis
- 6 para. 1 lit. f DSGVO
Processing is necessary to protect the legitimate interests of the controller.
Legitimate interest
The controller has a legitimate interest in the error-free hosting of the website.
Categories of recipients
Processor (category)
- Hosting provider
Storage period
- If a predefined storage volume is exceeded, the log files are deleted after 1 year at the latest.
Details for “Collection and storage of data via contact form”
according to Art. 13 DSGVO
Purpose of processing
Personal data is collected from website visitors in a contact form.
Legal basis
- 6 para. 1 lit. a DSGVO
The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes.
Categories of recipients
Processors (category)
- Hosting provider – website maintenance
Storage period
- Until the purpose or consent is terminated.