Entering the premises
When you visit the above-mentioned property, we collect the following data when you enter: name, reason for visit, date, time of entry and exit, and any additional voluntary information. The processing of this data serves both to protect you (for example, to be able to determine in the event of a fire whether you are still in the building) and to protect the right of access to the building, property and possessions, as well as access control. The legal basis for this is Article 6(1)(f) GDPR, whereby our legitimate interest arises from the stated purposes.
Data processing in the event of the assertion of rights
If you assert your rights under the GDPR or other legal provisions, we process your data to check these claims and, if applicable, fulfil them. The purpose of this processing is to fulfil a legal obligation. The legal basis for this is Article 6(1) sentence 1 point (c) GDPR in conjunction with the respective legal provision from which your right or claim arises.
Data storage / storage period
We store your data both during and after the end of the contract. This is where we inform you how long the data will be stored:
- If you assert your rights under the GDPR, this will result in the creation of communication data (correspondence by email, post, etc.). We store this data for three years. This period begins on 31 December of the calendar year in which we responded to your request. We do this in order to protect our own legitimate interests. This is because we want to be able to prove that we have handled your claims correctly in the event of a dispute. The legal basis is Article 6 (1) sentence 1 (f) GDPR. The period of three years is based on the statute of limitations for claims for damages (Sections 195, 199 (1) of the German Civil Code (BGB)) and, in addition, on the statute of limitations for administrative offences (Section 31 (2) (1) of the German Act against Regulatory Offences (OWiG) in conjunction with Article 83 GDPR).
- If you assert other, non-GDPR rights, communication data will also be created, which we will store for three years. This period begins on 31 December of the calendar year in which we respond to your request. This is how we protect our own legitimate interests. This is because we want to be able to prove that we have handled your claims correctly in the event of a dispute. The legal basis is Article 6(1)(1)(f) of the GDPR. The period of three years is based on the statute of limitations for claims for damages (Sections 195, 199 (1) of the German Civil Code (BGB)).
- When you consent to data processing,
- we store the information that you have given your consent for three years. This period begins as soon as you revoke your consent or the associated purpose expires, whichever occurs earlier. This is how we protect our own legitimate interests. This is because we want to be able to prove that we have handled your claims correctly in the event of a dispute. The legal basis is Article 6 (1) sentence 1 lit. f GDPR. The three-year period is based on the statutes of limitation for claims for damages (Sections 195 and 199 (1) of the German Civil Code (BGB)) and, in addition, on the statutes of limitation under the law governing administrative offences (Section 31 (2) (1) of the German Act against Regulatory Offences (OWiG) in conjunction with Article 83 of the GDPR).
- We store the data that we process based on your consent until you withdraw your consent. The purpose is evident from the respective declaration of consent and the legal basis for this is Article 6(1)(a) of the GDPR.
Deletion of data
We will delete your data as soon as the above-mentioned retention periods have ended. In doing so, we are complying with a legal obligation (Article 5 (1) (a), (e) GDPR). The legal basis is Article 6 (1) sentence 1 (c) GDPR.
Recipient
Recipient within the European Union Within the European Union, your data will be processed by companies (recipients) in the following categories:
- Supplier of room management systems