Info GDPR Article 13
DATA PROTECTION INFORMATION ACCORDING TO ART. 13 GENERAL DATA PROTECTION REGULATION (GDPR)
We, CSS Computer Security Service GmbH, collect and process personal data that we receive from our customers or other data subjects as part of our business relationship. Personal data pertains to all data that can be related to a natural person, e.g. name, address, e-mail addresses.
The collection and processing of data is generally necessary for the establishment and performance of a contract and is, therefore, based on Article 6 (1) lit. b GDPR and Section 26 (1) Federal Data Protection Act (BDSG as amended). If necessary, we also process your data to safeguard legitimate interests within the meaning of Art. 6 (1) Sentence 1 lit. f GDPR, e.g. for data exchange with credit agencies, to determine creditworthiness information, for advertising purposes – provided you have not objected to the use of your data for this purpose – for the assertion of legal claims and defence in legal disputes, for video surveillance to safeguard domiciliary rights or for similar purposes. Finally, the requirement to process your data may also arise due to statutory provisions or comparable regulations. As part of the operation of our emergency call control centre, we are required to record incoming telephone calls for security purposes.
Within the data controller, access to your data is granted to those persons who require it to fulfil our contractual or any existing legal obligations. Furthermore, your data may be passed on to other companies that perform administrative tasks for us or to external service providers and other third parties if this is deemed necessary, in order to fulfil contractual or legal obligations, if you have consented to the transfer of your data or if there is a legitimate interest in the transfer of personal data. External service providers, in particular, have been carefully selected and commissioned and are regularly monitored. The data will be deleted as soon as it is no longer required for the purpose of its processing, and there are no legal obligations to retain it.
As the data subject, you have the following rights vis-à-vis us with regard to your personal data:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- If you have given your consent to the processing of your data, you may revoke this at any time. Any such cancellation shall affect the permissibility of the processing of your personal data after you have declared it to us.
- Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) Sentence 1 lit. f GDPR, you may object to its processing. When exercising such an objection, we shall ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.
You also have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data by us. If you exercise your rights to cancellation, restriction of processing or the right to object to processing, this may make it impossible to establish or execute a contract.
If you have any questions or suggestions, you can contact our data protection officer at datenschutz@css-online.de