Corona Contact Tracking

With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and in which manner is used depends to a large extent on the legal requirements of our federal state.

Purposes and legal bases of the processing

We collect your personal data in order to ensure the protection of our employees against infections that may be registered in the company and, on the other hand, to inform you of this circumstance in the event of infections detected later on in our employees, so that you can take further steps.

Your personal data will be lost on the basis of our legitimate interest in accordance with Art. 6 sec. 1. f GDPR for the identification of contact persons in the acute event of infection in individual cases in connection with SARS-CoV-2. In this case, the legitimate interests are the protection of our employees and the regulation of the infection in our company.

On this basis, we collect the following information: first and last name, full address, a contact option and the time of your visit.

Recipients or categories of recipients

In order to carry out this task, your data may only be passed on to the local health office in the event of infection. We do not transfer it to a third country. In addition, your data will only be passed on if there is a legal obligation to do so or if you have consented to it.

Duration of storage

The data will be kept by us for a period of four weeks and, if necessary.dem competent health department will be handed over in full upon request. After the retention period has expired, the data will be destroyed immediately.

What are your privacy rights?

Every data subject has the right to information under Article 15 GDPR, the right to rectification No under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restrict processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. In the case of the right of access and the right of cancellation, the restrictions under Sections 34 and 35 of the German Data Code (BDSG) apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR).

You can revoke your consent to the processing of personal data at any time to us. This also applies to the revocation of declarations of consent given to us before the General Data Protection Regulation was applied, i.e. before 25 May 2018. Please note that the revocation will only work for the future. Processing carried out prior to revocation is not affected.

Is there an obligation to provide data?

There is no legal or contractual obligation on your part to provide your data. However, you may be denied access to our premises if you are not willing to provide us with this data.

To what extent is there automated decision-making?

Automated decision-making in the form of Art. 22 GDPR is not used.

Is profiling taking place?

We do not process your data with the aim of evaluating certain personal aspects automatically.