Mandatory notification under Article 13 DS-GVO (=GDPR)

> Mandatory notification for employees > Mandatory notification for applicants

§ 1 A person responsible according to Art. 4 clause 7, DS-GVO is:

NBZ-Nano-Bioanalytik-Zentrum Münster GmbH
Mendelstr. 17
D-48149 Münster
Telefon: +49 (0)251 / 384503-30
E-Mail: info@nano-bioanalytik-zentrum.de

If you would like to receive further information on the subject of data protection and about our handling of your personal data as well as regarding your rights, please use the above mentioned contact opportunities:

§ 2 Your rights

You have with respect to us the following rights regarding the relevant personal data:

Right to obtain information
Right to correction or deletion,
Right to limiting the processing,
Right to objection against the processing,
Right to data portability.

In addition, you have the right to file a complaint at a data protection authority about the processing of your personal data by us.

§ 3 Withdrawal of a consent

If you have given consent for processing of your data, you can withdraw it at any time. Such a withdrawal has an effect on the admissibility of the processing of your personal data after you have made it known to us. The withdrawal can be sent to us by using the contact information provided above.

§ 4 Objection against the processing of your data

You have the right to object at any time to the processing of your personal data insofar as we base the processing on a balancing of interests or if the processing of data is necessary for fulfilling a specific function which is in the public interest or is conducted on behalf of the Law, and has been transferred to ourselves. When using such an objection, we ask you to specify the grounds why we should not process your personal data in the way as we do it. In the case of your substantiated objection, we check the factual situation and start or adapt the data processing correspondingly, unless we can prove the existence of mandatory legitimate grounds for the processing, which outweigh your interests, rights and freedoms of action, or when the processing serves for the assertion, exercising or defending of legal claims. You have the right to object at any time to the processing of your personal data for direct advertising purposes. When you object to the processing of your personal data for direct advertising purposes, we will not use your personal data for these purposes anymore. You can inform us about your objection by using the contact data provided above.

§ 5 Processing tasks

(1) We process your personal data to the extent that this is necessary in order to establish, to execute or to terminate any agreement with yourselves. Under these circumstances, the legal basis for such processing is Article 6, paragraph 1, clause (b), GDPR. You can obtain further information regarding individual processing activities, consistent with your specific definitions and instances of legal basis, from the overview concerning processing activities. At the end of these explanatory notes, you will find a detailed overview of the processing activities.

(2) In addition to the purpose of fulfilment of the agreement, we also process personal data as defined in Article 6, paragraph 1, clause (f), GDPR, to the extent that such processing is required either to protect our own justified interests or those of a third party, and provided that this is not outweighed by your own interests or basic rights and basic freedoms, where such rights & freedoms require that personal data should be protected. An example of such a justified interest would be where legal claims are being substantiated, or where defence is being applied in legal disputes, or – again – in connection with specific response to general enquiries.

(3) We also process personal data in accordance with Article 6, paragraph 1, clause (c), GDPR, where this is required in order to fulfil statutory obligations incumbent upon ourselves as a company. The purposes of processing include, for example, commercial and tax-related custodianship obligations as laid down in § 257 of the commercial statute book (German abbreviation = HGB) and in § 147 of tax regulations (German abbreviation = (AO)).

(4) The sharing of personal data is neither a legal nor a contractual requirement, but it may be needed as the prerequisite for either negotiating or implementing an agreement. There is no obligation for the sharing of data. However, the decision not to share information may lead to the outcome that an agreement cannot be executed.

§ 6 Recipients

The recipients of personal data may be as follows:

tax consultants/auditors
providers in connection with taxation and book-keeping
telephony providers
banks
tax office
customers
insurance companies
lead partners
funding bodies
public authorities and offices (Courts, governmental offices, job centres etc)
software and IT service providers
providers of dispatch services

§ 7 Duration of storage

(1) We store your personal data to the extent required for the duration of our contractual relationship. This also includes the initiation and processing of the agreement, including guarantee periods that are in place. Personal data is anonymized wherever this is already possible in the 1st instance.

(2) The duration of storage of data is also appropriately governed in accordance with tax-related custodianship obligations arising from the commercial statute book and from tax regulations.

(3) Inasmuch as we are processing your data on the basis of approval given, we will continue to store your data until the approval is withdrawn.

§ 8 Obligation to share

The sharing of personal data is neither a legal nor a contractual requirement, but it may be needed as the prerequisite for negotiating an agreement. There is no obligation for the sharing of data. However, the decision not to share information may lead to the outcome that an agreement or a contract of employment cannot be executed.

Overview of processing activities

§ 1 Management of source data/contact management

Purposes of processing: logging of source data for processing of transactions in book-keeping.
Legal basis: Article 6, paragraph 1, clause (b), GDPR.

§ 2 Processing of agreements (in general)

Purposes of processing: initiation, implementation and processing of agreements with trading partners, with suppliers and with providers
Legal basis: Article 6, paragraph 1, clause (b), GDPR.
Recipients: service providers for tax processing and book-keeping, tax consultants, auditors, IT providers, banks, transportation providers

§ 3 Financial accounting

Purposes of processing: logging of transactions in book-keeping; booking of sales invoices and purchase invoices
Legal basis: Article 6, paragraph 1, clause (b), GDPR.
Recipients: service providers for tax processing and book-keeping, tax consultants, auditors, banks, IT providers, transportation providers and payment collection providers

§ 4 Lessee data management

Purposes of processing: logging and management of lessees’ data
Legal basis: Article 6, paragraph 1, clause (b), GDPR.
Recipients: service providers for tax processing and book-keeping, tax consultants, auditors, IT providers – where used: telephony providers, local car-sharing providers

§ 5 Managing of enquiries

Purposes of processing: expert handling of enquiries
(by telephone, by email and/or by post)
Legal basis: Article 6, paragraph 1, clause (b), GDPR and Article 6, paragraph 1, clause (f), GDPR
Recipients: software providers and IT providers