According to Art. 4 No. 1 GDPR, your personal data includes all information that relates or can be related to your person.
The following information informs you about the processing of your data at TSO-DATA GmbH and TSO-DATA Nürnberg GmbH, which is necessary for the fulfillment of your request, an order or contract and is required by law.
1. name and contact details of the responsible body
TSO-DATA GmbH
Preußenweg 10
49076 Osnabrück
Deutschland
Tel.: +49 541-1395-0
E-Mail: info[at]tso[dot]de
Authorized to represent: Managing Director Dipl.-Kfm (FH) Dirk Frommeyer
TSO-DATA Nürnberg GmbH
Wiesentalstr. 40
90149 Nürnberg
Deutschland
Telefonnummer: +49 911-97559060
E-Mail: nuernberg[at]tso[dot]de
Authorized to represent: Rainer Fischer
2. Our data protection teams
Our data protection team with our external data protection officers, Dr. Hans Daldrop, at datenschutz[at]tso[dot]de for TSO-DATA GmbH and Dr. Marion Herrmann at datenschutz-nbg[at]tso[dot]de for TSO-DATA Nürnberg GmbH, are available to answer your questions.
3. Collection and storage of personal data; type, purpose and use
3.1 Data processing in the context of the business partner relationship
We process the data that you have transmitted to us in connection with your business contact or contract, that we have collected in this context or that has arisen in the context of the business relationship.
3.1.1 Purpose of data processing
TSO-DATA processes and uses your personal data,
3.1.2 Legal basis of the processing
The processing of personal data takes place on the occasion of your request or your order (customer) with us or your assignment (supplier, service provider, freelancer) by us and is necessary for the purposes mentioned for the processing and for the fulfillment of obligations arising from our business relationship. The legal basis for this is Art. 6 para. 1 b) GDPR.
A legitimate interest may also arise from internal organizational and administrative purposes, for the protection of the company's facilities, equipment and assets, as well as data processing systems and data. Processing of your data is permitted here if the protection of your interests, fundamental rights and freedoms does not prevail.
Should the data be required for legal prosecution after the conclusion of the business contact, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 (1f) GDPR. Our interest then lies in the assertion of or defense against claims.
In individual cases, we may also obtain your consent to the processing or transfer of your data. In these cases, your consent is voluntary and can be revoked by you at any time in the future, unless otherwise agreed. You will not suffer any disadvantages if you do not give your consent or if you withdraw your consent at a later date. The legal basis for this is Art. 6 para. 1a GDPR.
Overall, the legal basis for this is Art. 6 para. 1a and 1b GDPR, the fulfillment of contractual obligations, Art. 6 para. 1f GDPR, in the context of the balancing of interests and due to legal requirements pursuant to Art. 6 para. 1c GDPR.
3.1.3 Recipients of your data
The recipients of your data are the internal departments involved in the organization and processing of business partner relationships, in particular the departments with which you work in the context of business contact or which are responsible for your concerns.
3.1.4 Duration of storage
The personal data collected will be stored until the end of the statutory retention period (6 or 10 years after the end of the calendar year in which the business relationship was terminated) and then deleted. By way of exception, this does not apply if we are obliged to store the data for a longer period due to tax or commercial law retention obligations (in accordance with the German Commercial Code (HGB), German Criminal Code (StGB) or German Fiscal Code (AO)) or if you have consented to storage beyond this period.
3.2 Data processing in the context of the service/freelancer relationship
In addition to the information listed under point 3.1, we also process data from service providers/freelancers as follows:
3.2.1 Data on your CV or skills
In addition to the data listed under point 3.1, we collect information on your qualifications, your professional experience and your portfolio for use in projects, both for our own and for client projects. As a rule, you provide us with this data yourself via your CV or skill card. If necessary, we supplement the data with the projects you have completed with us.
3.2.2 Purpose of data processing
3.2.3 Legal basis of the processing
The legal basis is on the one hand Art. 6, 1b GDPR the contract with you or with our customers, on the other hand Art. 6, 1f GDPR the legitimate interest of the company to use you in the best possible way.
3.2.4 Recipients of your data
Recipients of your data are internal departments involved in the organization and processing of projects and orders, in particular the departments with which you work in the context of business contact or which are responsible for your concerns.
External recipients of your data may be customers for whose projects you are or could be deployed.
3.2.5 Duration of storage
The data is stored for 3 years after collection and deleted in the 4th year if you have not been deployed. If you have been deployed, the data is relevant to the business and is generally stored for 6 years after your last deployment and deleted in the 7th year. Exceptions are possible if there are legal obligations or obligations to our customers that require longer storage. In this case, we will inform you on a project or order-related basis.
4. Disclosure of data to third parties
Your personal data will not be transferred to third parties. Exceptions to this only apply if this is necessary for the processing of contractual relationships with you. This includes in particular the transfer to service providers commissioned by us (so-called processors) or other third parties whose activities are necessary for the execution of the contract (e.g. shipping companies, banks). The data passed on may only be used by the third parties for the stated purposes.
5. Your rights as a data subject
As a person affected by data processing, you have various rights:
Right of revocation: You can revoke your consent to us at any time. The data processing based on the revoked consent may then no longer be continued in the future.
Right to information: You can request information about your personal data processed by us. This applies in particular to the purposes of the data processing, the categories of personal data, the categories of recipients, if applicable, the storage period, the origin of your data, if applicable, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.
Right to rectification: You can request the rectification of incorrect or the completion of your personal data stored by us.
Right to erasure: You may request the erasure of your personal data stored by us, unless its processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
Right to restriction of processing: You can request the restriction of the processing of your personal data if the accuracy of the data is disputed by you or if the processing of the data is unlawful but you refuse to delete it. You also have this right if we no longer need the data, but you need it to assert, exercise or defend legal claims. You also have this right if you have objected to the processing of your personal data.
Right to lodge a complaint (complaints office): You have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority, e.g. if you believe that we are processing your personal data unlawfully.
Our responsible data protection supervisory authorities are
for TSO-DATA GmbH:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
Telefon: +49 (0) 511 120-4500
E-Mail: poststelle[at]lfd.niedersachsen[dot]de
for TSO-DATA Nürnberg GmbH:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
Telefon: +49 (0) 981 180093-0
E-Mail: poststelle[at]lda.bayern[dot]de
However, you can also contact any other supervisory authority for data protection.
6. Your right to object
If we process your personal data on the basis of consent or a legitimate interest, you have the right to object to this processing.
The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR).
If you wish to exercise your right to object, a notification in text form is sufficient. You can therefore write to us or contact us by email. You can find our contact details under point 1 of this privacy policy.
Status: October 2024
