Privacy Notes according to Art. 13, 14 GDPR
With the following privacy notes, we would like to inform you about how we handle your personal data in detail. For better legibility, we try not to use specific genders. Therefore, please note that the words they/them are intended to mean all genders.
A description of our data processing is available on our website.
General information
– applicable for all of the following descriptions of data processing
1. Name and contact data of the controller
Research Institute of Automotive Engineering and Vehicle Engines Stuttgart
Pfaffenwaldring 12
70569 Stuttgart
Tel.: +49 711 685-65888
e-mail: info@fkfs.de
2. Contact data of the Data Protection Officer
DataCo GmbH
Dachauer Str. 65
80335 München
e-mail: datenschutz@dataguard.de
1. Purpose and legal basis for processing
Purpose of the processing:
- Information about FKFS events
- Acquiring participants
- Initial contact
- Request for submission of lecture suggestions
- Informing those involved in the event about procedures and the program
- Correspondence
- Contract fulfillment / lecture arrangements
- Sending Christmas greetings (with consent)
- Entry in the database (legitimate interest)
- Customer acquisition
- Information about FKFS projects, offers and services
Legal basis for processing:
Your data will be processed for the purposes of setting up or fulfillment of a contract, in accordance with point (b) S.1 of Article 6(1) of the GDPR.
Your data will be processed with your consent, e.g. for sending newsletters, in accordance with point (a) S.1 of Article 6(1) of the GDPR.
Your data may also be processed if necessary for our legitimate interests, in accordance with point (f) S.1 of Article 6(1) of the GDPR.
2. Receivers or categories of receivers of the personal data
Within our organization, the following positions and departments receive the personal data they need for the above-stated purposes.
- Marketing department
- Management board
- Technical departments
In addition, we sometimes make use of various service providers and will transmit your personal data to other trustworthy recipients. These could be, for example:
- Commissioned data processors
- Event agencies
- Data protection officers
- IT service providers
3. Transfer of personal data to a third country
There are no plans to transmit your personal data to a third country / an international organization.
4. Duration of the storage of your personal data
After the controller has collected your data, it will be stored for as long as is necessary to comply with the legal retention periods as per section 257 of the German Commercial Code (HGB) and section 147 of the German fiscal code (AO) for the fulfillment of the relevant task, (i.e. also for the organization of future events).
5. Rights of the data subject
You may exercise the following rights as laid down in the GDPR:
If your personal data is processed, you have the right to obtain access to your stored personal data, from the controller (Art. 15 GDPR).
If the personal data being processed is incorrect, you have the right to rectification (Art. 16 GDPR).
Where the legal conditions are fulfilled, you can demand the deletion or restriction of processing of your data. You can also formally object to the processing of your data. (Art. 17, 18 and 21 GDPR).
If you have given your consent to the processing of your data – or a contract for the data processing exists and the data processing is carried out by automated means – you also have the right to data portability (Art. 20 GDPR).
You continue to have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
6. The right to revoke consent
If you have given permission for your data to be processed by the responsible persons via an appropriate declaration, you can revoke this permission at any time for the future. This shall not affect the lawfulness of the processing based on consent before its withdrawal.
1. Purpose and legal basis for processing
Purpose of the processing:
Your personal data will be collected as part of our business relationship for the setting up and fulfillment of our contractual obligations towards our business partners, for example, for:
- setting up a contract
- contract fulfillment
- correspondence
- invoicing/administration
- entry in the customer and supplier database (legitimate interest)
- credit screening (legitimate interest)
Legal basis for processing:
Your data will be processed for the purposes of setting up or fulfillment of a contract, in accordance with point (b) S.1 of Article 6(1) of the GDPR.
Your data will be processed in order to comply with the legal obligations resulting from the business relationship, in accordance with point (c) of Article 6(1) of the GDPR.
Your data will be processed if necessary for our legitimate interests, in accordance with point (f) of Article 6(1) of the GDPR. We have a legitimate interest in processing the data for conducting the business relationship, for example, to carry out credit checks.
2. Receivers or categories of receivers of the personal data
Within our organization, the following positions and departments receive the personal data they need for the above-stated purposes.
- Management board
- Technical departments
In addition, we sometimes make use of various service providers and will transmit your personal data to other trustworthy recipients. These could be, for example:
- Commissioned data processors
- IT service providers
- Government authorities
- Tax advisors
- Data protection officers
- Other business partners
3. Transfer of personal data to a third country
There are no plans to transmit your personal data to a third country / an international organization.
4. Duration of the storage of your personal data
After the controller has collected your data, it will be stored for as long as is necessary to comply with the legal retention periods as per section 257 of the German Commercial Code (HGB) and section 147 of the German fiscal code (AO) for the fulfillment of the relevant task.
5. Rights of the data subject
You may exercise the following rights as laid down in the GDPR:
If your personal data is processed, you have the right to obtain access to your stored personal data, from the controller (Art. 15 GDPR).
If the personal data being processed is incorrect, you have the right to rectification (Art. 16 GDPR).
Where the legal conditions are fulfilled, you can demand the deletion or restriction of processing of your data. You can also formally object to the processing of your data. (Art. 17, 18 and 21 GDPR).
If you have given your consent to the processing of your data – or a contract for the data processing exists and the data processing is carried out by automated means – you also have the right to data portability (Art. 20 GDPR).
You continue to have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
1. Purpose and legal basis for processing
Purpose of the processing:
We process the data you provide us with to conduct and administrate the application process.
In particular, we will process your personal data:
- regarding your identity (such as names and your contact data) and
- regarding your qualifications (in education and professionally).
If you are employed by us, we will process additional data
- about your job and your presence at our organization,
- to document your employment relationship (such as your personnel file),
- for settling your expenses and your salary (such as your bank details, your expenses account and your salary calculation),
- to fulfill reporting obligations with regard to the employment relationship (such as your health insurance, your social security number and your tax identification number) as well as
- regarding your currently-relevant tax classifications for your salary and church tax; which we request from the tax authorities upon disclosure of your tax identification number.
Legal basis for processing:
Here we rely on the following legal bases:
- point (a) of Article 6(1) of the GDPR; section 26(2) of the BDSG (German Federal Data Protection Act); and point (a) of Article 9(2) of the GDPR, in as far as we rely on your consent
- section 26(1) of the BDSG (German Federal Data Protection Act), in as far as we process your data for the purposes of an employment relationship,
- point (c) of Article 6(1) of the GDPR; section 26(3) of the BDSG (German Federal Data Protection Act); in as far as we process your data in order to fulfill our legal obligations,
- point (d) of Article 6(1) of the GDPR; point (c) of Article 9(2) of the GDPR, in as far as we process your data to protect the vital interests of natural persons,
- point (f) of Article 6(1) of the GDPR; section 26(3) of the BDSG (German Federal Data Protection Act) for the safeguarding of our legitimate interests or the legitimate interests of a third party – in as far as these do not override your interests, fundamental rights and freedoms,
- point (e) of Article 9(2) of the GDPR, in as far as you yourself have manifestly made your own especially-sensitive personal data public,
- point (h) of Article 9(2) of the GDPR, in as far as the processing of special categories of personal data is required for the purposes of preventative medicine, occupational medicine, or for the assessment of the working capacity of the employee.
2. Receivers or categories of receivers of the personal data
Within our organization, the following positions and departments receive the personal data they need for the above-stated purposes.
- Employees in the personnel department
- Management board
- Department heads
- Workers' Council
In addition, we sometimes make use of various service providers and will transmit your personal data to other trustworthy recipients. These could be, for example:
- Tax advisors
- Data protection officers
- Government authorities
- Solicitors
- Courts of law
- IT service providers
- Commissioned data processors
3. Transfer of personal data to a third country
Your personal data will not be transmitted to a third country/an international organization.
4. Duration of the storage of your personal data
We process and store your personal data for as long as it is required to fulfill our contractual and legal obligations, or is necessary for the establishment, exercise or defense of legal claims.
If the data are no longer necessary for this, they will be deleted at regular intervals unless their temporary further processing is necessary for legal reasons, such as complying with legal retention periods.
6. The right to revoke consent
If you have given permission for your data to be processed by the controller via an appropriate declaration, you can revoke this permission at any time for the future by sending an e-mail to bewerbung@fkfs.de. This shall not affect the lawfulness of the processing based on consent before its withdrawal.
7. Obligation to provide data
Such an obligation exists in particular with regard to the data required to fulfill legal obligations concerning income tax and social security, which are associated with the employment relationship (e.g. your tax ID and your health insurance).