Information for Visitors
Our handling of your data and your rights – Information according to Art. 13 and Art. 21 of the EU General Data Protection Regulation (GDPR)
Version: 2021-06-16
With the following information, we would like to give you an overview on the processing of your personal data by us and your rights under GDPR resulting from the processing.
1 Description of the processing activity
The processing involves the personal data of visitors at b+m surface systems GmbH.
2 Name and contact details of the responsible party
The party responsible for data processing is
b+m surface systems GmbH
Meininger Weg 10, 36132 Eiterfeld, Germany
Telephone: +49 6672 92920
E-Mail: info@bm-systems.com
Authorized Managing Director: Sebastian Merz
Registry court and registration number: Fulda district court, HRB 3358
3 Contact details of the data protection officer
The appointed external data protection officer is
TOSIT GmbH
Ludwig-Erhard-Straße 2, 36088 Hünfeld, Germany
Telephone: +49 6652 96976100
E-Mail: dsb@tosit.eu
4 Purposes and legal bases for the processing
4.1 Purposes of Data Processing
The documentation of visitors to b+m surface systems GmbH, compliance to safety regulations (the wearing of visitor badges, occupational safety regulations, non-disclosure agreements) as well as to comply with EU counterterrorism regulations.
4.2 Personal Data that are subject to processing
Given name, surname, address, personal communication data, license plate number, video surveillance recordings.
4.3 Legal bases for data processing
The processing of the personal data of our visitors and the collection of data recorded by our video surveillance system take place on the legal basis of Art. 6 para. 1 lit. f GDPR for the preservation of the legitimate interests of b+m surface systems GmbH as well as on the legal basis of Art. 6 para. 1 lit. c GDPR in connection with the legal sanction lists for the fulfillment of a legal obligation.
5 Recipients or categories of recipients of the personal data
No personal data are disclosed to any third party unless these personal data are intended or required to be disclosed.
A justifiable reason could involve the disclosure to a public authority, e.g. an investigating agency.
6 Duration of storage of personal data
The personal data of visitors are erased as soon as they have fulfilled their purpose.
The storage period for visitor forms in the context of safety regulation compliance is two years.
The storage period for data recorded by the video surveillance system of b+m surface systems GmbH is typically six days.
7 Data subjects' rights
You have the following rights concerning your personal data under the GDPR:
You have the right to request access to the saved personal data concerning you (Art. 15 GDPR).
You have the right to have inaccurate personal data concerning you that were processed rectified (Art. 16 GDPR).
Provided the statutory prerequisits are satisfied, you can request the erasure or restriction of the processing of your personal data (Art. 17 and 18 GDPR).
On grounds relating your particular situation, you can object to the processing of the personal data concerning you by b+m surface systems GmbH (Art. 21 GDPR). Provided the legal prerequisits are satisfied, b+m surface systems GmbH shall refrain from the further processing of your personal data.
If you have consented to the data processing or if a contract exists concerning data processing and if data processing is carried out with the aid of automated means, you may have a right to data portability (Art. 20 GDPR).
Since you have consented to the processing of personal data by signing a corresponding declaration, you have a right to withdraw your consent at any time for the future processing of personal data. Withdrawing your consent does not affect the lawfulness of prior processing with consent before its withdrawal.
Should you exercise your rights mentioned above, we will examine whether the statutory prerequisits for this have been met.
You also have a right to lodge a complaint with the Hessian Commissioner for Data Protection.
Der Hessische Beauftragte für den Datenschutz und die Informationsfreiheit (The Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 3163, 65021 Wiesbaden, Germany
Telephone: +49 611 14080
E-Mail: poststelle@datenschutz.hessen.de