Principles of data processing at EnglishBusiness AG
As of: 13/11/2019
As part of our reporting requirements pursuant to Art. 12 ff. of the General Data Protection Regulation (GDPR), we are pleased to provide you with the following information on how we protect your data.
Who is responsible for data processing?
Responsible for data protection law is
Nina Zolezzi, Management Board.
Further information on our company, authorised representatives and other contacts can be found in the legal notice on our website: https://www.englishbusiness.com/legal-notice/
What kind of personal data do we process? And for which purposes?
When we receive data from you, we will process it only for the purposes for which we received or collected it.
Data processing for other purposes may only be considered if the necessary legal requirements are met according to Art. 6 (4) GDPR. In such cases, we will naturally comply with any information obligations according to Art. 13 (3) GDPR and Art. 14 (4) GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is in principle Article 6 of the GDPR, insofar as no other specific legislation exists. The following are particularly relevant:
- Consent (Art. 6 (1) (a) GDPR)
- Data processing for the execution of contracts (Art. 6 (1) (b) GDPR)
- Data processing based on a balance of interests (Art. 6 (1) (f) GDPR)
- Data processing for compliance with a legal obligation (Art. 6 (1) (c) GDPR)
If personal data is processed based on your consent, you have the right to revoke this consent at any time with future effect.
If we process data based on a balance of interests, you, as the data subject, have the right to object to the processing of personal data under the provisions of Art. 21 GDPR.
How long will the data be saved?
We process your data only as long as it is needed for the relevant purpose.
Insofar as there are legal storage obligations – e.g. under commercial law or tax law – the relevant personal data will be stored for the duration of the storage obligation. After expiry of the obligation to retain data, it will be determined whether it is needed for further processing. If the need no longer exists, the data will be deleted.
Generally, towards the end of a calendar year we review data in view of our need to continue processing it. Due to the volume of data, this review is carried out with a view to specific data types or processing purposes.
Of course, it is always possible to request information about the personal data we store and to request that the data be deleted or that processing be restricted (see below).
To which recipients is the data forwarded?
Your data is only forwarded to a third party if this is necessary for the performance of our contract with you; if its forwarding is permissible based on the pursuit of balanced interests in the sense of Art. 6 (1) (f) GDPR; if we are legally obliged to pass on the data; or if you have given your consent. An example is the forwarding of your data to the payroll department.
Where is the data processed?
We process your personal data exclusively in data centres in the Federal Republic of Germany.
Your rights as a “data subject”
You have the right to be informed about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask that you understand we may require you to provide evidence that you are the person you claim to be.
Furthermore, you have the right to correct or delete your personal data or to restrict its processing, insofar as you are legally entitled to do so.
In addition, you have the right to object to processing within the scope of legal requirements. You also have a right to data portability within the framework of data protection regulations.
In particular, in accordance with Art. 21 (1) and (2) GDPR, you have a right to object to the processing of your data in connection with a direct advertising campaign, if this is based on the pursuit of balanced interests.
Changes to our data protection regulations
We reserve the right to adapt this privacy policy so that it always meets current legal requirements. We will inform you about this in the customary way.
Our data protection officer
Our company has named a data protection officer. You can reach this person using the contact details below.
Thomas Wanjura
Projekt 29
Phone: 0941-2986930
Email: t.wanjura@projekt29.de
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority about our processing of your personal data. You will find a list of supervisory authorities and their addresses here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
