Privacy policy
II. Details on the processing of personal data
Purpose of processing the personal data
Identification of our visitors
Purpose of processing the personal data
Identification of our visitors and documentation of visits in order to maintain the safety of our buildings, facilities and employees, to ensure the safety of our visitors, to protect our property or the property of our suppliers.
This includes checking access authorisation and comparing the master and visit data specified during the visit with any master and registration data specified during any advance registration.
To identify visitors at entrances to our buildings and/or parts of buildings, we also use real-time video transmission in door intercom systems with video function. The transmission only takes place immediately and shortly after the doorbell has been activated. A video recording does not take place. We expressly refer to the video function in connection with the door intercom system (typically by means of pictograms on the door intercom system).
Categories of personal data processed
Master data,
contact data,
registration data,
visit data,
door camera data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is maintaining the safety of our buildings, facilities and employees, ensuring the safety of our visitors and protecting our property or the property of our suppliers. Our legitimate interest is also ensuring that appropriate data security measures in accordance with Article 32 of the General Data Protection Regulation have been implemented.
Recipient
-
Planning and organisation
Purpose of processing the personal data
Planning and organisation of the details of the visit.
For this purpose, we may carry out advance registration of visitors prior to the visit.
In addition, we take into account any optional information from visitors regarding special catering requirements or other technical or organisational arrangements for the visit, such as barrier-free facilities.
Categories of personal data processed
Master data,
contact data,
registration data,
visit data,
additional data,
communication data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest is the planning and organisation of the details of the visit taking the special wishes and needs of the visitor into account.
Recipient
-
Storage for evidence purposes
Purpose of processing the personal data
Storage for evidence purposes for the possible establishment, exercise or defence of legal claims.
Categories of personal data processed
Master data,
contact data,
registration data,
visit data,
additional data,
communication data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest the establishment, exercise or defence of legal claims.
Recipient
-
Establishment, exercise or defence of legal claims
Purpose of processing the personal data
Establishment, exercise or defence of legal claims.
Categories of personal data processed
Master data,
contact data,
registration data,
visit data,
additional data,
communication data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Balancing of interests (point (f) of Article 6 paragraph 1 of the General Data Protection Regulation). Our legitimate interest the establishment, exercise or defence of legal claims.
Recipient
Courts and/or authorities,
external lawyers.
Cooperation with courts and/or authorities
Purpose of processing the personal data
Cooperation with courts and/or authorities to comply with statutory obligations.
Categories of personal data processed
Master data,
visit data.
Automated decision-making
No automated decision-making takes place.
Legal basis and, where applicable, legitimate interests
Compliance with a legal obligation (point (c) of Article 6 paragraph 1 of the General Data Protection Regulation).
Recipient
Courts and/or authorities.