Privacy policy
PRINCIPLE
TUBEX Packaging GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
In general, it is possible to use our website without providing personal data. If personal data are collected on our sites (for example name, address or e-mail addresses), this will be on a voluntary basis as far as possible. These data will not be forwarded to third parties without your express consent.
We draw attention to the fact that data transfer in the Internet (e.g. when communicating by e-mail) can involve security loopholes. Absolute protection of data against access by third parties is not possible.
NAME AND ADDRESS OF THE CONTROLLER
The controller, as per the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other data privacy provisions, is:
TUBEX Packaging GmbH
Fabrikstr. 1
72414 Rangendingen
Germany
Tel.: +49 711 470408-0
Fax: +49 711 470408-79
E-mail: info@tubex-packaging.com
Cookies
To make visiting our website more attractive, and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data and IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified time period, which may differ depending on the cookie.
In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the execution of the contract, or in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
CONSENT TO USERCENTRICS
This website uses consent technology from Usercentrics to obtain your consent to the storage of specific cookies on your terminal device, or to the use of specific technologies, and to document this in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany, website: https://usercentrics.com/ (hereinafter “Usercentrics”).
When you enter our website, the following personal data are transferred to Usercentrics:
- Your consent(s) or revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your terminal device
- Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent(s) or revocation(s) to you. The data collected in this way are stored until you request us to delete them, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Usercentrics is used to obtain the legally-required consent for the use of specific technologies. The legal basis for this is Art. 6 (1) lit. c GDPR.
Order processing
We have concluded an Order Processing Contract in accordance with Art. 28 GDPR with the provider named above. This contract, required by data protection law, ensures that this provider processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
SERVER LOG FILES
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- Amount of data sent (in bytes)
- Your IP address (if applicable, in anonymised form)
These data cannot be assigned to specific persons. These data are not merged with other data sources. The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are not passed on or used in any other way. We reserve the right to check these data retrospectively if we become aware of specific indications of unlawful use.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually whether to accept them or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer:
https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Firefox:
https://support.mozilla.org/en-US/questions/1312733
Chrome:
https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Safari:
https://support.apple.com/de-gb/guide/safari/sfri11471/mac
Opera:
https://help.opera.com/en/?s=cookies&product=latest
Please note: If you do not accept cookies, the functionality of our website may be limited.
ANALYSIS TOOLS AND ADVERTISING
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. Google may combine these data in a profile that is assigned to the respective user or their end device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both website and advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, please visit: https://privacy.google.com/businesses/controllerterms/mccs/
IP anonymisation
We have activated the IP anonymisation function on this website. As a result, within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, your IP address is shortened by Google before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
Order processing
We have concluded an order-processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics in Google Analytics
This website uses the “Demographics and Interests” function of Google Analytics in order to be able to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender and interests of site visitors. These data come from interest-based advertising from Google as well as visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown under “Objection to data collection”.
Google Analytics Ecommerce Tracking
This website uses the “Ecommerce Tracking” function of Google Analytics. With the help of this function, the website operator can analyse the purchasing behaviour of website visitors to improve online marketing campaigns. This involves recording information such as orders placed, average order values, shipping costs, and the time from viewing to purchasing a product. These data can be summarised by Google under a transaction ID that is assigned to the respective user or their device.
Plugins and Tools
Google Web Fonts
This site uses so-called Web Fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required Web Fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google’s servers. This enables Google to know that your IP address has been used to access this website. The use of Google Web Fonts is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
If your browser does not support Web Fonts, a standard font in your computer is used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en
MAKING CONTACT
Enquiries via e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all associated personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We will not forward these data without your consent.
The processing of these data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) lit. a GDPR) and/or on our legitimate interests (Art. 6 (1) lit. f GDPR), as we have a legitimate interest in effectively processing the enquiries addressed to us.
The data you send to us via contact requests will remain with us until you request us to delete them, revoke your consent to store them, or if the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
DATA PROCESSING FOR ORDER HANDLING
To process your order, we work with service providers who support us, in whole or in part, in the fulfilment of concluded contracts. If you commission us to provide a service or send you goods, your personal data will only be used without your separate consent to the extent that it is necessary for the provision of the service or the fulfilment of the contract. This includes, in particular, the transfer of your data to transport companies, credit companies or other service providers used to provide the service or fulfil the contract.
The personal data collected by us will be passed on to the transport company commissioned with the delivery, for example, as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.
We disclose customer accounts and personal information about customers when we are required to do so by law, or when such disclosure is necessary to enforce our terms and conditions or other agreements, or to protect our rights and the rights of our customers and those of third parties.
DATA SUBJECT RIGHTS
The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
- Right of access by the data subject, as per Art. 15 GDPR: In particular, you have the right to be informed about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you. You also have the right to be informed about which guarantees exist in accordance with Art. 46 of the GDPR if your data are transferred to third countries.
- Right to rectification, as per Art. 16 GDPR: You have the right to have any incorrect data relating to you corrected without delay, and/or to have any incomplete data that are stored by us completed.
- Right to erasure, as per Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
- Right to restriction of processing, as per Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after the purpose of these data has been achieved, or if you have lodged an objection on the grounds of your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
- Right to be notified, as per Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed, of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability, as per Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller, insofar as this is technically feasible.
- Right to withdraw consent, as per Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time, with effect for the future. In the event of revocation, we will immediately delete the data concerned unless there is a legal basis for further processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
- Right to lodge a complaint, as per Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
SSL ENCRYPTION
For security reasons, and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser header. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
RIGHT TO ACCESS, ERASURE, BLOCKING
RIGHT TO ACCESS, ERASURE, BLOCKING
At any time, you have the right to receive free information concerning the personal data stored on you, their origin and recipients, and the purpose of the data processing, as well as a right to correction, blocking or erasure of these data. You can contact us at any time concerning this and other questions on the subject of personal data, via the address stated in the Legal Notice.
If, after reading this Privacy Policy, you still have questions, or if you have any questions regarding the processing of your personal data, you can contact our Data Protection Officer, who is also available in the event of information requests, suggestions or complaints.
Data Protection Officer:
Steffen Wacker
E-mail: datenschutz@tubex.de
DATA SECURITY
We maintain a wide range of security measures in accordance with Art. 32 GDPR (technical and organisational measures) to protect your personal data. If you contact us by e-mail, we would like to point out that the confidentiality of the information transmitted is not guaranteed. Under certain circumstances, the content of the e-mails can be viewed by third parties. We therefore recommend that you send us confidential information by post.
OBJECTION TO ADVERTISING E-MAILS
Use of contact data, published in the context of the mandatory Legal Notice, for the sending of advertising and information material not expressly requested, is hereby objected to. The operators of the sites expressly reserve the right to take legal steps in the event of the unsolicited sending of advertising information, for example via spam e-mails.
RIGHT TO OBJECT
If we process your personal data within the framework of a balancing of interests on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future, on grounds arising from your particular situation.
If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.
If your personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You can exercise the objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
STORAGE DURATION OF PERSONAL DATA
The storage duration of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After the retention period ends, the corresponding data will be routinely deleted if they are no longer required for the fulfilment of the contract or the initiation of the contract and/or there is no further justified interest on our part in continuing to store them.
UPDATES TO THE PRIVACY POLICY
If TUBEX Packaging GmbH introduces new products or services, changes Internet procedures, or if Internet and IT security technology develops further, this Privacy Policy will be updated. We will publish any such changes here.
Information obligations according to Art. 13 and 14 of the EU-GDPR: General data processing
Who is responsible for data processing?
The controller within the meaning of data protection law is:
TUBEX GmbH
Fabrikstrasse 1
72414 Rangendingen
Tel.: +49 7471 990-0
E-Mail: info@tubex.de
Contact details of the data protection officer:
Steffen Wacker
datenschutz@tubex.de
Which of your data do we process? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.
Data that is not collected directly from the data subject.
We not only process personal data that we receive directly from you, but also use our own research and data from third parties to supplement and validate it.
In accordance with Art. 14 GDPR, we would like to inform you below about the source and categories of data that we use when researching or collecting data from third parties.
The legal basis for this is the principle of “accuracy” pursuant to Art. 5 para. 1 lit. d GDPR and the protection of our legitimate interests for the purpose of verifying and updating our database pursuant to Art. 6 para. 1 f GDPR.
The data will only be used for the purposes stated in this privacy policy. The data will only be used for advertising purposes if we have your consent or it is presumed that you have given your consent.
We use data from the following sources in particular
Our own research:
In order to be able to market our products and services in a targeted manner, we also use publicly accessible data sources ourselves to obtain personal and contact data from potential business partners.
These are generated in particular through research and queries on the Internet, visits to trade fairs and public events or personal exchanges with customers and suppliers and selected for a specific purpose. In doing so, we always pay attention to a business reference.
What is the legal basis for data processing?
The legal basis for the processing of personal data is generally – unless there are specific legal provisions – Art. 6 GDPR. The following possibilities in particular come into consideration here:
- § Consent (Art. 6 para. 1 lit. a) GDPR)
- § Data processing for the performance of contracts (Art. 6 para. 1 lit. b) GDPR)
- § Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
- § Data processing for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c) GDPR)
If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.
If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.
How long will the data be stored?
We process the data for as long as this is necessary for the respective purpose.
Insofar as statutory retention obligations exist – e.g. under commercial law or tax law – the personal data concerned will be stored for the duration of the retention obligation. After expiry of the retention obligation, a check is carried out to determine whether there is any further need for processing. If it is no longer necessary, the data will be deleted.
At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing.
Of course, you can request information about the data we have stored about you at any time (see below) and, if it is not necessary, request that the data be deleted, or processing be restricted.
To which recipients will the data be forwarded?
Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a weighing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent in this respect.
Where is the data processed?
Your personal data is processed by us exclusively in data centres in the Federal Republic of Germany.
Your rights as a data subject
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.
Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.
Furthermore, you have the right to object to the processing within the framework of the legal requirements. There is also a right to data portability within the framework of the data protection regulations.
In particular, you have the right to object to the processing of your data in connection with direct advertising in accordance with Art. 21 (1) and (2) GDPR if this is based on a balancing of interests.
Where can you complain?
You have the option of lodging a complaint with the data protection officer named above or with a data protection supervisory authority. The data protection supervisory authority responsible for us is
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart
Lautenschlagerstraße 20, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0 Fax: 0711/61 55 41 – 15
E-mail: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de
Information obligations according to Art 13 of the EU-DSGVO: Applicants
We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with your application. The protection and confidential handling of your personal data during the application process is a high priority for us and for the company acting on our behalf, BITE GmbH, with whom we have concluded an order processing agreement. In the following, we explain which data we collect during the application process and how it is further processed. In addition, this compilation contains further data protection information on so-called data subject rights in accordance with the provisions of the General Data Protection Regulation. For further information on the storage of data when visiting our websites, in particular with regard to technical usage data, please refer to our general privacy policy.
Who is responsible for data processing?
The controller within the meaning of data protection law is:
TUBEX GmbH
Fabrikstrasse 1
72414 Rangendingen
Tel.: +49 7471 990-0
Fax: +49 7471 990-79
E-Mail: datenschutz@tubex.de
Contact details of the data protection officer:
Steffen Wacker
datenschutz@tubex.de
Which of your data do we process? And for what purposes?
We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process. Applicant management software is used to support this, although decisions are not based exclusively on automated principles. Specifically, we initially store the data provided to us. On the basis of this information, we check whether an invitation to an interview can be considered as part of the selection process. If you are fundamentally suitable, we collect further personal data that is essential for the selection decision. If you are considered for employment, we will inform you of this additional data to be collected.
What is the legal basis for this?
Your personal data is processed on the following legal bases:
- Art. 6 para. 1 lit. b) GDPR (initiation of a contractual or service relationship) in conjunction with Art. 9 para. 2 lit. b) and h) GDPR, Art. 8 para. 1 (conditions for the consent of a child in relation to information society services)
- Art. 6 para. 1 lit. a), Art. 7 GDPR (voluntary consent)
- Art. 88 GDPR (data processing in the employment context) in conjunction with Section 26 (1) to (3) of the Federal Data Protection Act (BDSG)
How long will the data be stored?
Applicant data will be deleted after 6 months in the event of rejection.
In the event that you have consented to your personal data being stored further, we will transfer your data to our applicant pool. The data will be deleted there after two years.
If you have been accepted for a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.
To which recipients is the data passed on?
Your data will be passed on to the extent necessary to carry out the personnel selection procedure: Internal administrative departments or persons, insofar as they are involved in the recruitment process.
- Staff representatives (staff council), insofar as corresponding participation rights exist
- BITE GmbH, Magirus-Deutz-Str. 16, 89077 Ulm, Germany, which is responsible for the application of the application management software, Tel.: 0731/14 11 50-0, e-mail: info@b-ite.de.
Further data transfers – including to third parties for advertising purposes – do not take place.
Where is the data processed
The data is processed exclusively in data centres within the European Union or the European Economic Area. Your data will not be transferred to a third country or an international organisation.
Your rights as a “data subject”
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.
Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.
You also have the right to object to processing within the scope of the statutory provisions. The same applies to the right to data portability.
Right of appeal
You have the right to complain to a data protection supervisory authority about the processing of personal data by us.
Obligation to provide personal data
The provision of the above data is necessary for the application and the possible conclusion of an employment contract.
Information obligations under the Article 13 of the EU-GDPR: Guest WLAN
Who is responsible for data processing?
The controller within the meaning of data protection law is:
TUBEX GmbH
Fabrikstrasse 1
72414 Rangendingen
Tel.: +49 7471 990-0
E-Mail: info@tubex.de
Contact details of the data protection officer:
Steffen Wacker
datenschutz@tubex.de
What data about you are processed by us? And for what purpose?
We process your data for the purpose of logging the content accessed via the guest WiFi (e.g. websites).
Our guest WLAN collects a range of general data and information each time the website is accessed. This is stored in the log files. We do not use this data to draw conclusions about the person concerned unless this is necessary for criminal prosecution and we are requested to provide it by the law enforcement authorities.
Rather, this data is required to ensure the use of the guest WLAN. As far as possible, this data is collected and analyzed anonymously.
Usage data: Hardware address of your end device (MAC), destination addresses called up (IPs), volume of data transferred (bytes), success or failure of the call.
Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.
What is the legal basis for data processing?
The processing is necessary for the performance of a contract (provision of Internet access via the guest WiFi) pursuant to Art. 6 (1) (b) GDPR. The contract is accepted electronically when registering for the guest WiFi. To ensure operation, we store the log data of the guest WLAN in accordance with Art. 6 para. 1 lit. f GDPR. If necessary, the data will be passed on in the context of criminal prosecution in accordance with Art. 6 (1) (c) GDPR.
How long will the data be stored?
We only store the data for the period of time necessary to achieve the purpose of storage and insofar as this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a legal retention period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
To which recipients will the data be forwarded?
Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent to do so.
Where is the data processed?
Your personal data is processed by us exclusively in data centers in the Federal Republic of Germany.
Your rights as a data subject
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.
Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.
Furthermore, you have the right to object to the processing within the framework of the legal requirements. You also have the right to data portability within the framework of the data protection regulations.
In particular, you have the right to object to the processing of your data in connection with direct advertising in accordance with Art. 21 (1) and (2) GDPR if this is based on a balancing of interests.
Where can you complain?
You have the option of lodging a complaint with the data protection officer named above or with a data protection supervisory authority. The data protection supervisory authority responsible for us is
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart
Lautenschlagerstraße 20, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0 Fax: 0711/61 55 41 – 15
E-mail: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de
Information oblgations according to Art 13 and 14 of the EU-DSGVO: Video surveillance
Who is responsible for data processing?
The controller within the meaning of data protection law is:
TUBEX GmbH
Fabrikstrasse 1
72414 Rangendingen
Tel.: +49 7471 990-0
E-Mail: info@tubex.de
Contact details of the data protection officer:
Steffen Wacker
datenschutz@tubex.de
For what pourposess do we process your data?
Data processing is carried out exclusively for the purpose of exercising domiciliary rights, preventing vandalism and investigating criminal offences.
What is the legal basis for data processing?
Data processing is carried out on the basis of Art. 6 Abs. 1 lit. f GDPR
How long will the data be stored?
The data is generally deleted after 14 days, taking into account longer periods of non-working time. Data will be stored for a longer period if this is necessary to enforce legal claims or prosecute criminal offences in specific individual cases or if this is required for operational reasons (in particular company holidays).
To which recipients will the data be forwarded?
Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissable on the basis of a weighing of interests within the meaning of Art. 6 Abs. para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent in this respect.
Where is the data processed?
Your personal data is processed by us exclusively in data centres in the Federal Republik of Germany.
Your rights as a data subject
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, he or she has the right to obtain access to these personal data and to the information specified in Art. 15 GDPR.
The data subject has the right to obtain from the controller without delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the reasons specified in Art. 17 GDPR applies, e. g. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to request from the controller restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e. g. where the data subject has objected the processing, for the duration of the verification by the controller.
The data subject shall have the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data concerning him or her. The controller shall then no longer process the personal data, unless he can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, each data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.
Where can you complain?
You have the opportunity to lodge a complaint with the data protection officer mentioned above or with a data protection supervisory authority. The data protection supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart,
Lautenschlagerstraße 20, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0 Fax: 0711/61 55 41 – 15
E-Mail: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de