Data protection information for contractual partners in accordance with the European General Data Protection Regulation (GDPR)

The following information provides you as a tenant, hereditary building owner or leaseholder ("contractual partner") with an overview of the processing of your personal data by our company and the rights you have under the GDPR

1. Data processing controller and data protection officer

The controller responsible for data processing is

Industrieterrains Düsseldorf-Reisholz AG
Henkelstraße 164
40589 Düsseldorf
Telephone: +49 211 748 36-0

E-mail: mail(at)idr.de(hereinafter "company", "we") The data protection officer of our company is: Sascha Hasselbach
Kronprinzstr. 47-4940764
Langenfeld Telephone: +49 2173 20 41 244
E-mail: sascha.hasselbach(at)datenschutz-extern-nrw.de

2. Data sources and type of use of personal data

We process personal data that we receive from you as a contractual partner as part of our business relationship. In the contract initiation phase, i.e. before the contract is concluded, and during the business relationship, personal data is generated by us and you. The personal data usually generated are: name, salutation, title, address, telephone number, fax number, e-mail address, account data, your company / firm (with VAT ID), department, position, date of birth, rental property, credit assessments, extracts from the commercial register as well as inquiries and correspondence for the conclusion, administration, execution and invoicing of the contract with you

3. Purpose and legal basis of data processing

your personal data will be processed in accordance with the applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG),
processed. Specifically, this is done for the following purposes and on the following legal bases

a) Based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR

 

If you have given us your consent to process your data for specific purposes, e.g. to receive a newsletter, we will process your data on the legal basis of your consent. The scope and purpose of the data processing is described in the corresponding declaration of consent provided to you

b) For the fulfillment of contractual obligations pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR

 

The processing of personal data is carried out for the performance of contracts, namely for the execution of your contract. Further information on the purposes and scope of the contractual services for which the data is processed can be found in the respective contract concluded with you

c) For the fulfillment of legal requirements in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR

 

As a company, we are subject to various legal requirements to fulfill tax control and reporting obligations. To ensure compliance with these requirements, personal data is processed in the context of business initiation and processing in accordance with the legal requirements

d) As part of the balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR

 

We process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties

• We use your contact details to invite you to events organized by our company.

4. Who receives my data?

Your personal data will be accessed by those who need it to fulfill contractual and legal obligations. This includes our property managers as well as tradesmen and other companies commissioned by us to maintain the rental properties, insofar as this is necessary for the performance of the contract with you. We pass on your payment data to our house bank for the settlement of the rent/ground rent/lease. Furthermore, we request extracts from the commercial register required for the contract from the land registry and, under certain circumstances, obtain credit information on the creditworthiness of the contractual partner, in particular when initiating new rental agreements. If service providers and vicarious agents are also involved in the data processing process, this is generally only possible if the legal obligations prescribed in the GDPR and the BDSG are complied with

5. Is my personal data transferred to a "third country"?

Your personal data will only be transferred to countries outside the EU or the EEA if you have given us your consent to do so or if this is a necessary condition for the performance of a contract

6. How long will my data be stored?

Your personal data will be processed and stored for as long as is necessary to fulfill our contractual and legal obligations. After fulfillment of the contractual and legal obligations, the personal data is regularly deleted. Exceptions to this are

• The fulfillment of retention periods under commercial and tax law. The periods for this are between two and ten years.
• The preservation of evidence within the framework of the statute of limitations. According to §§ 195 ff. of the German Civil Code, these limitation periods can be up to thirty years. The regular limitation period here is three years until the end of the year. This also applies to rental debts, for example.

7. What data protection rights can I exercise as a contact person?

As a "data subject", you have the following rights vis-à-vis us with regard to the personal data concerning you (Art. 15 ff. GDPR): The data subject has the right to request confirmation from us as to whether personal data concerning him/her is being processed; if this is the case, he/she has the right to information about this personal data and to the information listed in detail in Art. 15 GDPR. The data subject has the right to demand that we correct any incorrect personal data concerning him/her without delay and, if necessary, to complete incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from us the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure). The data subject has the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has lodged an objection to the processing, for the duration of the examination by the controller.The data subject has the right to object to the processing of personal data concerning him or her at any time for reasons arising from his or her particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR). The revocation only takes effect in the future. Processing of personal data prior to the withdrawal of consent is not affected by this.Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
E-mail: poststelle(at)ldi.nrw.deConsent given by a data subject to the processing of personal data can be revoked at any time. This also applies to consent given before May 25, 2018 (validity of the GDPR). The revocation only takes effect in the future. Processing of personal data prior to the revocation is not affected by this

8. Obligation to provide data for contract processing

The data requested by us in the respective contract (name, company/company, contact and account data) must be provided. If you do not provide this data, we will have to reject you or your company as a contact person, as we absolutely need it to process the contract. status: May/2018