Data Protection Information for Customers and Prospective Customers
according to Articles 13, 14 and 21 of the German General Data Protection Regulations [Datenschutz-Grundverordnung - DSGVO]
We take data protection seriously. The text below provides information about how we process your data and about your rights.
1. Who is responsible for data processing and whom can you contact?
International Bilingual School Munich gGmbH
Fürstenrieder Str. 267
2. Contact information for the Data Protection Officer
3. Processing purposes and legal basis
Your personal data will be processed in line with the provisions of the German General Data Protection Regulations [Datenschutz-Grundverordnung – DSGVO], the German Federal Data Protection Act [Bundesdatenschutzgesetz - BDSG] and other relevant data protection regulations. The way in which individual data is processed and used will depend on the service agreed or applied for. You can obtain more details and supplementary information about the purposes for which data is processed from our contractual documentation, forms, declarations of consent and other information we make available to you (for example on the website or in our terms and conditions of business).
3.1 Consent (DSGVO Article 6, Paragraph 1, Letter a)
If you have given us consent to process personal data, the consent in question forms the legal basis for the processing mentioned therein. You can revoke consents with effect for the future at any time.
3.2 Fulfilment of contractual obligations (DSGVO Article 6, Paragraph 1, Letter b)
We process your personal data in order to fulfil our contracts with you. Your personal data are furthermore used to implement measures and activities within the framework of relationships prior to any contract.
3.3 Fulfilment of legal obligations (DSGVO Article 6, Paragraph 1 c)
We process your personal data when it is necessary in order to fulfil our legal obligations (e.g. commercial or fiscal laws).
4. Categories of personal data we process
We process the following data:
· Personal data (name, date of birth, place of birth, nationality, marital status, profession/industry and comparable data)
· Contact data (address, e-mail address, telephone number and comparable data)
· Bank details
· Customer history
5. Who receives your data?
We pass on your personal data internally to those departments who need it to fulfil their contractual and legal obligations or to further our justified interests.
6. Transfer of your data to a foreign country or to an international organization
Data is not processed outside the EU or the EEA.
7. How long do we store your data?
SAs far as required, we process your personal data for the duration of our business relationship – this also covers initiation and conclusion of a contract.
Beyond this, we are subject to various obligations regarding retention of records and documentation arising from the German Commercial Code [Handelsgesetzbuch – HGB], the tax code [Abgabenordnung – AO] and German income tax law [Einkommensteuergesetz – EStG] among others, each including any implementation regulations. The periods for retaining records and documentation specified there are up to ten years beyond the end of the business relationship/the legal relationship preceding the contract.
In the final analysis, retention time is also determined in accordance with legal expiry dates which, for example according to §§ 195 ff. of the German Civil Code [Bürgerliches Gesetzbuch – BGB], are generally three years but in certain cases, may be up to thirty years.
8. Your data protection rights
DSGVO Article 15 gives you the right to obtain information, DSGVO Article 16 gives you the right to correct that information, DSGVO Article 17 gives you the right to have data deleted, DSGVO Article 18 gives you the right to restricted processing and DSGVO Article 20 gives you the right to the portability of data. You also have the right to make a complaint to a regulatory authority for data protection (DSGVO Article 77). DSGVO Article 21 essentially gives you the right to object to our processing your personal data. However, you only have this right to object if your personal situation involves very particular circumstances, and we may have rights which conflict with your right to object. If you want to pursue one of these rights, please contact our Data Protection Officer firstname.lastname@example.org
9. Scope of your obligations to provide us with your data<
You only need to provide the data we require to commence and execute a business relationship or a relationship preceding a contract or data we are legally obliged to collect. Without these data, we will not normally be in a position to conclude the contract or execute it. This may also relate to data subsequently required within the framework of the business relationship. Insofar as we request further data from you, you will be informed separately that the provision of such details is voluntary.
10. Your right to complain to the competent regulatory authority
You have the right to complain to the regulatory authority for data protection (DSGVO Article 77). The regulatory authority with competence for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)