Privacy Notice - bwcon
Information on the processing of personal data pursuant to art. 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR)
In accordance with art. 13 of the European Regulation n. 679/2016, bwcon, as the "Data Controller", is required to provide you with information regarding the use of your personal data.
2. Name and address of the person responsible
The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Baden-Württemberg: Connected e.V.
70197 Stuttgart, Germany
Kathrin Günther and Alf Henryk Wulf, Chairman of the Management Board
70197 Stuttgart, Germany
Dr. Jürgen Jähnert, CEO
Phone: +49 711 18421-600
Fax: +49 711 18421-699
Seat of the association: Stuttgart
Register of associations number: VR5990
Identification number according to § 27 a
Value added tax law: 99015/046307
Registered office of the company: Stuttgart
Commercial register: HRB 749854
Tax number: 99021/24053
In the following we inform you about the processing of your personal data in the context of the use of the Award Initiative on the DT4REGIONS Platform.
Should you have any further questions regarding data protection in connection with dt4regions.eu or the services offered, please contact our data protection officer.
The Data Protection Officer (DPO) is:
DPP Data Protection GmbH
3. Scope, purpose and legal basis of the processing of personal data
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users takes place regularly only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.
The processing of your personal data is carried out by bwcon in the context of the DT4REGIONS project for the following purposes:
- Participation in the DT4REGIONS Award (WP5);
- Publication of the information provided in the submission form for the Award on the DT4REGIONS platform.
3.1. Award submission form
To participate into the DT4REGIONS Award, candidate need to provide some personal data. The data is entered into an input mask and transmitted to us and saved. The following data is collected during the registration process:
- First and last name
- Phone Number
- E-Mail Address
- Region / city
- Role within the initiative/company
By submitting an application for the DT4REGIONS Award, the user's consent to the processing of this data is obtained.
Furthermore, by submitting an application for the DT4REGIONS Award, you agree to the moderation and publication of the information provided on the DT4REGIONS Platform and the use of this information for communication and dissemination purpose on all DT4REGIONS communication channels (platform, website, social media channels as LinkedIn and Twitter) and beyond.
bwcon uses the information provided in the application form to carry out its services in the framework of the DT4REGIONS project.
In this context, bwcon will pass on your personal data to the DT4REGIONS Project Partners and the jury of the Award. This consent is required for participation in the Award. In case you withdraw this consent, your might not be able to participate in the Award since a fair and transparent selection process is not anymore possible.
You can, of course, object to the use of your data for advertising purposes at any time by contacting bwcon at firstname.lastname@example.org.
A registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.
The data collected is required for the performance of our services and entitles you to access them.
The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if the user has given his consent.
If registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
As a user you have the possibility to cancel the registration at any time. You can change the data stored about you at any time.
In this case, please send an e-mail to email@example.com asking for your data to be deleted.
If the data is required to fulfil a contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as there are no contractual or statutory obligations to the contrary.
4. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis for the processing of personal data.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing. In this case, our legitimate interests are in addition to the purposes listed above:
- Protection of the company against material or immaterial damage
- The professionalization of our products and services
- Cost optimization.
Furthermore, we process personal data in order to comply with commercial or tax data retention obligations.
For statutory or contractual requirements, we have marked the respective input fields in the input masks on our website, which must be filled in by you so that we can provide the service you require.
5. Data erasure and storage time
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply or is no longer necessary. It may happen that personal data is stored for the period during which claims can be asserted against our company (statutory limitation periods may range from three to thirty years).
Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject.
The German Commercial Code, the Fiscal Code and the Money Laundering Act, among others, impose corresponding duties of proof and retention. The storage periods are then up to ten years.
The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
6. Passing on of personal data to third parties
In order to be able to offer you our products and services on the basis of our contractual obligations or our legitimate interests, we may pass on your personal data to other companies within the group of companies (group).
These are the following companies/organizations:
- Baden-Württemberg: Connected e.V.
- bwcon research gGmbH
- future subsidiaries of bwcon GmbH
Furthermore, we may be legally obliged to make personal data available to German and international authorities. The legal basis for this is Art. 6 para. 1 lit. c GDPR in conjunction with local and international regulations and agreements.
7. Right of objection according to Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
8. Rights of the data subject
It is an important concern for our company to make our processes for processing personal data transparent. Therefore, we would like to point out that, in addition to the right of objection, you may exercise further rights if the respective legal requirements are met:
- Right to information according to Art. 15 GDPR
- Right to correction under Article 16 GDPR
- Right to cancellation ("right to be forgotten") according to Art. 17 GDPR
- Right to limitation of processing in accordance with Art. 18 GDPR
- Right to information in accordance with Art. 19 GDPR
- Right to data transferability in accordance with Art. 20 GDPR
- (no) automated decision in individual cases including profiling according to Art. 21 GDPR
To exercise your rights, you can contact us by e-mail at firstname.lastname@example.org. In order to process your application and for identification purposes, we would like to point out that we process your personal data in accordance with Art. 6 para. 1 lit. c GDPR.
You have the right to revoke your data protection declaration of consent at any time with effect for the future. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. In some cases, despite the revocation, we are entitled to process your personal data on another legal basis (to fulfil a contract).
10. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32