...

PRIVACY POLICY

Thank you for visiting our website. The protection of your personal data is important to us and we want you to feel secure when visiting our website. We protect your privacy and your personal data. We process your personal data in accordance with the content of this privacy policy, the country-specific data protection regulations that apply to us and the General Data Protection Regulation (GDPR).

1

Privacy policy for visitors to the website

A. BASIC INFORMATION PURSUANT TO ART. 13 / 14 DS-GV

1. RESPONSIBILITY FOR DATA PROCESSING

Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. CONTACT DATA PROTECTION

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. SUPERVISORY AUTHORITY

If you are of the opinion that the processing of your personal data by Second IT Store GmbH is not lawful, you can contact the data protection supervisory authority with your complaint. The supervisory authority responsible pursuant to Art. 55 GDPR is

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Address: Königstraße 10a, 70173 Stuttgart
Postal address: P.O. Box 10 29 32, 70025 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

4. YOUR RIGHTS

According to the statutory provisions, you as the data subject have the right to receive information about your data stored by Second IT Store GmbH free of charge at any time.

In addition, you have the right to rectification, erasure or restriction of processing or the right to object at any time vis-à-vis Second IT Store GmbH. This also applies to the right to data portability.

If you have provided us with your personal data on the basis of voluntary consent, you can revoke your consent at any time for the future.

B. PURPOSES AND SCOPE OF DATA PROCESSING

1. INTERNET PRESENCE

Processing of communication data

Each time a user accesses a Second IT Store GmbH page, access data about this process is stored in a log file on our server.

Each data set consists of:

  • IP address
  • Date and time
  • Page called up/name of the file called up
  • Amount of data transferred
  • Message as to whether the access/retrieval was successful
  • Browser incl. version and operating system
  • In the event of an error, the error message is saved

We store IP addresses in server log files for a period of 12 weeks. The storage takes place for reasons of data security in order to ensure the stability and operational security of our website. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Recipient of the data

We do not pass on your data to third parties unless you have consented to this. However, we rely on the use of service providers for the hosting and maintenance of our website, which we oblige to comply with the legal requirements via an order processing contract in accordance with Art. 28 GDPR.

Cookies & Tracking

We only use an analysis tool from the provider MATOMO on our website that does not require consent. The tool is operated as data-efficiently as possible. Further information on the tracking tool used can be found at https://matomo.org/gdpr/.

2. APPLICATION PROCEDURE / EMPLOYMENT DATA

How does Second IT Store GmbH process the data of employees / applicants?

Your personal data is generally collected directly from you - e.g. as part of the application process - on the basis of Section 26 (1) BDSG (new).

In addition, we may also have received data from third parties (e.g. job exchanges such as Indeed, Stepstone etc. or recruitment agencies).

The processed categories of personal data of employees/applicants include in particular their master data such as (first name, surname, name affixes, nationality, personnel number), contact data (private address, (mobile) telephone number, e-mail address) as well as the data of the entire application process (cover letter, CV, (work) certificates, proof of qualifications).

If you have also voluntarily provided special categories of personal data in your letter of application or during the application process (health data, religious affiliation, degree of disability), processing will only take place if you have consented to this.

Second IT Store GmbH processes the personal data of employees and applicants on the basis of and in compliance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant provisions of German labor law (e.g. SGB, AGG, BetrVG, etc.).

The processing of your personal data as part of the application process primarily serves to carry out the application procedure, in particular to determine your suitability for the advertised position.

The processing of your applicant data is necessary for the decision on the establishment of an employment relationship. The legal basis for this is Art. 88 GDPR i.V.m. § Section 26 (1) BDSG.

Who receives your data?

Within Second IT Store GmbH, only those persons who need your personal data to make a decision about your employment and to fulfill our legal and contractual obligations will have access to it.

Notwithstanding this, we only transfer your personal data if we are legally obliged to do so (e.g. to investigating authorities).

How long does Second IT Store GmbH store your data?

Personal applicant data transmitted to Second IT Store GmbH will be deleted as soon as it is no longer required for the above-mentioned purposes; at the latest after 6 months (if the decision has been made that no employment relationship will be established).

This does not apply if you have consented to a longer storage period, if storage is necessary for evidence purposes or if legal regulations prevent deletion. For example, we store your applicant data for as long as there is a possibility that you could assert legal claims against Second IT Store GmbH, e.g. for violation of the General Equal Treatment Act (AGG).

If your application leads to the establishment of an employment relationship, your data will continue to be stored and used for the purposes of the usual administrative and organizational processes and for the implementation of the employment relationship in compliance with the applicable legal regulations.

What rights can you assert as a data subject?

Applicants and employees - like everyone else affected - have the:

  • Right to information in accordance with Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR

Details can be found in section A point 4 of this declaration.

Furthermore, you have the right to lodge a complaint with the above-mentioned data protection officer (see section A point 2) or with a data protection supervisory authority (see section A point 3).

3. THIRD PARTY OFFERS

(Plugins and tools)

We have no influence on the data protection design of integrated services.

This also applies to external links on our homepage.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Status of the privacy policy: 01.10.2022

2

Privacy policy for applicants & employees

Dear applicants, dear employees, We hereby comply with our duty to provide information under data protection law and would like to inform you below in a transparent manner about the handling of your personal data.

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations. Our contact details are as follows: Second IT Store GmbH Steinbeisweg 1 74523 Schwäbisch Hall Phone: 0791 954 000 0 E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below: Second IT Store GmbH Michael Schatzinger Steinbeisweg 1 74523 Schwäbisch Hall E-Mail: datenschutz@second-it.de

3. PURPOSE OF DATA COLLECTION

We process your personal data for the following reasons:
  • Evaluation and processing of incoming applications
  • Conducting job interviews and selecting applicants
  • Conclusion of an employment contract (establishment of an employment relationship)
  • Implementation of the employment relationship
  • Termination of an employment relationship

4. LEGAL BASIS

We process your personal data on the following legal basis: §26 BDSG (new) paragraph 1

5. FURTHER DETAILS ON THE PURPOSE OF USE

We require a minimum amount of personal data in order to be able to recruit and employ new suitable personnel or to establish, implement and terminate an employment relationship. We always observe the principle of data minimization and do not collect any personal data that we do not absolutely need in accordance with point 3 of this privacy policy. Should we wish to collect further personal data that does not fall under point 3 of this privacy policy, we would ask you for a voluntary declaration of consent in this regard.

6. INTERNAL AND EXTERNAL DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will only be passed on internally for the purposes defined under point 3 of this privacy policy in accordance with the principle of data minimization and other data protection principles. External disclosure of your personal data may take place under the following circumstances:
  • Disclosure of your personal data (contact details) to contractors, subcontractors or cooperation partners in the course of the employment relationship, insofar as this is necessary for the fulfillment of orders. Any disclosure will only ever take place to the extent necessary. Where possible, your personal data will not be passed on.
  • Commissioning of support services where access to your personal data is necessary or at least cannot be completely ruled out. This includes, for example, IT support services, payroll accounting services or the use of tax consultancy services.
  • Disclosure of your personal data (contact data) within the scope of supplier management, insofar as this is necessary for the fulfillment of orders. Any disclosure will only ever take place to the extent necessary. Where possible, your personal data will not be passed on.
  • Disclosure of your personal data to authorities and health insurance companies due to legal obligations.

7. transfer of your personal data to a third country or an international organization (OUTSIDE the scope of the GDPR)

We do not transfer your data to an EU third country or to an internationally active organization. Should this be necessary, we would inform you of this in advance and take all necessary measures to ensure an appropriate level of data protection.

8. STORAGE PERIOD AND DELETION OF YOUR PERSONAL DATA

The legislator has issued a large number of retention periods, which we observe with the utmost care and seek advice on in order to comply with these obligations. In this context, we generally only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof. Should we wish to store your data for longer than described above, we would ask you for a voluntary declaration of consent.

9. RIGHT OF ACCESS, ERASURE, RECTIFICATION, OBJECTION AND RESTRICTION OF USE OF YOUR PERSONAL DATA

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to the following information:
  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).
If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer. We will provide you with a free copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request electronically, you will receive the information in a commonly used electronic format, unless you specify otherwise. The right to receive a copy may be restricted if this affects the rights and freedoms of others. You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. To exercise this right, you are welcome to contact our data protection officer. You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:
  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16).
Furthermore, you have the right to demand that we restrict processing if one of the following conditions is met:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided. In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible. The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent you have given. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. With regard to compliance with storage periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time. The address of the competent supervisory authority in Baden Württemberg is The State Commissioner for Data Protection and Freedom of Information Königstrasse 10 a 70173 Stuttgart Tel: 0711 615 541 0 Fax: 0711 615 541 15 E-Mail: poststelle@lfdi.bwl.de

13. MANDATORY PROVISION OF YOUR PERSONAL DATA AND POSSIBLE CONSEQUENCES OF REFUSAL TO PROVIDE IT

On the one hand, we are legally obliged to process personal data relating to you (this also includes passing it on to authorities or health insurance companies, for example), and on the other hand, we need the data collected from you for the decision, establishment, implementation and termination of the employment relationship. Without the data collected, it would not be possible to decide on, establish, implement and terminate an employment relationship.

14. AUTOMATED DECISION-MAKING AND PROFILING

No automated decision-making takes place in relation to your person. No "profiling" (meaningful information about the logic involved and the scope and intended effects of such processing for you) is carried out using the personal data collected from you.

15. CHANGE OF PURPOSE

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner. In this case, we will of course provide you with all the information required by law. If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. OPEN QUESTIONS, COMPLAINTS OR SUGGESTIONS

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy). Status of the privacy policy: 01.10.2022
3

Privacy policy for customers & interested parties

Dear customers, dear interested parties,

We hereby comply with our duty to provide information under data protection law and would like to inform you below in a transparent manner about the handling of your personal data.

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. PURPOSE OF DATA COLLECTION

We process your personal data for the following reasons:

  • Preparation of individual offers as a result of work or services requested from us
  • Creation of a service or work contract
  • Provision of the contractually agreed service
  • Billing of the contractually agreed service

4. LEGAL BASIS

We process your personal data on the following legal basis:
Article 6 of the GDPR paragraph 1 lit. B

5. FURTHER DETAILS ON THE PURPOSE OF USE / LEGITIMATE INTERESTS OF THE CONTROLLER

We require a minimum amount of personal data in order to provide our contractually agreed service or to be able to provide you with an individual offer in response to your request.
We always observe the principle of data economy and do not collect any personal data that we do not need for the fulfillment of our tasks.

6. INTERNAL AND EXTERNAL DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will only be passed on internally for the fulfillment of contractual obligations or other tasks in connection with the activities mentioned in point no. 3.

External disclosure of your personal data may take place under the following circumstances:

  • Commissioning a subcontractor to fulfill the contractual obligations that we have agreed with you as part of the collaboration.
  • Commissioning of support services where access to your personal data is necessary or at least cannot be completely ruled out. This includes, for example, IT support services, services in the context of invoicing or the use of tax consultancy services
  • Disclosure of your personal data due to legal obligations.
  • Obtaining information from credit agencies.
  • Disclosure of personal data through an automated comparison with databases as part of export controls

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to an EU third country or to an internationally active organization. Should this be necessary, we would inform you of this in advance and take all necessary measures to ensure an appropriate level of data protection.

8. STORAGE PERIOD AND DELETION OF YOUR PERSONAL DATA

The legislator has issued a large number of retention periods, which we observe with the utmost care and seek advice on in order to comply with these obligations.

In this context, we only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof.

Should we wish to store your data for longer than described above, we would ask you for a voluntary declaration of consent.

9. RIGHT OF ACCESS, ERASURE, RECTIFICATION, OBJECTION AND RESTRICTION OF USE OF YOUR PERSONAL DATA

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request electronically, you will receive the information in a commonly used electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.
You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent you have given. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13. MANDATORY PROVISION OF YOUR PERSONAL DATA AND POSSIBLE CONSEQUENCES OF REFUSAL TO PROVIDE IT

We require the personal data collected from you in order to fulfill our contractual service or to prepare an individual offer. Without this personal data, it is not possible to prepare offers or provide the requested services and work.

14. AUTOMATED DECISION-MAKING AND PROFILING

No automated decision-making takes place in relation to your person. No "profiling" (meaningful information about the logic involved and the scope and intended effects of such processing for you) is carried out using the personal data collected from you.

15. CHANGE OF PURPOSE

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.

In this case, we will of course provide you with all the information required by law. If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. OPEN QUESTIONS, COMPLAINTS OR SUGGESTIONS

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status of the privacy policy: 01.10.2022

4

Privacy policy for suppliers & service providers

Dear suppliers and service providers,

We hereby comply with our duty to provide information under data protection law and would like to inform you below in a transparent manner about the handling of your personal data.

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. PURPOSE OF DATA COLLECTION

We process your personal data for the following reasons:

  • Request for individual offers for work or services
  • Conclusion of a service or work contract or execution of an order
  • Questions about work, services or products provided, including the handling of complaints processes
  • Settlement of invoices

4. LEGAL BASIS

We process your personal data on the following legal basis:

Article 6 of the GDPR paragraph 1 lit. b (upon conclusion of a contract, e.g. service contract or purchase contract)
and / or
Article 6(1)(f) GDPR (for pre-contractual measures at the request of the controller)

5. FURTHER DETAILS ON THE PURPOSE OF USE / LEGITIMATE INTERESTS OF THE CONTROLLER

In order to be able to receive contractually agreed services or, of course, to request an individual offer, we naturally require a minimum amount of personal data.
We always observe the principle of data minimization and do not collect any personal data that we do not absolutely need in accordance with point no. 3 of this privacy policy.

6. INTERNAL AND EXTERNAL DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will only be passed on internally for the fulfillment of contractual obligations or other tasks in connection with the activities mentioned in point no. 3.

External disclosure of your personal data may take place under the following circumstances:

  • Forwarding your contact details to coordinate several contractors with each other, in the event of commissioning another service provider / supplier to fulfill the contractual obligations that we have agreed with you as part of the cooperation
  • Commissioning of support services where access to your personal data is necessary or at least cannot be completely ruled out. This includes, for example, IT support services, services in the context of invoicing or the use of tax consultancy services
  • Disclosure of your personal data due to legal obligations.

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to an EU third country or to an internationally active organization. Should this be necessary, we would inform you of this in advance and take all necessary measures to ensure an appropriate level of data protection.

8. STORAGE PERIOD AND DELETION OF YOUR PERSONAL DATA

The legislator has issued a large number of retention periods, which we observe with the utmost care and seek advice on in order to comply with these obligations.

In this context, we only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof.

Should we wish to store your data for longer than described above, we would ask you for a voluntary declaration of consent.

9. right to information, deletion, correction, objection and restriction of use of your personal data

You have the right to request confirmation from us as to whether personal data concerning you is being processed.
If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs.

If you submit the application electronically, you will receive the information in a common electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.

You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent you have given. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13. MANDATORY PROVISION OF YOUR PERSONAL DATA AND POSSIBLE CONSEQUENCES OF REFUSAL TO PROVIDE IT

We require the personal data collected from you in order to fulfill our contractual service or to prepare an individual offer.
Without this personal data, it is not possible to prepare offers or provide the requested services and work.

14. AUTOMATED DECISION-MAKING AND PROFILING

No automated decision-making takes place in relation to your person. No "profiling" (meaningful information about the logic involved and the scope and intended effects of such processing for you) is carried out using the personal data collected from you.

15. CHANGE OF PURPOSE

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.

In this case, we will of course provide you with all the information required by law.
If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. OPEN QUESTIONS, COMPLAINTS OR SUGGESTIONS

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status of the privacy policy: 01.10.2022

5

Privacy policy for trade fair contacts

This data protection declaration is intended to provide information about the type, scope and purpose of the collection and use of personal data by Second IT Store GmbH in relation to trade fairs.

Second IT Store GmbH takes the protection of personal data very seriously and treats it confidentially and in accordance with legal regulations.

Definitions of the terms used (e.g. "personal data" or "processing") can be found in Art. 4 GDPR

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. purpose of data collection

We need your personal data for one or more of the following reasons:

  • Sending of information material on request
  • Processing of inquiries
  • Preparation of individual offers
  • Creating a purchase, service or work contract

4. legal basis

If you provide us with your contact details in order to be informed about products, services or news, to arrange a consultation appointment or to answer inquiries, the processing is based on the following legal basis:
Article 6 of the GDPR paragraph 1 lit. a
"... the data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes."

If it concerns the initiation or execution of contracts that are concluded with your company, this is done on the basis of the legal basis:
Article 6 of the GDPR paragraph 1 lit. f
" ... processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, ..."

5. further details on the purpose of use / legitimate interests of the controller

Our legitimate interest lies in the fact that the initiation and execution of contracts with your company is only possible if we process a minimum amount of personal data (e.g. contact details of contact persons) in order to conduct efficient and targeted communication.

We process your personal data on the following legal basis for all matters relating to contracts or their initiation with you directly, e.g. preparation of offers or conclusion of purchase contracts:
Article 6 of the GDPR paragraph 1 lit. b
" .... processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract".

6 Internal and external disclosure of your personal data

Your personal data will only be passed on internally for the purposes defined under point 3 of this privacy policy in accordance with the principle of data minimization and other data protection principles.
External disclosure of your personal data may take place under the following circumstances.

  • Forwarding to our sales representatives for further processing of your request.
  • the IT service providers working for us have access to your data as part of their administrative activities.

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to an EU third country or to an internationally active organization. Should this be necessary, we would inform you of this in advance and take all necessary measures to ensure an appropriate level of data protection.

8. storage period and deletion of your personal data

The legislator has issued a large number of retention periods, which we observe with the utmost care and seek advice on in order to comply with these obligations.
In this context, we only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof. #

Should we wish to store your data for longer as described above, we would ask you to confirm this in a voluntary declaration of consent.

9. right to information, deletion, correction, objection and restriction of use of your personal data

You have the right to request confirmation from us as to whether personal data concerning you is being processed.
If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs.

If you submit the application electronically, you will receive the information in a common electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.

You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent you have given. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13 Mandatory provision of your personal data and possible consequences of refusal to provide it

We require your personal data in order to fulfill the tasks mentioned under point 3, as we need to communicate with you for this purpose. This communication is not possible without the relevant contact data.

14. automated decision-making and profiling

No automated decision-making takes place in relation to your person. Likewise, no "profiling" is carried out with the help of the personal data collected from you.

15. change of purpose

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.
In this case, we will of course provide you with all the information required by law.

If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. open questions, complaints or suggestions

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status: 01.10.2022

6

Privacy policy for visitor list

This data protection declaration is intended to provide information about the type, scope and purpose of the collection and use of personal data by Second IT Store GmbH in relation to the visitor list used.

Second IT Store GmbH takes the protection of personal data very seriously and treats it confidentially and in accordance with legal regulations.

Definitions of the terms used (e.g. "personal data" or "processing") can be found in Art. 4 GDPR

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. purpose of data collection

We need the personal data collected from you in the visitor list in order to document who has been on our premises and when. In the event of incidents, this allows us to narrow down the group of people in relation to visitors who may be able to provide us with further information necessary for clarification.
We also use the visitor list as proof that you have taken note of the relevant rules of conduct and safety instructions printed there.

4. legal basis

We derive the lawfulness of the collection of your personal data from Article 6 (1) (f) GDPR:
" ... processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, ..."

5. further details on the intended use

Our legitimate interest lies in the fact that we are obliged to ensure security in our company for various reasons. For example, data protection regulations stipulate that personal data and information must be protected accordingly. A recognized procedure for this is the use of a visitor book.

6 Internal and external disclosure of your personal data

The individual pages of the visitor list are stored in our administration department. As a rule, they are not passed on.

In the event of a security incident that makes it necessary to evaluate visitor activity, the data may be viewed by the management. In this context, the data may also be passed on to the authorities.

However, we will always ensure that this is done in accordance with the legal regulations.

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to a third country outside the EU or to an internationally active organization.

8. storage period and deletion of your personal data

The completed sheets of the visitor list are generally destroyed after 3 months. If we need the data to investigate a security incident, individual completed sheets may be kept for longer than 3 months. These will then be destroyed immediately as soon as they are no longer required.

9. right to information, deletion, correction, objection and restriction of use of your personal data

You have the right to request confirmation from us as to whether personal data concerning you is being processed.
If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs.

If you submit the application electronically, you will receive the information in a common electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.

You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent you have given. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13 Mandatory provision of your personal data and possible consequences of refusal to provide it

We need your personal data to fulfill the tasks mentioned under point 3.
If you are not prepared to provide us with this data, we will not be able to allow you to enter our premises and continue your visit.

14. automated decision-making and profiling

No automated decision-making takes place in relation to your person.
Likewise, no "profiling" is carried out with the help of the personal data collected from you.

15. change of purpose

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.

16. open questions, complaints or suggestions

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status of the privacy policy: 01.10.2022

7

Privacy policy for friends & network partners

Dear friends and network partners,

We hereby comply with our duty to provide information under data protection law and would like to inform you below in a transparent manner about the handling of your personal data.

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. PURPOSE OF DATA COLLECTION

We process your personal data for the following reasons:

  • Coordination on possible cooperation
  • Coordination of common interests
  • Exchange of experience

4. LEGAL BASIS

We process your personal data on the following legal basis:
Article 6 of the GDPR paragraph 1 lit. f

5. FURTHER DETAILS ON THE PURPOSE OF USE / LEGITIMATE INTERESTS OF THE CONTROLLER

We require a minimum amount of personal data in order to be able to carry out our coordination correspondence in accordance with point 3 of this privacy policy. In this context, we always observe the principle of data minimization.

6. INTERNAL AND EXTERNAL DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will only be passed on internally for the fulfillment of contractual obligations or other tasks in connection with the activities mentioned in point no. 3.

External disclosure of your personal data may take place under the following circumstances:

  • Commissioning of support services for which access to your personal data is necessary or at least cannot be completely ruled out.
    (This includes, for example, IT support services, services in the context of invoicing or the use of tax consulting services)
  • Disclosure of your personal data due to legal obligations.
  • Disclosure of your personal data to other network partners

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to an EU third country or to an internationally active organization.
Should this be necessary, we would inform you of this in advance and ensure that all necessary measures are taken to maintain an appropriate level of data protection.

8. STORAGE PERIOD AND DELETION OF YOUR PERSONAL DATA

The legislator has issued a large number of retention periods, which we observe with the utmost care and seek advice on in order to comply with these obligations.

In this context, we only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof.

Should we wish to store your data for longer than described above, we would ask you for a voluntary declaration of consent.

9. RIGHT OF ACCESS, ERASURE, RECTIFICATION, OBJECTION AND RESTRICTION OF USE OF YOUR PERSONAL DATA

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request electronically, you will receive the information in a commonly used electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.

You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process personal data about you on the basis of a declaration of consent, you have the right to withdraw your consent.
However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13. MANDATORY PROVISION OF YOUR PERSONAL DATA AND POSSIBLE CONSEQUENCES OF REFUSAL TO PROVIDE IT

There is no obligation on your part to provide your personal data.
If you fail to provide personal data, you will not suffer any disadvantage.

14. AUTOMATED DECISION-MAKING AND PROFILING

No automated decision-making takes place in relation to your person. No "profiling" (meaningful information about the logic involved and the scope and intended effects of such processing for you) is carried out using the personal data collected from you.

15. CHANGE OF PURPOSE

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.
In this case, we will of course provide you with all the information required by law.

If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. OPEN QUESTIONS, COMPLAINTS OR SUGGESTIONS

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status of the privacy policy: 01.10.2022

8

Privacy policy for video surveillance

This privacy policy is intended to inform you about the type, scope and purpose of the collection and use of personal data in the context of video surveillance of the outdoor area by Second IT Store GmbH.

Second IT Store GmbH takes the protection of personal data very seriously and treats it confidentially and in accordance with legal regulations. As new technologies and the constant further development of procedures and methods of data processing may result in changes to this data protection declaration, we recommend that you read the data protection declaration again at regular intervals.

Definitions of the terms used (e.g. "personal data" or "processing") can be found in Art. 4 GDPR

1. responsibility for data processing

Second IT Store GmbH is responsible for the collection and processing of your personal data and therefore also for compliance with data protection regulations.

Our contact details are as follows:
Second IT Store GmbH
Steinbeisweg 1
74523 Schwäbisch Hall
Tel: 0791 954 000 0
E-Mail: info@second-it.de

2. contact person data protection

If required, you can contact our officially appointed data protection officer using the contact details below:

Second IT Store GmbH
Michael Schatzinger
Steinbeisweg 1
74523 Schwäbisch Hall
E-Mail: datenschutz@second-it.de

3. purpose of data collection

Video surveillance is used to protect against burglary, theft and damage to property. In the event of such incidents, the recordings are intended to help clarify the situation and may serve as evidence.     
It will not be used for any other purpose.

4. legal basis

The data is processed in accordance with GDPR Art. 6 para. 1 lit. f to protect legitimate interests:

" ... processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, ..."

5. further details on the intended use / legitimate interests of the controller

The legitimate interest pursued by Second IT Store GmbH is the effective protection of the company's property. Incidents in the past have shown that video surveillance makes a significant contribution to clarifying and providing evidence in the event of incidents. In addition, video surveillance is a recognized means of prevention.

By limiting storage time and focusing on important and critical areas, the rights and freedoms of the individual are protected.

6 Internal and external disclosure of your personal data

Your personal data will only be passed on internally for the purposes defined under point 3 of this privacy policy in accordance with the principle of data minimization and other data protection principles.

The recordings are only viewed by a narrowly defined group of employees in the event of incidents.

Data is stored securely on Second IT Store GmbH servers on the company's premises.

As a rule, your personal data will not be passed on externally, but may be in the following circumstances:

  • Data may be passed on to investigating authorities as part of the investigation of incidents and the provision of evidence.
  • Second IT Store GmbH is supported by Team4IT GmbH and DataReform GmbH in the operation and administration of the IT system. As part of necessary IT work (e.g. troubleshooting), it is theoretically possible for employees of the IT service provider to view the video recordings. 

As required by Article 28 of the General Data Protection Regulation (GDPR), a so-called order data processing contract has been concluded with Team4IT GmbH and DataReform GmbH, which on the one hand ensures confidentiality and on the other hand guarantees that access to areas in which the video data is stored is only made when absolutely necessary and on the instructions of Second IT Store GmbH (e.g. in the event of an error).

7. transfer of your personal data to a third country or an international organization (outside the scope of the GDPR)

We do not transfer your data to a third country outside the EU or to an internationally active organization.

8. storage period and deletion of your personal data

The storage time for the video recordings is 72 hours.
Once the maximum storage time has been reached, the recordings are automatically overwritten.

In the event of incidents, the recordings may be stored for longer for the purposes of clarification and evidence. They are then deleted when they are no longer required for this purpose.

9. RIGHT OF ACCESS, ERASURE, RECTIFICATION, OBJECTION AND RESTRICTION OF USE OF YOUR PERSONAL DATA

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to information about this personal data and to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in EU third countries or international organizations
  • where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data are not collected from the data subject, all available information about the origin of the data
  • the existence of automated decision-making, including profiling (meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).

If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate "safeguards" with regard to ensuring an adequate level of data protection in connection with the transfer.

We will provide you with a copy of the personal data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request electronically, you will receive the information in a commonly used electronic format, unless you specify otherwise.

The right to receive a copy may be restricted if this impairs the rights and freedoms of other persons.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
To exercise this right, you are welcome to contact our data protection officer.

You have the right to request the deletion of your personal data stored by us if one of the following criteria is met:

  • The personal data are no longer required for the fulfillment of the agreed purpose.
  • You withdraw your voluntary declaration of consent (however, this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Your personal data has been processed unlawfully.
  • There is a legal obligation to delete data.
  • The personal data was collected in relation to information society services offered (persons under the age of 16). You also have the right to obtain from us restriction of processing where one of the following applies:
  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of your personal data and request the restriction of the use of your personal data instead.
  • If we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • If you have objected to processing pending the verification whether our legitimate grounds override yours.

10. RIGHT TO DATA PORTABILITY

You have the right to receive the personal data we have stored about you in a structured, commonly used and machine-readable format, insofar as this data is processed by automated means.

You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability may be restricted insofar as the rights or freedoms of other persons are affected by the exercise of this right.

11. RIGHT TO REVOKE CONSENT AND CONTINUATION OF CONSENT GIVEN

Insofar as we process personal data about you on the basis of a declaration of consent, you have the right to withdraw your consent.
However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

With regard to compliance with retention periods, point 8 of this privacy policy must also be observed in this regard.

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you see the need to lodge a complaint with the competent supervisory authority, you are free to do so at any time.

The address of the competent supervisory authority in Baden Württemberg is:

The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Tel: 0711 615 541 0
Fax: 0711 615 541 15
E-Mail: poststelle@lfdi.bwl.de

13 Mandatory provision of your personal data and possible consequences of refusal to provide it

If you do not want recordings of you to be stored, you must remain outside the video surveillance areas. These are signposted.

14. automated decision-making and profiling

No automated decision-making takes place in relation to your person. Likewise, no "profiling" is carried out with the help of the personal data collected from you.

15. change of purpose

If we intend to change the purpose for which your personal data was originally collected, we will inform you of this in advance in a detailed and transparent manner.
In this case, we will of course provide you with all the information required by law.

If the change of purpose involves the processing of personal data on the legal basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.

16. open questions, complaints or suggestions

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If necessary, you can contact our data protection officer (see point 2 of this privacy policy).

Status of the privacy policy: 01.10.2022

Skip to content