Processing of personal data
in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
1. reason for the survey
The district of Bad Tölz-Wolfratshausen maintains a contact database with economic players in companies, authorities, politics, schools and other associations.
2. contact details of the person responsible
Bad Tölz-Wolfratshausen District Office
Prof.-Max-Lange Platz 1
83646 Bad Tölz
Phone: 08041/505-0
E-mail: info@lra-toelz.de
3. contact details of the data protection officer
Bad Tölz-Wolfratshausen District Office
Data Protection Officer
Thomas Schallhammer
Prof.-Max-Lange-Platz 1
83646 Bad Tölz
Phone: 08041 505-263
E-mail: datenschutzbeauftragter@lra-toelz.de
4. purposes and legal bases of data processing
The Economic Development Department is the central point of contact for the economy in the district. Its main tasks include advising companies and start-ups, location marketing and regional management as well as promoting projects and collaborations. These are tasks of the administrative district which it is supposed to fulfill according to Art. 51 of the Landkreisordnung (LKrO). Data processing is permitted if it is necessary for the performance of a task incumbent on the controller (Art. 6 para. 1 subpara. 1 letters c and e GDPR, Art. 4 para. 1 sentence 1 BayDSG). If the data processing is carried out voluntarily on the basis of consent, Art. 6 para. 1 subpara. 1 letter a GDPR applies as the legal basis.
5. categories of personal data that are processed
Contact data (surname, first name, function, address, email address, telephone and fax numbers, bank details) are processed for those responsible in private and public companies, employees in authorities, schools and associations, political actors and others. Company data is also recorded for company employees, such as company name, legal form, surname, first name, function of company employees if applicable, address, email address, telephone and fax numbers, bank details, information on companies, e.g. area of activity, number of employees, turnover, etc.
6. recipients or categories of recipients of the personal data
Access to the collected data is granted to selected employees of the District Administration Office, in particular of Department 15 - Economic Development - and Department 01 - District Administrator's Office. If third-party services are used for processing, the data may be passed on to the processor. In special cases, a transfer to the supervisory authority, the Bavarian State Commissioner for Data Protection, is required.
7. transfer of personal data to a third country
There are no plans to transfer personal data to a third country or to an international organization.
8. duration of the storage of personal data
The personal data is stored temporarily for as long as the above-mentioned purpose requires. The standardized file plan for Bavarian municipalities and district offices (EAPlAufbew) provides for a 10-year retention period under AplZ (file plan reference) 821 (Promotion measures, establishment of trade, crafts and industry). The contact database of the Economic Development Department is updated on an ongoing basis. Changes lead to a constant revision and deletion of old data. If the data subject requests early deletion or revokes a previously given consent, the deletion will take place earlier.
9. rights of data subjects
According to the General Data Protection Regulation, data subjects have the following rights: If their personal data is processed, data subjects have the right to obtain information about the personal data stored about them (Art. 15 GDPR). If incorrect personal data is processed, data subjects have the right to rectification (Art. 16 GDPR). If the legal requirements are met, data subjects can request the erasure or restriction of processing and object to processing (Art. 17, 18 and 21 GDPR). If they have consented to data processing or a contract for data processing exists and the data agreement is carried out using automated procedures, data subjects may have a right to data portability (Art. 20 GDPR). If the above-mentioned rights are exercised, the public body will check whether the legal requirements for this are met.
Furthermore, you have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection. This can be reached using the following contact details:
Postal address: P.O. Box 22 12 19, 80502 Munich
House address: Wagmüllerstraße 18, 80538 Munich
10. right to withdraw consent
If the processing of data is based on consent, data subjects are entitled to withdraw their consent to the use of their personal data at any time in accordance with Art. 7 GDPR. It should be noted that the revocation is only effective for the future. This does not affect processing that took place before consent was withdrawn.
11. obligation to provide the data
There is no legal obligation to provide personal data.