pursuant to Art. 13 EU General Data Protection Regulation (GDPR) CT-Video GmbH
Below you will find an overview of the collection, processing and use of your data.
CT-Video GmbH takes the protection of your personal data very seriously and processes it in accordance with the applicable statutory data protection requirements.
What is personal data?
Personal data is all information that may relate to you personally (e.g. surname, first name, address, etc.).
What is included in this letter?
The following information will give you an overview of the processing of your personal data, which is collected, processed and used by us and on the basis of your data protection rights. Which individual data is collected, processed and used by you depends on the services requested or agreed in each case.
1. Who is responsible for data collection, processing and use and who can I contact?
You can contact our external Data Protection Officer at:
2. Which sources and data do we use and according to which categories are the personal data processed?
We process personal data which we receive from our customers, interested parties, service providers and suppliers in the context of our business relationships. In addition, we process personal data – should this be necessary for the provision of our services – that we permissibly obtain from publicly accessible sources or that is transmitted to us by other companies within CeoTronics AG or by other third parties (e.g. credit agencies).
3. For what purpose and on what legal basis do we process the data?
We process the aforementioned personal data in compliance with the applicable statutory data protection requirements. Processing shall be lawful if at least one of the following conditions is met:
a.) Based on your consent (article 6, para. 1 lit a of the GDPR)
If you have given us permission to process your personal data for specific purposes (e.g. passing on data within the company, using the data for marketing purposes). Your consent is voluntary and can be revoked at any time with effect for the future. This also applies to the revocation of declarations of consent given to us before 2018-05-25.
b.) In order to fulfill contractual obligations or to carry out pre-contractual measures
We process data so that we can fulfill our contractual obligations to provide services for our customers or to carry out pre-contractual measures, which take place on request. The purposes of data processing result primarily from the concrete service/product and can include, among other things, needs analyses and consultations. Further details regarding data processing purposes can be found in the contract documents and General Terms and Conditions.
c.) Based on legal requirements (article 6, para. 1 lit c of the GDPR)
CT-Video GmbH is subject to various legal obligations, which entails legal requirements (e.g. commercial and tax retention periods in accordance with the German Tax Code and the German Commercial Code). The purposes of processing also include the fulfillment of control and reporting obligations under tax law as well as risk assessment and control within the company.
As part of the balancing of interests (article 6, para. 1 (f) of the GDPR)
If necessary, we shall process your data beyond the actual fulfillment of the contract to protect the legitimate interests of the data controller or a third party. Examples are:
4. Who receives my data?
(Categories of recipients of personal data)
Within CT-Video GmbH, the departments that require it to fulfill our contractual and legal obligations have access authorization. CT-Video GmbH may also use carefully selected service providers who comply with data protection regulations to obtain data for these purposes. These are mainly companies in the categories:
When passing on data to other recipients, we may only pass on information about you if this is required by law, if you have consented to the data being passed on or if we are authorized to do so. Recipients of personal data include, but are not limited to:
Other data recipients may be places for which you have given us your consent.
5. Is data transferred to third countries?
An active transfer of personal data to third countries only takes place if this is necessary for the execution of your orders or is stipulated by law.
6. For how long is my personal data stored?
Your personal data will only be stored as long as is necessary for the fulfillment of our contractual and legal obligations.
If the data is no longer necessary for the fulfillment of contractual or legal obligations, it will be deleted regularly unless temporary and limited further processing is necessary for the following purposes:
7. What is the obligation to provide and what are the consequences of not providing data?As part of our business relationship, you must provide the personal information necessary to establish and conduct a business relationship and to fulfill the contractual obligations associated therewith, or which we are required to collect by law. Without this information, we will generally not be able to enter into or execute the contract with you.
8. Is there automated decision making (including profiling)?
In principle, we do not use fully automated decision-making pursuant to article 22 of the GDPR for the establishment and implementation of business relationships. Should we use this procedure in individual cases, we will inform you of this separately if this is required by law.
9. What data protection rights do I have?
4. Who receives my data?
4.1 Within CeoTronics AG, only authorized employees have access to your application data, which they need to fulfill our contractual and legal obligations. All selection decisions are made on a case-by-case basis, not automatically (Art. 22 GDPR).
4.2 Data may be transmitted to, for example, our tax consultant or viewed by our internal IT department and externally engaged companies during the maintenance and servicing of our hardware, software, hosting of our website, service providers for the destruction of documents and data carriers as well as other service providers within the scope of order processing relationships (pursuant to Art. 28 GDPR), insofar as this is necessary for technical reasons for the maintenance of the IT infrastructure, IT security, contractual or legal requirements (within the scope of our legitimate interest pursuant to Art. 6 para. 1 lit. f). All employees and external service providers are bound to secrecy in writing / contractually and may only process data according to written instructions.
4.3 In addition, third parties may receive data for certain purposes if this is required by law as part of your application (e.g. notification to the Federal Employment Agency)
5. How long will my personal data be stored?
5.1 The data will be deleted 6 months after the end of the application procedure if no employment takes place.
5.2 Any storage extending beyond this will take place if you have given us your consent (pursuant to Art. 6 para. 1 lit. a GDPR) or
5.3 we are required by tax and commercial law to keep records and documentation in accordance with
6. What data protection rights do I have?