In order to comply with our obligations to inform you about the processing of your data as stipulated in Articles 12 and 13 of the General Data Protection Regulation (GDPR), we hereby provide you with the following data protection information, which only applies to the business sector (B2B):
Who is in charge of data processing?
The controller in terms of the GDPR is
TourismusMarketing Niedersachsen GmbH
Essener Str. 1
30173 Hanover
Telephone +49 (0) 511 / 270 488 0
Fax +49 (0) 511 / 270 488 88
info@tourismusniedersachsen.de
Our Data Protection Officer
We have appointed an external Data Protection Officer. You can contact them via the following channels:
List + Lohr Datenschutz und Informationssicherheit GmbH
Garvensstraße 4
30519 Hanover
Email: datenschutz@tourismusniedersachsen.de
Which of your data do we process? And for what purpose?
If we receive personal data from you, we will generally only use these for the same purposes for which we received or gathered them.
These purposes are generally:
- communication with TMN employees
- To be added to our internal contacts database (Cobra)
- To be added to the database of certified businesses that we maintain
These personal data are usually:
- First name/surname
- Company
- Company address
- Company email address
- Company telephone number
- Communications log
- Department and/or position
Other personal data provided by you in relation to our business relations will also be processed.
The processing of data for any other purpose will only be considered if legally required according to Article 6(4) GDPR. We will of course comply with any obligation to inform those affected in accordance with Article 13(3) GDPR.
What is the legal basis for this processing?
Generally, the legal basis for the processing of personal data is to fulfil the purpose of the contract (Article 6(1)(b) GDPR). Processing is necessary for the protection of the valid interests of the controller and is not excessive (Article 6(1)(f) GDPR).
We have a valid interest in processing your data to allow us to contact you about working with TMN. As the data subject, you have the right to object to the processing of your personal data under the provisions of Article 21 GDPR.
How long will the data be stored?
Personal data will be deleted as soon as
- you leave as an employee of a TMN partner or
- the service contract ends, unless we are obliged to continue processing your data due to statutory retention obligations
Who will the data be passed on to?
Generally, your personal data will not be passed on to third parties. In isolated cases, your data may be passed on to relevant partners of TMN for the purpose of establishing contact.
Where are the data processed?
We process your personal data exclusively in European Union data centres, meaning the General Data Protection Regulation applies to the processing at all times.
Your rights as the data subject
You have the right to access your personal data in accordance with Article 15 GDPR. For requests for information not made in writing, we ask for your understanding that we may require evidence from you to prove that you are the person you claim to be. In addition, you have the right to the rectification or erasure of your data or to restrict processing to the extent legally stipulated by Articles 16, 17 and 18 GDPR.
Furthermore, you also have the right to object to the processing as stipulated by the relevant legal provisions. The same applies to your right to data portability. In particular, under Article 21(1) and (2) GDPR you have the right to object to the processing of your data in relation to its storage in the applicant pool. You can register your objection with us in any form or with our Data Protection Officer.
The right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority for data protection regarding our processing of personal data.