1. Who is responsible for processing my data and who can I contact?

Controller:
Medizinpark Valley
Medizinpark 1
83626 Valley/Oberlaindern

Telefon: +49 (0) 80 24 / 60 81 8-210
Email : info@medizinpark-valley.de

2. We process your data for the following purposes and on the following legal basis:

We process your personal data to provide our service and process the contract (billing of the charging processes). The legal basis is Art. 6 para. 1 lit. b) GDPR.

In addition, our facilities are under video surveillance. The legal basis is Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest. Legitimate interests being pursued are:

• Property protection
• Prevention and detection of criminal offences (fuel theft and vandalism)

3. Who receives your data?
Within our company, employees have access to your data in the context of processing and implementing our legitimate interests.

Your data will only be passed on to service providers (order processors) if this is necessary for the fulfilment of our contractual tasks (e.g. support/maintenance of EDP/IT applications, accounting, data destruction). All service providers are obligated based on an order processing contract to treat data as confidential.

In relation to the sharing of data with recipients outside our company, it should be noted that we only pass on essential personal data while complying with the applicable data protection regulations. Subject to these conditions, recipients of personal data might be for instance:

• public bodies and institutions (e.g. tax authorities, law enforcement agencies) in the event of a legal or official obligation,
• credit and financial services institutions (processing of payment transactions)
• tax advisors, business and income tax auditors (statutory audit engagement)

4. For how long will your data be stored?
96 hours (on weekends and public holidays plus the times when no business is conducted)

5. What data protection rights do you have?
Every data subject has the right to information under Article 15 of the GDPR, the right to correction under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.

The restrictions according to §§ 34 and 35 BDSG apply to the right of information and the right of deletion.

In addition, you have the right to appeal to a competent data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) | Promenade 27 | 91522 Ansbach | +49 (0) 981 53 1300 | +49 (0) 981 53 98 1300 | poststelle@lda.bayern.de