Data processing

Data processing at Internationale Bauausstellung 2027 StadtRegion Stuttgart GmbH

You reached this page via a link because you want to find out what we do with (your) personal data. In order to meet our information duties pursuant to Article 12 et seq. GDPR, we are happy to provide our information on data protection as follows:

Who is responsible for processing data?

The controller as defined by data protection law is

Internationale Bauausstellung 2027 StadtRegion Stuttgart GmbH
Alexanderstrasse 27
70184 Stuttgart
Germany

You can find further information on our company as well as details of the persons authorised to represent the company and other ways to contact us in the legal notice on our website: www.iba27.de/en/imprint/

What personal data do we process? And for what purposes?

If we have received data from you, we will generally only process these for the purposes for which we received or collected them.

Data processing for other purposes will only take place if the requisite legal provisions pursuant to Article 6 No. 4. GDPR are met. In such cases, we will of course observe any information duties pursuant to Article 13 No. 3 GDPR and Article 14 No. 4. GDPR.

What is the legal basis for processing?

The legal basis for processing personal data is generally – in the absence of more specific legal provisions – Article 6 GDPR. In particular, the following options are possible:

consent (Article 6 No. 1. a) GDPR)
data processing for performance of contracts (Article 6 No. 1. b) GDPR
data processing based on the weighing up of interests (Article 6 No. 1. f) GDPR
data processing for compliance with a legal obligation (Article 6 No. 1. c) GDPR

If personal data are processed based on consent from you, you have the right to revoke consent at any time with respect to future processing.

If we are processing data based on the weighing up of interests, as the data subject you have the right to object to processing of the personal data in accordance with the provisions in Article 21 GDPR.

How long is the data stored for?

We process the data for as long as is necessary for the respective purpose.

To the extent that statutory retention duties apply, for example under commercial or tax law, the personal data in question are stored for the duration of the statutory retention period. At the end of the statutory retention period, we examine whether it is necessary to continue to process the data. If this is no longer necessary, the data are erased.

We examine data at the end of each calendar year to determine whether further processing is necessary. Because of the volume of data involved, this check is carried out in terms of specific types of data or processing purposes.

Naturally you can at any time request information (see below) about the personal data concerning you that are stored by us and require us to erase the data or restrict processing if processing is no longer required.

Which recipients are the data passed on to?

Personal data concerning you is passed on to third parties only if this is necessary for performance of the contract with you, it is permissible to pass on the data based on the weighing up of interests as defined by Article 6 No. 1. f) GDPR, we are legally obliged to pass on the data or you have given consent to passing on the data.

Where are the data processed?

Personal data concerning you are processed by us solely in data centres located in the Federal Republic of Germany.

Your rights as data subject

You have the right to access the personal data concerning you that are processed by us.

Please understand that all requests for information that are not made in writing may be subject to the provision of proof by you that you are in fact the person you claim to be.

You also have a right to rectification or erasure or to restriction of processing to the extent permissible by law.

Furthermore, you have a right to object to processing within the scope provided by law. The same applies to a right to data portability.

In particular you have a right to object pursuant to Article 21 Nos. 1 and 2 GDPR to the processing of your data in connection with direct advertising if this is carried out based on a weighing up of interests.

Our data protection officer

We have appointed a data protection officer at our company. You can contact the data protection officer at datenschutz@iba27.de or using the following postal address:

Internationale Bauausstellung 2027 StadtRegion Stuttgart GmbH
c/o Datenschutzbeauftragter
Alexanderstrasse 27
70184 Stuttgart
Germany

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of personal data by us.

www.bfdi.bund.de/DE/Datenschutz/Ueberblick/MeineRechte/MeineRechte.html

www.baden-wuerttemberg.datenschutz.de/online-beschwerde/

As of: 17 November 2020