DATA PROTECTION

Thank you for your interest in the bcc. In the following paragraphs we will inform you about the collection of personal data when using our website, contacting us and applying for one of our positions offered.

Personal Data

Personal data are all data which are personally related to you, e.g. name, address, e-mail address, IP address and user behavior.

Responsible Party

The responsible party in regard to Article 4(7) EU General Data Protection Regulation (GDPR) is the:

bcc Berlin Congress Center GmbH
Alexanderstr. 11
10178 Berlin (Germany)
+49 30 23806 0
info [at] bcc-berlin [dot] de
www.bcc-berlin.de

Managing Director:
Malte Eisenhardt

Data Protection Officer

Appointed as data protection officer:

Vivien Hoffmann
Internal Operations
+49 30 23806506
datenschutz [at] bcc-berlin [dot] de

Visiting our Website

Type of Data Collected

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer and stores this in our system’s log files. This data is not stored together with other personal data of the user. The following data are collected in order to make the website available and create log files:

  • your IP address
  • the type of browser as well as the version and language
  • your operating system
  • your internet service provider
  • the date and time of access
  • the time zone difference to Greenwich Mean Time (GMT)
  • the content of your request (concrete site)
  • the access status/http status code
  • the data volume transferred
  • the website your request comes from

Purpose of Collecting Data

Temporarily storing the IP address through the system is necessary in order to deliver the website to the user’s computer. The IP address of the user must be stored for the duration of the session. Log files are stored in order to ensure the functionality of the website. In addition, these data allow us to optimise the website and ensure the security of our information technology systems. We do not analyze the data for marketing purposes.

Duration of Storage

The log file data are automatically deleted after seven days.

Session Cookies

In addition to the aforementioned data, a session cookie will be saved on your computer when using our website. A small text file is saved to your hard drive allocated to the browser used and certain information – in this case the fact whether Javascript is activated or not – circulates to us. The session cookie is automatically deleted when you close your browser. Cookies cannot run programs or transmit viruses to your computer.

You can configure your browser settings to suit your wishes and, for example, refuse the use of cookies. In this case it is possible that parts of the website will not be correctly displayed or are not usable.

Integration of Google Maps

We use Google Maps on our website in order to show interactive maps directly on our website and to allow you to use this map function easily. The provider of Google Maps is Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

By visiting the website, Google receives the information that the corresponding sub-websites were called up from your IP address. The IP address as well as the data mentioned prior under "Type of data collected" will be passed on to Google. We have no influence on this data transmission and the further use of these data by Google. As far as we know, Google uses these data for advertising, market research and/or tailoring their internet services. This type of analysis is also done with users who do not have a Google account or who are not logged in to their Google accounts to provide tailored advertisements and to inform other users of the social network about your activity on our website. Please find further information about the purpose and extent of data collection and the analysis by Google in their privacy policy. Here you can also find further information regarding your rights and setting options. Google uses your personal data in the USA as well and is also subject to the EU-US Privacy Shield.

Legal Basis

The legal basis for the use of data in these clauses (log file data, session cookie and integration of Google Maps) is point (f) of Article 6(1) GDPR. Our justifiable interests are to make the use of our website flawless for you, to display interactive maps on the website and to clearly show our accessibility by public transportation.

Contacting us (e.g. by e-mail)

Type of Data Collected

It is possible to contact us through the e-mail addresses provided on our website. In this case, the personal data shared in the e-mail will be saved. This refers to your e-mail address, business contact information (e.g. your name, company, work or private telephone number, etc.) and any other data is shared in the e-mail.

Purpose of Collecting Data

We use this date in order to respond to your enquiry or questions and to ensure communication with you, to initiate contracts with you or your company and to fulfill our precontractual duties. If a contract is signed between you or your company and the bcc, we will save or keep your data in order to fulfill the contract and for invoicing purposes.

Legal Basis

The legal bases for the use of data in these clauses are point (b) and (f) of Article 6(1) GDPR. Our interest in this case is to be able to respond to your enquiry/first contact.

Duration of Storage

We store your data until you request that we delete the data, you revoke your consent or the purpose of data storage is no longer relevant, or you limit the use in case statutory storage obligations apply.

Clients and Business Partner

Type of Data Collected

We will store personal data such as your name and business contact details (e.g. the company you work for, address, telephone number and e-mail address) in the context of business acquisition or a business relationship. Storing further data (e.g. contact details of other colleagues, contact persons, or decision-makers) may be necessary in the course of fulfilling the contract. This also includes data or documents (e.g. e-mails, business letters, production plans and schedules) which may in turn contain isolated personal data. Providing this data may be necessary in order to close or fulfill the contract.

We do not use your data for profiling or any other automated decision-making nor for analysis.

Purpose of Collecting Data

Your data is collected for the purpose of closing the contract. This includes answering your precontractual questions and fulfilling the contract including the necessary communication with you for this.

Legal Basis

The legal basis for the use of your data is generally point (b) of Article 6 (1) GDPR, and to the extent that precontractual measures must be taken not based on your request, also point (f) of Article 6 (1) GDPR. In this case our justifiable interest is to make you an offer or make negotiations regarding our services.

Transfer of Data

In order to fulfill the contract, it may be that we pass your data on to third parties involved in the initiation and fulfillment of the contract such as vendors and subcontractors including IT service providers, banks or payment service providers and credit agencies. We have a contract with them about the order processing according to Article 28 (3) GDPR, insofar as this is required.

In individual cases we may be obligated to pass your data on to public authorities or to comply with a court order.

Duration of Storage

We will delete your data as soon as it is no longer necessary for the purpose of business acquisition and fulfilling the contract and assuming the deletion does not violate statutory storage obligations. If we do not delete the data, we will limit the use. Statutory storage obligations could be related to tax or commercial law and may last up to ten years.

Application

Type of Data Collected

We offer various open positions on our website and look forward to your application. The application is done electronically by sending the bcc GmbH your documents via e-mail as PDF files. In the application process, personal data such as your letter of application, CV, school report, first and last name, address, gender, birthday, place of birth, telephone number and e-mail address will be used and stored.

Purpose of Data Collected

We use your personal data exclusively for the purpose of the application process. We record your gender in order to properly address you in further communication. We need to know your birthday because there is a legal minimum age to work for our company.

Legal Basis

The legal basis for the processing is § 26 Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) in connection with Article 88 GDPR.

Duration of Storage

If the application does not result in an employment contract, all recorded personal data will be automatically deleted six months after the position is declined, as long as deleting the data does not conflict with other justified interests. A justified interest in this case would be, for example, the burden of proof in a procedure according to the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).

Video Surveillance

Type of Data Collected

We use video surveillance on the property and in the building of the bcc GmbH. In the recording area of the installed cameras, we store the image of the persons who enter the property or the building as well as other identifiers such as clothing and belongings carried by the persons.

Purpose of Data Collected

Video surveillance is carried out for the purpose of safeguarding house rights, prevention of and clarification of criminal offences as well as preservation of evidence and protection of the building, property as well as employees and guests.

Legal Basis

The legal basis for the processing is point (f) of Article 6 (1) GDPR.

Transfer of Data

In the event of suspicion of criminal offences, we may pass on the data to law enforcement agencies. Otherwise, the data will only be disclosed if there is a legal basis for the disclosure. This may be the case, in particular, if the police or other security authorities become active in the context of so-called danger prevention and demand access to the video surveillance data.

Duration of Storage

The storage period of the video recordings is a maximum of six days, unless longer storage is necessary for the purpose of stated legitimate interests. Deletion will only take place after the purpose for processing has ended. If incidents are relevant for an investigation or legal proceedings, they will be stored for the duration of the proceedings or in accordance with statutory retention periods.

 

Your rights in regard to your personal data

You have the right to request disclosure free of charge about your personal data, the purpose of the processing, the receiver, if possible the duration of storage and – in case the data was collected by third parties – their origin. Furthermore, according to legal requirement, you can request the suspension as well as the deletion or a restriction of the use of your data. You also have the right to data portability.

Insofar as the use of your personal data by us is based on your consent, you may retract this consent at any time. Please send an e-mail to the data protection officer of the bcc at datenschutz [at] bcc-berlin [dot] de.

Regulating authority responsible for data protection

You have the option to contact the data protection officer of the bcc or a regulating authority responsible for data protection. The regulating authority responsible for data protection for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin

Version 482363-010
Berlin, 01/11/2022