DATA PROTECTION

How TLT-Turbo GmbH processes your personal data

According to Article 13 and Article 14 of the GDPR, TLT-Turbo GmbH as well as regulations of the Federal Data Protection Act (BDSG) and Telemedia Act (TMG) helps our customers make informed decisions about the data that we collect and use. The information below pertains to business processes that entail the purpose/s for which personal data is collected, and how it is collected and processed. TLT-Turbo GmbH commits to informing you, where necessary, of additional collection or processing of your personal data in special circumstances in accordance with GDPR regulations.

Person Responsible for the Processing of Personal Data

Under the GDPR Act, a ‘Controller’ or ‘Responsible Person’ must be appointed. This person oversees the collection, control and processing of your personal data according to GDPR regulations.

TLT-Turbo GmbH Data Protection Officer Contact

TLT-Turbo GmbH
Gleiwitzstr. 7
66482 Zweibruecken
Germany

Tel:
+49 6332 808-0

Fax:
+49 6332 808-267

Email:
tlt@tlt-turbo.com

Reasons for Processing of Personal Data

Purposes of contractual relationship

In accordance with Art. 6 Sec. 1 lit. b) GDPR, your personal data must be processed if you have a contractual relationship with TLT-Turbo GmbH or one of our entities. This includes pre-contractual actions.

Purposes of voluntary additional services, activities or campaigns

This pertains to the collection and processing of personal data for additional services and for marketing and advertising activities for which you have provided your consent. Your consent to these activities is given voluntarily and can be withdrawn at any time by contacting the relevant business unit.

Purposes required in specific business arrangements and where the business interest outweighs privacy attributes

According to Art. 6 Sec. 1 lit. f) GDPR and Art. 21 GDPR, in the general course of carrying out day to day business operations, we would need to process your personal data for general business purposes.

Purposes of general legal obligations

According to Art. 6 Sec. 1 lit. c) GDPR together with the respective national rule, your personal data will, on occasion, need to be processed for general legal provisions. These provisions can vary according to your national legislation. Common instances can include laws relating to finance and labor.

Processing of special types of personal data

The processing of special types of personal data according to Art. 9 Sec.1 GDPR (“sensitive” data, in particular health data) is carried out only in accordance with Art. 9 GDPR which pertains to your consent or if this is necessary for the assertion, exercise or defense of legal rights.

Data Retention Period

Your personal data is retained (or stored) for as long as it is required to conclude your transaction, business dealings or inquiry. In general, a first check takes place at the end of a duration of three years to answer the question if data is still required and whether deletion is in conflict with legal retention obligations. This excludes data that is subject to legal or other prescribed data retention requirements.

Transfer of Data

Data is only transferred or shared with third parties insofar as it is required according to business relationships or as permitted by law. For the settlement of claims or the handling of compliance processes, it is generally necessary to pass on the information within the TLT-Turbo GmbH business units. Recipients of personal data can also include authorities.

Selected TLT-Turbo GmbH internal and external service providers also receive data. All typical service providers that receive data are bound both contractually and by law to safeguard data and to follow all required data protection measures as required by the GDPR Act.

TLT-Turbo GmbH is an international company with entities located both inside and outside of Europe. Therefore, data transfer to a country outside the EU may be required. Data is transferred only if the legal requirements are met. To ensure this, TLT-Turbo GmbH has put standard data protection clauses in place to for the protection of personal data.

Your Rights

The GDPR provides the following rights for individuals:

The right to be informed

Individuals have the right to be informed about the collection and use of their personal data at the time at which the data is collected. This is a key transparency requirement under the GDPR. Individuals with information including: the purposes for processing their personal data, retention periods for that personal data, and who it will be shared with.

The right of access

Individuals have the right to access their personal data. This is commonly referred to as subject access. Individuals can make a subject access request verbally or in writing.
TLT-Turbo GmbH has one month to respond to a request however, the exercise of such right should not adversely affect the rights or freedoms of others, including trade secrets or intellectual property and in particular, the copyright protecting the software.

The right to rectification

The GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete. An individual can make a request for rectification verbally or in writing. TLT-Turbo GmbH has one calendar month to respond to a request. According to the controller’s obligations under the accuracy principle of the GDPR (Art. 5 Sec. 1 lit. d) GDPR), in certain circumstances we may refuse a request for rectification.

The right to be erased

The GDPR includes a right for individuals to have personal data erased where such data are no longer necessary in relation to the purposes for which they were collected or where consent has been withdrawn. The right to erasure is also known as ‘the right to be forgotten’. Individuals can make a request for erasure verbally or in writing. TLT-Turbo GmbH has one month to respond to such a request.

The right to restrict processing

Individuals have the right to request the restriction or suppression of their personal data where they have a particular reason for wanting the restriction. When processing is restricted, TLT-Turbo is permitted to store the personal data, but not use it. An individual can make a request for restriction verbally or in writing. TLT-Turbo GmbH has one month to respond to such a request.

The right to data portability

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy, or transfer personal data from one IT environment to another in a safe and secure way, without affecting its usability. The right only applies to information which an individual has provided to a controller.

The right to object

The GDPR gives individuals the right to object to the processing of their personal data in certain circumstances. Individuals have an absolute right to stop their data being used for direct marketing, profiling or research. An individual can make an objection verbally or in writing. TLT-Turbo GmbH has one month to respond to such an objection. Following an objection, a controller will no longer be allowed to process your personal data unless he/she can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

The right to appeal to a supervisory authority

If the processing of your personal data is not GDPR compliant, you have the right to lodge a complaint with supervisory authorities, who are obliged to inform you of the progress and outcome of your complaint.

Right to be notified of a personal data breach

You have the right to be immediately informed by the controller if a data breach incident has taken place which might affect you and which could result in a risk to your rights.

In case of any such request, please contact: datenschutz@tlt-turbo.com

Updates

The above policies are updated when required by law. This version was last updated in August 2019.