Information Obligation

Contact details for all affected groups

Name and contact details of the responsible office (Art. 13 Abs. 1 a DS-GVO)

Virtual Forge GmbH
Speyerer Str. 6
69115 Heidelberg
E-Mail: contact@virtualforge.com

Name and contact details of the data protection officer (Art. 13 Abs. 1 b DS-GVO)

ENSECUR GmbH
Amalienstr. 24
76133 Karlsruhe
Personally responsible: Mr. Thorsten Jordan
E-Mail: dsb-vf@ensecur.de

 

Information Obligation for Customers

Purposes and legal basis of the data processing (Art. 13 para. 1 c GDPR)
•    Processing of customer inquiries and orders (Art. 6 para. 1 b GDPR)
•    Settlement with cost objects (Art. 6 para. 1 b GDPR)
•    Implementation of marketing measures (Art. 6 para. 1 a GDPR)

Interests of the controller in balance of interests (Art. 13 para. 1 d GDPR)
•    Assertion of legal claims and defense in legal disputes
•    Ensuring IT security and IT operation of the company
•    Prevention of crimes
•    Business management measures and further development of services and products

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
Advertising agencies, IT service providers, suppliers, health insurance companies, billing service providers

Data transfer to third countries (Art. 13 para. 1 f GDPR)
No data is transferred to third countries.

Storage period in accordance with legal retention obligations (Art. 13 para. 2 a GDPR)
Typically, ten years or on revocation by a customer.

Right to information, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject, you have at any time the right of access to your data, the right to rectification and erasure of your personal data, and to restriction of processing, and the right to data portability. For this purpose, please contact the controller using the specified contact details.

Right to object (Art. 21 para. 1 GDPR)
If your personal data is processed to safeguard legitimate interests, you have the right to object to this processing at any time, using our contact details, if there are compelling grounds relating to your particular situation that prevent this data processing. We will then discontinue this processing unless it serves overriding interests worthy of protection on our part. 

Right to lodge a complaint (Art. 13 para. 2 d GDPR)
As the data subject, you have the right to lodge a complaint at any time with the responsible commissioner for data protection and freedom of information in Baden-Württemberg.

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The collected data is required for conclusion of the purchase contract. Data for marketing purposes is provided voluntarily.

 

Information Obligation for Interested Parties/Customers

Purposes and legal basis of the data processing (Art. 13 para. 1 c GDPR)
•    Handling and processing of queries from interested parties (Art. 6 para. 1 f GDPR*)
•    Sanction list screening (Art. 6 para. 1 c GDPR in conjunction with Regulation (EC) No. 2580/2001 against other terror suspects and organizations, and Regulation (EC) No. 881/2002 against Osama bin Laden, Al-Qaida and the Taliban)
•    Quotation for interested parties (Art. 6 para. 1 f GDPR*)
•    Conclusion of purchase contracts (Art. 6 para. 1 f GDPR*)
•    Compliance with legal obligations (Art. 6 para. 1 c GDPR)
•    Support for operational processes by service provider (Art. 28 GDPR)
•    Order processing and delivery (Art. 6 para. 1 c GDPR)
•    Processing of complaints (Art. 6 para. 1 c GDPR)

*Interests of the controller in balance of interests (Art. 13 para. 1 d GDPR)
•    Assertion of legal claims and defense in legal disputes
•    Ensuring IT security and IT operation of the company
•    Prevention of crimes
•    Business management measures and further development of services and products

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
Authorities, banks, auditors, software manufacturers, associated companies

Data transfer to third countries (Art. 13 para. 1 f GDPR)
No data is transferred to third countries.

Storage period in accordance with legal retention obligations (Art. 13 para. 2 a GDPR)
The personal data is generally erased within ten years of termination of the contract relationship, or earlier if an interested party does not become a customer.

Right to information, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject, you have at any time the right of access to your data, the right to rectification and erasure of your personal data, to restriction of processing, and the right to data portability. For this purpose, please contact the controller using the specified contact details.

Right to object (Art. 21 para. 1 GDPR)
If your personal data is processed to safeguard legitimate interests, you have the right to object to this processing at any time, using our contact details, if there are compelling grounds relating to your particular situation that prevent this data processing. We will then discontinue this processing unless it serves overriding interests worthy of protection on our part.

Right to lodge a complaint (Art. 13 para. 2 d GDPR)
As the data subject, you have the right to lodge a complaint at any time with the responsible commissioner for data protection and freedom of information in Baden-Württemberg.

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The collected data is required for the processing of queries by interested parties, for drawing up of offers, for conclusion of sales contracts, or for carrying out business operations.

Information Obligation for Applicants

Purposes and legal basis of the data processing (Art. 13 para. 1 c GDPR)
Handling of applications/eRecruiting (§ 26 para. 1 of the revised version of the Federal Data Protection Act (BDSG-neu))
Inclusion in an applicant pool for subsequent contact (Art. 6 para. 1 a GDPR)

Interests of the controller in balance of interests (Art. 13 para. 1 d GDPR)
Not applicable.

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
For example: Recruitment agencies, payroll office, supplier of software-supported applicant portal

Data transfer to third countries (Art. 13 para. 1 f GDPR)
No data is transferred to third countries.

Storage period in accordance with legal retention obligations (Art. 13 para. 2 a GDPR)
The personal data is erased six months after termination of the application process taking § 61b para. 1 of the Labor Court Act (ArbGG) in conjunction with § 15 of the General Act on Equal Treatment (AGG) into consideration. If the applicant is included in the applicant pool, the data is erased after two years if no appropriate position can be offered.

Right to object (Art. 21 para. 1 GDPR)
If your personal data is processed to safeguard legitimate interests, you have the right to object to this processing at any time, using our contact details, if there are compelling grounds relating to your particular situation that prevent this data processing. We will then discontinue this processing unless it serves overriding interests worthy of protection on our part. 

Right to information, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject, you have at any time the right of access to your data, the right to rectification and erasure of your personal data, and to restriction of processing, and the right to data portability. For this purpose, please contact the controller using the specified contact details.

Right to lodge a complaint (Art. 13 para. 2 d GDPR)
As the data subject, you have the right to lodge a complaint at any time with the responsible commissioner for data protection and freedom of information in Baden-Württemberg.

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The collected data is required for implementation of the application procedure. Non-provision shall mean that the application procedure cannot be carried out.

Information Obligation for Service Providers and Suppliers

Purposes and legal basis of the data processing (Art. 13 para. 1 c GDPR)
•    Purchase and handling of support services for business purposes (Art. 6 para. 1 f GDPR*)
•    Compliance with legal obligations (Art. 6 para. 1 c GDPR)
•    Sending of informational materials (Art. 6 para. 1 b GDPR)

*Interests of the controller in balance of interests (Art. 13 para. 1 d GDPR)
•    Assertion of legal claims and defense in legal disputes
•    Ensuring IT security and IT operation of the company
•    Prevention of crimes
•    Business management measures and further development of services and products

Recipients or categories of recipients of the personal data (Art. 13 para. 1 e GDPR)
Authorities, banks, auditors

Data transfer to third countries (Art. 13 para. 1 f GDPR)
No data is transferred to third countries.

Storage period in accordance with legal retention obligations (Art. 13 para. 2 a GDPR)
The personal data is typically erased within ten years of termination of the employment relationship, unless a longer storage duration exists in exceptional cases or in the case of revocation by the employee.

Right to information, rectification, erasure, restriction, data portability and objection (Art. 13 para. 2 b GDPR)
As a data subject, you have at any time the right of access to your data, the right to rectification and erasure of your personal data, and to restriction of processing, and the right to data portability. For this purpose, please contact the controller using the specified contact details.

Right to object (Art. 21 para. 1 GDPR)
If your personal data is processed to safeguard legitimate interests, you have the right to object to this processing at any time, using our contact details, if there are compelling grounds relating to your particular situation that prevent this data processing. We will then discontinue this processing unless it serves overriding interests worthy of protection on our part. 

Right to lodge a complaint (Art. 13 para. 2 d GDPR)
As the data subject, you have the right to lodge a complaint at any time with the responsible commissioner for data protection and freedom of information in Baden-Württemberg.

Existence of a requirement to provide personal data (Art. 13 para. 2 e GDPR)
The collected data is required for conclusion and performance of the employment relationship.