Data protection information in connection with our surveys
1. data controller and data protection officer; contact
Kienbaum Consultants International GmbH
Edmund Rumpler Strasse 5
51149 Cologne, GERMANY
Phone: +49 (221) 801 72-0
Fax: +49 (221) 80172-172
Attorney Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
2. Object of Data Protection: Personal information
Data protection covers the protection of personal information. Such data are defined as all information relating to an identified or identifiable natural person (‘data subject’). This includes information such as name, address, telephone number or email address.
3. Purpose, nature, scope and legal basis of data processing
a) Purpose of the data processing
Depending on the content of the survey, the data processing serves the purposes described below:
- If we ask you as part of our customer satisfaction survey, data processing serves to determine the satisfaction of our customers and business partners with our services and communication with you.
- If we ask you in connection with studies conducted by us, the survey serves to determine a representative opinion or representative statements on the content of the respective study and communication with you.
b) Legal Basis
The legal basis for the data processing is your consent in accordance with Art. 6 Par. 1 letter a) GDPR.
4. Receivers of personal information
Within Kienbaum Consultants International GmbH, access to your data is granted to those departments that need it to evaluate the survey and to fulfill any legal obligations of Kienbaum Consultants International GmbH. Processors commissioned by Kienbaum Consultants International GmbH (Art. 28 GDPR) may also receive data for these purposes.
5. Retention period
We process and store your personal data that has been collected separately in connection with the survey for as long as it is necessary to fulfill the purpose described under point 3 letter a., but for no longer than six months. Insofar as the storage of your data serves the purpose of obtaining evidence, the statutory limitation periods pursuant to section 195 et seq. of the German Civil Code (BGB) shall apply. According to these, the limitation periods can be up to thirty years, whereby the regular limitation period is three years.
6. Rights of data subjects
With respect to the processing of your personal information, you are entitled as a data subject to assert your rights against us. We outline below the rights granted to you as a data subject:
Right of information: You have the right to demand information concerning your personal data processed by us.
Right of correction: You can demand the correction and complementation of incorrect or incomplete personal information concerning you.
Right of deletion: Where legal preconditions are met, you have the right to demand deletion of your personal information.
Restriction of processing: Where legal preconditions have been met, you can demand that the processing of your personal information be restricted.
Data portability: Where legal preconditions have been met, you have the right to receive the personal information you made available to us in a structured, standard and machine-readable format, and to transmit this information to another responsible party without hindrance, or to have us transmit it to another responsible party.
Revocation of consent: If you have consented to our processing of your data, you may revoke this consent at any time for future effect. Any processing of your personal information prior to your revocation of consent remains lawful.
Right to appeal to supervisory authority: If you believe that the processing of your personal information is in violation of data protection law, you can file an appeal with the responsible supervisory authority. You should contact the supervisory authority of your place of residence, your workplace, or the place of the suspected violation.
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf, Tel.: 0211/38424-0, Fax: 0211/38424-10, E-Mail: email@example.com.
7. requirement to provide your personal information
Your provision of personal data concerning you is voluntary, there is no obligation to do so.