last amended 05/2020

We take the protection of your personal data very seriously and endeavour to keep you comprehensively informed about the processing of your personal data. The following data protection information will inform you as to how and for what purpose we process your personal data if you visit our website or contact us.

In principle, we collect your personal data from you directly. The legal basis is provided in particular by the EU General Data Protection Regulation (GDPR).

For the following data processing within the meaning of Art. 4 no. 7 GDPR, the controller is:

• Schwarz Campus Service GmbH & Co. KG
• Stiftsbergstraße 1
• 74172 Neckarsulm

2.1. Purposes and legal basis for data processing

Personal information you give us by email/telephone/mail/contact form will, of course, be treated confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for the data processing is Art. 6 (1) lit. f) GDPR. The legitimate interest derives from a desire to answer your enquiries and thus maintain and promote customer satisfaction.

2.2. Recipient/categories of recipients

We categorically exclude any transfer of data to third parties outside Schwarz Campus Service GmbH & Co. KG. In exceptional cases, data are processed by processors on our behalf, who are carefully selected, audited by us and contractually bound under Art. 28 GDPR.

2.3. Your obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data. However, if you do not provide us with the data required to process your enquiry, we will not be able to process or answer your enquiry.

2.4. Storage period

All personal data that you send to us in connection with enquiries will be deleted or securely anonymised by us no later than 90 days after the final reply to you. The reason for the 90-day retention period is due to the fact that there may be occasions when you contact us again on the same matter after we have sent you a reply and we must then be able to refer to the previous correspondence. Experience has shown that, as a rule, there are no further queries about our replies after 90 days.

In the event that you assert your rights as a data subject, your personal data will be stored for three years after the final reply to prove that we have provided you with comprehensive information and that the statutory requirements are met.

3.1. Purposes and legal basis for data processing

When you visit this website, log files with the following content are generated:

• - the website from which you access our site;
• - the IP address;
• - the date and time of access;
• - the client's enquiry;
• - the http response code;
• - the amount of data transferred;
• - information about the browser and operating system being used by you.

The legal basis for the data processing is Art. 6 (1) lit. f) GDPR. The legitimate interest derives from the protection of our systems and the prevention of improper or fraudulent conduct whenever a user accesses this website.

3.2. Recipient/categories of recipients

In exceptional cases, your personal data may be accessible for support and maintenance purposes by Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, because the website and your data are hosted and stored on servers provided and operated by Schwarz IT KG on our behalf.

3.3 . Your obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data. However, the data mentioned will be processed for technical reasons as soon as you access our site. If you do not want to provide us with the data, you will unfortunately not be able to use our website.

3.4. Storage period

The data are stored by us until they are no longer required to fulfil the above-mentioned purposes.

According to Art. 15 (1) GDPR, you have the right to obtain information free of charge about your stored personal data.

In addition, if the statutory requirements are met, you have the right to rectify (Art. 16 GDPR), erase (Art. 17 GDPR) and restrict the processing of (Art. 18 GDPR) your personal data.

If the data processing is based on Art. 16 (1) lit. e) or f) GDPR, you have the right to object according to Art. 21 GDPR. If you object to processing of personal data, it will no longer be processed unless the controller can demonstrate compelling legitimate grounds for further processing which override the interest of the data subject in the objection.

If you have provided the processed data yourself, you have a right to data portability in accordance with Art. 20 GDPR.

If the data is processed on the basis of consent pursuant to Art. 6 (1) lit. a) or Art. 9 (2) lit. a) GDPR, you may revoke the consent at any time with effect for the future without affecting the lawfulness of the previous processing.

In the above-mentioned cases or if you have any open questions or complaints, please contact the data protection officer in writing or by email. You also have the right to complain to a data protection regulatory authority. The data protection regulatory authority of the federal state in which you live or in which the controller has its registered office.

Should you have any further questions regarding the processing of your data or on exercising your rights, you may contact the controller's competent data protection officer:

• Schwarz Campus Service GmbH & Co. KG
• Data protection officer
• Stiftsbergstraße 1
• 74172 Neckarsulm

Email: datenschutz@mail.schwarz