Emergency contact details for employees

Information for persons affected about the processing of their personal data as per Article 14 GDPR by Bernard van Lengerich Maschinenfabrik GmbH

Category: Emergency contact details for employees (M/F/X)
 

To comply with our information obligations as per Art. 14 of the General Data Protection Regulations (GDPR), we are pleased to provide you with the following information about data protection:

I. Name and contact details of the Controller

In accordance with Art. 4(7) GDPR and other national data protection laws of Member States and other data protection regulations, the Controller is:

Bernard van Lengerich Maschinenfabrik GmbH & Co. KG
Grenzstraße 16
48488 Emsbüren
Tel.: +49 5903 951 0
Fax: +49 5903 951 34
Email: info@bvl-group.de
Website: https://www.bvl-group.de/
 

II. Contact details of the Data Protection Officer

Email: datenschutzbeauftragter@bvl-group.de

or our postal address with the addition of “F.A.O. The Data Protection Officer”:

Bernard van Lengerich Maschinenfabrik GmbH (hereinafter referred to as BvL)
Grenzstraße 16
48488 Emsbüren, Germany
 

III. Purpose and legal grounds for processing your personal data

We process your data for the purpose of being able to inform you of the situation should your relation be involved in an emergency that may affect the person’s health using the contact details provided (see point IV).

Collection and storage is on the basis of the legitimate interests of a third party as per point (f) of Art. 6(1.1.) GDPR. By “third party”, we are referring to our employee, your relative. Our employee has a legitimate interest that we can contact you should they be involved in an accident.
 

IV. Description of the personal data categories

Personal data is all data that can be attributed to you personally. In this instance, it includes: Last name, first name, telephone number, mobile number and possibly details as to your relationship with the person (e.g. partner, child, parent).
 

V. Recipient or categories of recipient who obtain personal data

BvL employees who need your personal data to contact you in the event of an emergency. Possibly the investigating authorities to clarify the cause of the accident.
 

VI. No transfer to third countries and no transfer to an international organisation

Your personal data is not transferred to a third country or an international organisation, and is not intended.
 

VII. Retention period of your personal data

We process and store your personal data for only as long as the person for whom you are the emergency contact still has an employment relationship with us. Following the conclusion of this employment relationship, your personal data will be deleted and destroyed in a manner that is data-protection compliant.
 

VIII. Rights of persons affected

If your personal data is processed, you are considered a Data Subject as per GDPR and you are entitled to the following rights vis-à-vis the Controller (BvL):

1. Right of access
Under the provisions of Art. 15 GDPR, you shall have the right to obtain from the Controller at any time confirmation as to whether or not, and how, your personal data is being processed by us.

2. Right to rectification
Under the provisions of Art. 16 GDPR, you shall have the right to obtain from the Controller the rectification and/or completion of incomplete data, provided the processed personal data that affects you is incorrect or incomplete. The Controller must rectify the data without undue delay.

3. Right to restriction of processing
Under the provisions of Art. 18 GDPR, you shall have the right to obtain from the Controller restriction of processing.

4. Right to erasure and the “right to be forgotten”
Under the provisions of Art. 17 GDPR, you shall have the right to obtain from the Controller the erasure of your personal data and to exercise the right to be forgotten.

5. Right of notification
If you have exercised your right to obtain from the Controller rectification, erasure or restriction of processing, they are obligated to communicate any rectification or erasure of personal data o restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. Under the provisions of Art. 19 GDPR, you shall have the right to be informed of those recipients.

6. Right to data portability
Under the provisions of Art. 20 GDPR, you shall have the right to receive your personal data, which you provided to the Controller, in a structured, commonly used and machine-readable format.

7. Right to object 
Under the provisions of Art. 21 GDPR, you shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6(1) GDPR, including profiling based on those provisions. As the Controller, BvL shall no longer process your personal data unless BvL demonstrates legitimate grounds for the processing which override your interests, rights and freedoms as the Data Subject or for the establishment, exercise or defence of legal claims.

8. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if your consider that the processing of your personal data infringes GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The State Data Protection Supervisory Authority responsible for BvL is:

The State Data Protection Commissioner for Lower Saxony
Prinzenstraße 5 
30159 Hanover, Germany
Telephone: +49 511 120 45 00
Fax: +49 511 120 45 99
Email: poststelle@lfd.niedersachsen.de

VIII. Data origin
We process personal data that we have obtained from our employees in relation to your emergency contact details.

IX. Requirement to provide data
Not providing this data may result in the registered emergency contact not being able to be contacted.

X. No automated decision-making or profiling
No automated decision-making or profiling occurs as per Art. 22 GDPR.