Our privacy principles

General privacy information according to Art. 13 GDPR for processing your data

 

 

1. General information

On the basis of the obligation to provide information according to Art. 13 of GDPR, we would like to inform you transparently about the processing of your data.

Responsible for the processing

BUK Familienbewusstes Personalmanagemt GmbH
Schwanenwall 31
44135 Dortmund
Phone 0231 557408-0   
info@buk-fs.de

External Privacy Officer

We have appointed an external privacy officer.

Fabio Pastars
DPN Datenschutz GmbH & Co. KG
Helmholtzstraße 26
41747 Viersen
datenschutz@buk-fs.de

2. Purposes and legal bases of the processing

We collect and process your personal data for the following purposes:

Processing of data of the employees of our clients

  • For the purpose of information, consultation and mediation of services in the area of child care, we collect the following data, for example: Name, first name, date of birth of the child, company (your employer), address, telephone, e-mail. If necessary, for the given care situation, also data on the child's health, for example information on allergies, intolerances, medication or the degree of the severe disability. This processing is based on the following legal bases:

    • Your permission according to Art. 6 para. 1 lit. a GDPR, which you can revoke at any time via info@buk-fs.de.
    • For the performance of the contract or also for the implementation of pre-contractual arrangements on the basis of Art. 6 para. 1 lit. b GDPR.

If necessary, we transmit this data to the short-listed childcare persons, kindergarten and/or municipal placement services orally, in written or in electronic form. You can revoke the transmission at any time via info@buk-fs.de. Any objection may have the consequence that we are not able to process the services on time or in an adequate manner.

  • For the purpose of information, consultation and mediation of services in the area of holiday care, we collect the following data, for example: Name, first name, date of birth of the child, company (your employer), address, telephone, e-mail.The processing for holiday care is based on your permission according to Art. 6 para. 1 lit. a GDPR, which you can revoke at any time via info@buk-fs.de.

For the implementation of holiday care and to guarantee the well-being of the child, it is necessary to collect some information about your child's health, such as information about allergies, intolerances, medication or the degree of severe disability. By booking an offer from the holiday programme, you agree explicitly to the processing and transmission of your and your children's data, in particular also the health data of your children. You can revoke the processing of this data at any time, but this would mean that it is not possible to participate in the holiday care.
Within the framework of booking our holiday programme offers, we will transmit the data provided by you to the relevant cooperation partners and organizers according to Art. 6 para. 1 It. b GDPR only for booking and implementing the particular holiday offer. We have obligated all our cooperation partners to the confidentiality of the data.

  • For the purpose of information, consultation and mediation of services in the area of need of assistance and care, we collect the following data, for example: Name, first name, place of residence of the relative, degree of care or other health data required for the consultation, company (your employer), address, telephone, e-mail. This processing is based on the following legal bases:

    • Your permission according to Art. 6 para. 1 lit. a GDPR, which you can revoke at any time via info@buk-fs.de.
    • For the performance of the contract or also the implementation of pre-contractual arrangements on the basis of Art. 6 para. 1 lit. b GDPR.

If necessary, we transmit this data to short-listed service providers such as care institutions or care services orally, in written or in electronic form. You can revoke the transmission to the service providers at any time via info@buk-fs.de. Any objection may have the consequence that we are not able to process the services on time or in an adequate manner.

  • For the purpose of comprehensive, confidential consultation and support with work-related and private problems (external employee assistance/ EAP - Employee Assistance Program), we process, for example, name, nickname, company (your employer), telephone, e-mail. Such processing is based on Art. 6 para. 1 lit. d. GDPR, which authorises processing where necessary to protect the vital interests of the data subject or another natural person. Part of the processing can also be a transmission to external EAP consultants who are commissioned by us to provide consulting and support.
  • For the purpose of monitoring, ensuring and optimising the quality of our consultation, we will send you a link to the anonymous evaluation of our services by e-mail after completing the consultation. This processing is based on the balancing of interests clause according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to receive feedback about our services and to continuously optimise them on the basis of the gained knowledge. You have the right to revoke the use of your data for this purpose at any time.

Processing of customer and supplier data

  • To implement pre-contractual measures, to fulfil the contract and to provide continuous support. Such processing is based on Art. 6 para. 1 b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual arrangements. The data will be deleted after completion of the business relationship, unless there are any legal archiving periods. These result, among other things, from tax regulations and last up to ten years.
  • We use the e-mail addresses of our existing customers, but only those who already have a business relationship with us, to provide information about consulting and service offers. This processing is based on Art. 6 para. 1 f) GDPR in combination with § 7 para. 3 UWG. Our legitimate interest lies in the simple and inexpensive advertising approach to our existing customer data. Of course in compliance with the high requirements of § 7 para. 3 UWG, which defines the exceptions for the use of the e-mail address of existing customers. You have the right to revoke the use of your e-mail address for the purpose of direct advertising at any time.


Processing of data of caregivers

  • To contact, select and place employees, we process personal data of so-called caregivers. We process personal data of so-called caregivers for the purpose of contacting, selecting and placing them to the employees of our client companies within the scope of our consulting service. Such processing is based on Art. 6 para. 1 b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual arrangements. We store your data for the purpose of mediation as long as you do not disagree to its storage. You can revoke the storage of your data at any time via info@buk-fs.de.


Applicant data

  • For the purpose of implementing application procedures, insofar as this is necessary for the decision to establish an employment relationship with us. The legal basis is Art. 88 GDPR in combination with § 26 para. 1 in conjunction with para. 8 S. 2 BDSG. If we employ applicants, we can process the personal data we have already received in accordance with § 26 Paragraph 1 BDSG if this is necessary for the purposes of the employment relationship. We store the data of rejected applicants in text form on the basis of Art. 6 para. 1 f) GDPR up to 6 months after receiving the rejection in order to defend against any legal claims asserted in the application procedure. Our legitimate interest is a possible obligation of proof in a procedure according to the General Equal Treatment Act (AGG). Any further storage is only possible with the explicit agreement of the applicant.

3. Transmission of data

We may transfer your personal data to other companies insofar as this is permissible or necessary within the framework of the purposes and legal bases set out in Section 2. We oblige all receivers of data in written form to confidentiality. Furthermore, personal data will be processed on our behalf by external service providers on the basis of contracts for order processing according to Art. 28 GDPR, in particular in the area of information technique and data processing. Under no circumstances will your data be transferred outside the EU.

4. Storage of data

Your personal data will be stored as long as knowledge of the data is required for the purposes of the contractual relationship or the purposes for which they were collected or as long as legal or contractual storage regulations exist. Legal storage periods result, among other things, from tax or social law regulations and often extend up to ten years.

5. Which rights do you have?

INFORMATION

You have the right to receive information about your personal data processed by us and to request a copy of this data. Components of the information are: processing purposes, categories of data, their recipients or categories of recipients and, if possible, the planned duration of data storage or criteria for determining this duration.

CORRECTION, DELETION, RESTRICTION

In addition, you are entitled to request that the data is corrected if the data is incorrect or deleted if the data is stored illegally. If deletion is not possible for various reasons, you have the right to request a restriction on the processing or blocking of your data.

REVOCATION

If the processing is based on your permission, you have the right to revoke your permission at any time. The legality of the processing based on the permission until revocation remains unaffected.

RIGHT TO REVOKE

Insofar as the processing is based on Art. 6 para 1 f) GDPR (balancing of interests), you have the right to revoke the processing of these data at any time. We will then no longer process this personal data unless we can provide compelling reasons worthy of protection that outweigh your interests worthy of protection. Or the processing is necessary to assert, exercise or defend legal claims.

DATA TRANSFERABILITY

You also have the right according to Art. 20 GDPR to receive your data in an appropriate, common and machine-readable format.

To protect your rights, please contact our data protection officer.

6. Right of complaint

You have the right of complaint to the supervisory authority. The responsible supervisory authority for data protection issues is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211 38424-0
Fax: 0211 38424-10
E-Mail: poststelle@ldi.nrw.de

 

 

June 6th 2018

These privacy principles are continuously updated due to changing circumstances or adaptation of the legal situation.