General notes

– Status: 30.11.2018

– This privacy policy applies to the application LimouWEB and all related applications.

– Responsible for the processing of personal data is 2S Info & Media Management GmbH.


Scope of the data protection declaration

This privacy policy applies to the entire LimouWEB application including all applications.


Responsible

2S Info & Media Management GmbH is the controller within the meaning of the EU-DSGVO – i.e. the legal entity that determines the purposes and means of the processing of personal data. Our contact details are: 2S Info & Media Management GmbH, Bgm.-Mahr-Str. 32, 63179 Obertshausen, Germany, Tel.: +49 6108 797 22 92, E-Mail: info@2s-info-media.de

Hereinafter referred to as “2S”.


Further processing for another purpose

The purposes for which 2S processes personal data are described in Section 1. General Information on Data Processing Purposes. If 2S intends to further process personal data for another purpose – i.e. not for the purpose for which the personal data was originally collected – it will inform the User again.


Obligation to provide/require personal data for the conclusion of a contract

The provision of personal data is not required by law. For the conclusion of the user contract, the following data is required:

First name, last name, address, telephone number, e-mail address and credit card details.

Without these data 2S is not able to enter into a user agreement with the user. Within the scope of this agreement, the user is contractually obligated to keep the data underlying the contractual relationship regarding the applications used by him/her true and complete during the entire period of use. The personal data collected during the input process is required for the use of the application. Failure to provide this data will result in the application not being able to be used.


How are personal data processed?

1. General information about the purposes of data processing
2S processes personal data in order to fulfill its contractual obligations towards its users/users.

In particular, 2S processes data to perform its contractual obligations to its customers. Notwithstanding the foregoing, 2S processes data to protect its legitimate interests, taking into account the interests of users (e.g. to send newsletters). In some cases, 2S is legally obligated to process data (e.g. to hand over data to investigating authorities).

2. Access data
In the context of the LimouWEB application, which requires registration, 2S must collect and process certain personal data as access data

for example:

Surname and first name
Login e-mail address
telephone number/cell phone number
Password

Visibility
Access data is not visible to third parties. 2S will not share this data with third parties under any circumstances.

Storage period
2S will delete this data when the contractual relationship is terminated or beyond that until the data is no longer subject to any tax, commercial or other legal retention obligations.

Legal basis
The legal basis for the processing of personal data is Art. 6 I b) EU-DSGVO.

3. Payment data
2S collects and uses payment data for payment processing and settlement according to the agreed means of payment. Payment data is stored for payment processing and billing of monthly payments and in the case of automatic renewal of the usage relationship.

2S itself does not store credit card data in its databases and on its servers.
The credit card data is stored directly in the system of the credit card processor:

SIX Payment Services (Germany) GmbH
Langenhorner Chaussee 92-94
D-22415 Hamburg

2S receives information from SIX Payment about the deposited credit card according to the following example:

Credit card number: XXXX XXXX 1234
Type: Mastercard
Expiration date: 06 / 21
Holder: Peter Example

Visibility
Payment data can never be seen by other users.

Storage period
2S stores this data until the termination of the contract or beyond until the data is no longer subject to any tax, commercial or other legal retention obligations.

4. Who receives personal data of the user or the customer?
2S will only disclose personal data to third parties if this is necessary for the fulfillment of its own services owed under this contract, if this is necessary for the proper conduct of business operations (e.g. tax advisor), or for the fulfillment of legal obligations, or if there is a mandatory court or official order.
In the context of data processing, cooperation with external service providers takes place. This takes place on the basis of an agreement on commissioned data processing.

2S checks each service provider with regard to the measures taken by it for data protection and data security and thus ensures the contractual regulations for the protection of personal data provided for by law.

At the time of contracting, 2S uses the following external service providers:

Server hosting:
VISTEC Internet Service GmbH
Hagenauer Street 42
65203 Wiesbaden
Germany

Software development and customer support:
IT Sorge
Dipl.-Ing. Achim Sorge
Bgm.-Mahr-Str. 32
63179 Obertshausen
Germany

5. Third countries
2S does not transmit any data to persons or companies in third countries. The user of LimouERP has the possibility to transmit personal data himself/herself via e-mail or the service LimouCONNECT to persons or companies in third countries.
In these cases, the user / the user bears the sole responsibility for compliance with the statutory data protection provisions, in particular the EU-DSGVO.

6 Rights of the user
Users basically have the following rights:

Users of LimouWEB have legal rights to information, correction, deletion, restriction of processing and objection to processing, as well as a right to data portability. In addition, any consent given to processing may be revoked at any time. There is a right to lodge a complaint with a supervisory authority.

Right of objection

General
Users/users have the right to object at any time to the processing of personal data concerning them that is carried out pursuant to Art. 6 (1) (f) EU-
DSGVO.

Direct advertising / Newsletter
If 2S processes personal user data for the purpose of direct marketing, the user has the right to object at any time to processing of personal data concerning him or her for such marketing.
The objection can be made by e-mail to info@2s-info-media.de.

Right to information
Users have the right to request information from 2S as to whether 2S is processing personal data relating to them. If this is the case, users/users have a right to information about this personal data.

Users also have a right to the following information:

If personal data are transferred to a third country or to an international organization, users as data subjects have the right to be informed about the appropriate safeguards (pursuant to Art. 46 EU-DSGVO) in connection with the transfer.

Right of rectification
Users/users have the right to request 2S to correct any inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, they have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

Right to deletion
Users / users have the right to demand that we delete the personal data concerning them without delay, provided that one of the following reasons applies:

After the request by the user / the user, 2S is obliged to delete the relevant data without undue delay. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

Right to restriction of processing
You are entitled to request a restriction in the processing of your personal data if the accuracy of the personal data is disputed by you, for the period of time that allows the controller to verify the accuracy of the personal data. If the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data from us, we will follow the request. The restriction of processing will also take place if we no longer need your personal data for processing purposes, but you need it to assert, exercise or defend your own legal claims, or you have objected to the processing pursuant to Article 21 (1) EU-DSGVO, as long as it is not yet clear whether the legitimate grounds of the controller outweigh your grounds. You will be informed by us before the restriction is lifted.

Right to data portability
The user / the user has the right to receive the personal data concerned, which he / she has provided to 2S, in a common machine-readable format and has the right to transfer this data to another controller without hindrance by 2S. The prerequisite is that

a) the processing is based on consent pursuant to Art. 6(1)(a) EU DSGVO or Art. 9(2)(a) EU DSGVO or on a contract pursuant to Art. 6(1)(b) EU DSGVO

and

(b) the processing is carried out with the aid of automated procedures. When exercising the right to data portability, the user has the right to request that the personal data be transferred directly from 2S to another responsible party, insofar as this is technically feasible.

Right of revocation in case of consent
Insofar as the processing is based on the consent of the user, the user has the right to revoke the consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.

Right of complaint
The supervisory authority responsible for our company is:

The Hessian Commissioner for Data Protection and Freedom of Information.
PO Box 3163
65021 Wiesbaden

If the user is of the opinion that the processing of personal data concerning him/her violates the EU-DSGVO, he/she may complain to a supervisory authority. For this purpose, the user may also contact the supervisory authority of his/her usual place of residence, place of work or the place of the alleged infringement. Further regulations on the complaint procedure can be found in Art. 77 EU-DSGVO.

Note on the processing of personal order-related data
The user / the user bears the sole responsibility towards the end customers, passengers and all persons whose data he / she collects and stores via LimouWEB, that he / she may collect, store and use these data in accordance with the requirements of the EU-DSGVO.
The user bears the sole responsibility that his/her user data (login name and password) and the user data of employees are handled in such a way that no unauthorized third party can gain access to LimouWEB and the personal data stored there, e.g. of customers and passengers.