– Status: 30.11.2018
– Responsible for the processing of personal data is 2S Info & Media Management GmbH.
Scope of the data protection declaration
2S Info & Media Management GmbH is the controller within the meaning of the EU-DSGVO – i.e. the legal entity that determines the purposes and means of the processing of personal data. Our contact details are: 2S Info & Media Management GmbH, Bgm.-Mahr-Str. 32, 63179 Obertshausen, Germany, Tel.: +49 6108 797 22 92, E-Mail: firstname.lastname@example.org
Hereinafter referred to as “2S”.
Further processing for another purpose
The purposes for which 2S processes personal data are described in Section 1. General Information on Data Processing Purposes. If 2S intends to further process personal data for another purpose – i.e. not for the purpose for which the personal data was originally collected – it will inform the User again.
Obligation to provide/require personal data for the conclusion of a contract
The provision of personal data is not required by law. For the conclusion of the user contract, the following data is required:
First name, last name, address, telephone number, e-mail address and credit card details.
Without these data 2S is not able to enter into a user agreement with the user. Within the scope of this agreement, the user is contractually obligated to keep the data underlying the contractual relationship regarding the applications used by him/her true and complete during the entire period of use. The personal data collected during the input process is required for the use of the application. Failure to provide this data will result in the application not being able to be used.
How are personal data processed?
1. General information about the purposes of data processing
2S processes personal data in order to fulfill its contractual obligations towards its users/users.
In particular, 2S processes data to perform its contractual obligations to its customers. Notwithstanding the foregoing, 2S processes data to protect its legitimate interests, taking into account the interests of users (e.g. to send newsletters). In some cases, 2S is legally obligated to process data (e.g. to hand over data to investigating authorities).
2. Access data
In the context of the LimouWEB application, which requires registration, 2S must collect and process certain personal data as access data
Surname and first name
Login e-mail address
telephone number/cell phone number
Access data is not visible to third parties. 2S will not share this data with third parties under any circumstances.
2S will delete this data when the contractual relationship is terminated or beyond that until the data is no longer subject to any tax, commercial or other legal retention obligations.
The legal basis for the processing of personal data is Art. 6 I b) EU-DSGVO.
3. Payment data
2S collects and uses payment data for payment processing and settlement according to the agreed means of payment. Payment data is stored for payment processing and billing of monthly payments and in the case of automatic renewal of the usage relationship.
2S itself does not store credit card data in its databases and on its servers.
The credit card data is stored directly in the system of the credit card processor:
SIX Payment Services (Germany) GmbH
Langenhorner Chaussee 92-94
2S receives information from SIX Payment about the deposited credit card according to the following example:
Credit card number: XXXX XXXX 1234
Expiration date: 06 / 21
Holder: Peter Example
Payment data can never be seen by other users.
2S stores this data until the termination of the contract or beyond until the data is no longer subject to any tax, commercial or other legal retention obligations.
4. Who receives personal data of the user or the customer?
2S will only disclose personal data to third parties if this is necessary for the fulfillment of its own services owed under this contract, if this is necessary for the proper conduct of business operations (e.g. tax advisor), or for the fulfillment of legal obligations, or if there is a mandatory court or official order.
In the context of data processing, cooperation with external service providers takes place. This takes place on the basis of an agreement on commissioned data processing.
2S checks each service provider with regard to the measures taken by it for data protection and data security and thus ensures the contractual regulations for the protection of personal data provided for by law.
At the time of contracting, 2S uses the following external service providers:
VISTEC Internet Service GmbH
Hagenauer Street 42
Software development and customer support:
Dipl.-Ing. Achim Sorge
5. Third countries
2S does not transmit any data to persons or companies in third countries. The user of LimouERP has the possibility to transmit personal data himself/herself via e-mail or the service LimouCONNECT to persons or companies in third countries.
In these cases, the user / the user bears the sole responsibility for compliance with the statutory data protection provisions, in particular the EU-DSGVO.
6 Rights of the user
Users basically have the following rights:
- Right of objection
- Right to information
- Right to deletion
- further rights
Users of LimouWEB have legal rights to information, correction, deletion, restriction of processing and objection to processing, as well as a right to data portability. In addition, any consent given to processing may be revoked at any time. There is a right to lodge a complaint with a supervisory authority.
Right of objection
Users/users have the right to object at any time to the processing of personal data concerning them that is carried out pursuant to Art. 6 (1) (f) EU-
Direct advertising / Newsletter
If 2S processes personal user data for the purpose of direct marketing, the user has the right to object at any time to processing of personal data concerning him or her for such marketing.
The objection can be made by e-mail to email@example.com.
Right to information
Users have the right to request information from 2S as to whether 2S is processing personal data relating to them. If this is the case, users/users have a right to information about this personal data.
Users also have a right to the following information:
- the purposes of the processing
- the categories of personal data processed by 2S
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or to obtain the restriction of processing by the controller, or a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected from the data subject, any available information on the origin of the data
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) EU DSGVO and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
If personal data are transferred to a third country or to an international organization, users as data subjects have the right to be informed about the appropriate safeguards (pursuant to Art. 46 EU-DSGVO) in connection with the transfer.
Right of rectification
Users/users have the right to request 2S to correct any inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, they have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
Right to deletion
Users / users have the right to demand that we delete the personal data concerning them without delay, provided that one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- The user revokes the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) EU DSGVO and there is no other legal basis for the processing.
- The user objects to the processing pursuant to Article 21(1) EU DSGVO and there are no overriding legitimate grounds for the processing, or the user objects to the processing pursuant to Article 21(2) EU DSGVO.
- The personal data have been processed unlawfully.
- The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
After the request by the user / the user, 2S is obliged to delete the relevant data without undue delay. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.
Right to restriction of processing
You are entitled to request a restriction in the processing of your personal data if the accuracy of the personal data is disputed by you, for the period of time that allows the controller to verify the accuracy of the personal data. If the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data from us, we will follow the request. The restriction of processing will also take place if we no longer need your personal data for processing purposes, but you need it to assert, exercise or defend your own legal claims, or you have objected to the processing pursuant to Article 21 (1) EU-DSGVO, as long as it is not yet clear whether the legitimate grounds of the controller outweigh your grounds. You will be informed by us before the restriction is lifted.
Right to data portability
The user / the user has the right to receive the personal data concerned, which he / she has provided to 2S, in a common machine-readable format and has the right to transfer this data to another controller without hindrance by 2S. The prerequisite is that
a) the processing is based on consent pursuant to Art. 6(1)(a) EU DSGVO or Art. 9(2)(a) EU DSGVO or on a contract pursuant to Art. 6(1)(b) EU DSGVO
(b) the processing is carried out with the aid of automated procedures. When exercising the right to data portability, the user has the right to request that the personal data be transferred directly from 2S to another responsible party, insofar as this is technically feasible.
Right of revocation in case of consent
Insofar as the processing is based on the consent of the user, the user has the right to revoke the consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.
Right of complaint
The supervisory authority responsible for our company is:
The Hessian Commissioner for Data Protection and Freedom of Information.
PO Box 3163
If the user is of the opinion that the processing of personal data concerning him/her violates the EU-DSGVO, he/she may complain to a supervisory authority. For this purpose, the user may also contact the supervisory authority of his/her usual place of residence, place of work or the place of the alleged infringement. Further regulations on the complaint procedure can be found in Art. 77 EU-DSGVO.
Note on the processing of personal order-related data
The user / the user bears the sole responsibility towards the end customers, passengers and all persons whose data he / she collects and stores via LimouWEB, that he / she may collect, store and use these data in accordance with the requirements of the EU-DSGVO.
The user bears the sole responsibility that his/her user data (login name and password) and the user data of employees are handled in such a way that no unauthorized third party can gain access to LimouWEB and the personal data stored there, e.g. of customers and passengers.