Our handling of your data and your rights
Information according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Below we inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to data protection regulations.
Which data is processed in detail and how it is used depends largely on the requested or agreed services.
1. Who is responsible for data processing and who can I contact?
2. What source and data do we use?
We process personal data that we receive from you as part of our business relationship. In addition, we process - insofar as this is necessary for the provision of our services - personal data that we have received from other companies or from other third parties (e.g. for the execution of orders, for the fulfillment of contracts or on the basis of your consent).
Relevant personal data are personal data (name, address and other contact details, date and place of birth and nationality), identification data (e.g. ID card data) and authentication data (e.g. signature sample). In addition, this can also include order data, data from the fulfillment of our contractual obligations (e.g. sales data in payment transactions, advertising and sales data (including advertising scores), documentation data (e.g. register data, data about your use of our offered telemedia (e.g. time of accessing our Websites, apps or newsletters, pages clicked by us or entries) as well as other data comparable to the categories mentioned.
3. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR)
3.1 To fulfill contractual obligations (Article 6 (1b) GDPR)
The processing of personal data (Article 4 No. 2 GDPR) takes place for the rental of boats, in particular for the implementation of our contracts or pre-contractual measures with you and the execution of your orders / booking.
3.2 As part of the balancing of interests (Article 6 Paragraph 1f GDPR)
If necessary, we process your data beyond the actual fulfillment of the contract to protect legitimate interests of us or third parties, such as in the following cases:
- Consultation and data exchange with intermediaries (e.g. Sonbono, Click & Boat, Nautal, etc.)
- advertising or market and opinion research, unless you have objected to the use of your data;
- assertion of legal claims and defense in legal disputes;
- Measures to ensure house rights;
- Measures for business management and further development of services
3.3 On the basis of your consent (Article 6 (1a) GDPR)
If you have given us your consent to the processing of personal data for specific purposes (e.g. evaluation of data for marketing purposes), the lawfulness of this processing is based on your consent. A given consent can be revoked at any time.
Please note that the cancellation only applies to the future. Processing that took place before the revocation is not affected.
4. Who gets my data?
Within the company, those places will get access to your data that they need to fulfill our contractual and legal obligations. Order processors employed by us (Article 28 GDPR) can also receive data for these purposes. These are companies in the categories, IT services, printing services, telecommunications and consulting as well as sales and marketing.
5. How long will my data be saved?
If necessary, we process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations. The deadlines for storage and documentation specified there are up to three years.
6. Is data transferred to a third country or to an international organization?
There is no data transmission to third countries (countries outside the European Economic Area - EEA).
7. What data protection rights do I have?
Every data subject has the right to information under Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to deletion according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR and the right to data portability from Article 20 GDPR. The restrictions under §§34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a data supervisory authority (Article 77 GDPR).
8. Is there an obligation to provide data?
As part of our business relationship, you only have to provide the personal data that is necessary for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to reject the conclusion of the contract or the performance of the order or will no longer be able to carry out an existing contract and possibly have to terminate it.
In particular, we are required by law to identify you, for example, using your ID card before establishing the business relationship. According to the Money Laundering Act, you have to provide us with the necessary information and documents so that we can meet this legal obligation.
Furthermore, we have to check on the basis of your boat license whether you are entitled to drive the boats by proof.
9. To what extent is my data used for profile building (scoring)?
We sometimes process your data automatically with the aim of evaluating certain personal aspects (profiling). For example, we use profiling in the following cases:
· In order to provide you with targeted information and advice about products, we use evaluation tools. These enable needs-based communication and advertising, including market and opinion research.
Information about the right to object
According to Article 21 General Data Protection Regulation (GDPR)
1. You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Article 6 Paragraph 1e GDPR (data processing in the public interest) and Article 6 Paragraph 1f GDPR (data processing on on the basis of a balance of interests) to object; this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR, which we use for credit rating or for advertising purposes.
If you file an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2. In individual cases, we process your personal data in order to operate direct mail. You have the right to object at any time to the processing of personal data in question for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be form-free and should be addressed to:
BlueBayCharter - André Blankenagel
I confirm that I have read and received the information on data protection and revocation.
Can Picafort, ___________________
Stand: Januar 2020