Data protection declaration according to Art. 13, 14 General Data Protection Regulation (GDPR)

Last updated: February 2022

We process your personal data exclusively within the framework of the statutory provisions. This includes the following categories of personal data: customer master data (e.g. name, address and communication data, date of birth), contract master data (e.g. customer number, number of persons, vehicle registration number), contract billing and payment data, bank data and comparable data.

1. Data Controller and Data Protection Officer

The controller for the processing of your personal data is Stadtwerke Pirna GmbH, Seminarstraße 18 b, 01796 Pirna.
You can reach our Data Protection Officer at the above address or by e-mail: datenschutz@stadtwerke-pirna.de.

2 Purpose and legal basis of the processing of personal data

2.1 Data processing for the purpose of initiating and processing the contract (Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR)).

The processing of the data is necessary for the initiation, execution and settlement of your contract.

2.2 Data processing based on your consent (Art. 6 para. 1 (a) GDPR)

Insofar as we have obtained your consent to the processing of personal data for specific purposes, the processing is lawful on this basis. You may revoke your consent at any time. This also applies to the revocation of declarations of consent that you gave us prior to the applicability of the GDPR on 25th May 2018. Revocation of consent is effective for the future and does not affect the legality of the data processed up to the revocation.

2.3 Data processing for legitimate interest (Art. 6 para. 1 (f) of the German Data Protection Act (GDPR))

We process your data in a permissible manner in order to protect the legitimate interests of ourselves and that of third parties.
This includes the use of your personal data to

implement measures to improve and develop services and products in order to be able to offer you a customer-specific approach with customized offers and products.
enter into consultation and data exchange with credit agencies (e.g. Creditreform) to determine creditworthiness or payment default risks, in particular if the requirements of § 31 GDPR are met.
assert legal claims and to defend against legal disputes.
investigate or prevent criminal offences
conduct address and license plate investigations
use your data anonymously for analysis purposes.

Another legitimate interest is film and photographic works. At regular intervals, the SWP shall arrange for photographic work or image and sound recordings to be carried out at the campsite. If guests do not wish to be recognized on these, they must inform the photographer or camera team immediately. A subsequent appeal by the guest can no longer be granted. The photos, film footage and interviews taken in this context may be processed and published for press releases, PR, advertising and commercial purposes, including social networks, without any claim to remuneration.
Should we wish to process your personal data for a purpose not previously mentioned, we will inform you of this in advance within the framework of the legal provisions.

2.4 Data processing based on legal requirements (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1 (e) of the GDPR)

As a company, we are subject to various legal obligations (e.g. Federal Statistics Act, tax laws, Commercial Code) that require the processing of your data for the fulfilment of the law and for the performance of tasks that are in the public interest.

3 (Categories of) Recipient(s) / Disclosure of Personal Data / Third Country

Within our company, your data is accessed by departments that need it to fulfill the above-mentioned purposes (see p. 2 Purpose and legal basis for the processing of personal data). This also applies to service providers and vicarious agents employed by us. We will only disclose personal data to third parties if this is necessary for the aforementioned purposes or if you have given your prior consent. Recipients of personal data may be, for example: authorities, credit agencies.
No transfer of the customer’s personal data to third countries takes place.

4 Duration of storage or deletion of personal data

We store your personal data for the above-mentioned purposes (see p. 2 Purpose and legal basis for the processing of personal data). Your data will be processed as soon it is collected, insofar as you or a third party provide it to us. We delete your personal data when the contractual relationship with you is finished, all mutual claims have been fulfilled and there are no other statutory retention requirements or legal justifications for its storage. These include retention obligations under the German Commercial Code (HGB) and the Tax Code (AO). This means that we will delete your personal data no later than after expiry of the statutory retention obligations, which are usually 10 years after the end of the contract.

5 Rights of data subjects / Your rights

If you have any questions or complaints about data protection, please do not hesitate to contact our company at Stadtwerke Pirna GmbH, Seminarstraße 18 b, 01796 Pirna or datenschutz@stadtwerke-pirna.de This includes the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to limit processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR, and the right to data portability under Article 20 of the GDPR. In addition, you have the option to contact the competent supervisory authority.

5.1 Right to object

If we process data to protect our legitimate interests (see 2.3 Data processing for legitimate interest) or in the public interest (see 2.4 Data processing in the public interest), you have the right to object to this processing at any time for reasons arising from your particular situation. This also includes the right to object to processing for advertising purposes.

5.2 Right of withdrawal of consent

Consent can be revoked at any time (see 2.2 Data processing based on your consent).

6 Provision of personal data

Within the scope of our business relationship, you must provide personal data (see categories of personal data) that are required for the establishment and implementation of a business relationship and the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we cannot conclude or execute the contract.

7 Automated decision-making

No automated decision-making, including profiling, takes place for the establishment and implementation of this contract.

8 Data sources

We process personal data that we receive from our customers in the course of our business relationship. We also process personal data that we may legitimately obtain from publicly accessible sources, e.g. from debtor directories, land registers, trade and association registers, the press and the internet. In addition, we use personal data that we legitimately receive from companies within our company or from third parties, e.g. credit agencies.

9 Amendment clause

As our data processing is subject to change, we will also update our privacy information from time to time. We will inform you of any changes in good time.