PRIVACY POLICY AND INFORMATION OBLIGATIONS FOR VISITORS TO MEKRA LANG GMBH & CO. KG*
in accordance with the EU General Data Protection Regulation (GDPR)
This document provides information about the processing of personal data by MEKRA Lang GmbH & Co. KG during visitor registration and about the rights to which visitors are entitled under data protection regulations.
Responsible entity / Data protection
Address:
MEKRA Lang GmbH & Co. KG
Buchheimer Str. 4
91465 Ergersheim
Phone: +49 9847 989-0
Email: info@mekra.de
Data Protection Contact: datenschutz@mekra.de
Categories / Source of Data
Personal data is collected directly from the visitor at the reception desk or recorded in advance by a contact person in our administrative system.
Personal data is also collected in the context of video surveillance in certain buildings.
Business customers/private customers:
- Contact information: Visitor’s first and last name, company name and address / Home address
- Vehicle registration number
- Contact person and associated department at MEKRA Lang GmbH & Co. KG
- Identity verification based on an ID document
- Time of arrival and departure
Purposes and legal basis for data processing
When processing a visitor’s personal data, the provisions of the EU GDPR, the new German Federal Data Protection Act (BDSG), and other relevant legal regulations are always observed.
Visitor data is recorded for purposes related to their visit to our company premises. A visitor pass will be issued after the visitor has been entered into the guest list. For security reasons, the visitor’s identification data will be verified by checking and comparing their identification document before the pass is issued.
Access to our facilities may only be granted to a visitor after prior confirmation of their identity (verification
is conducted using their ID card). Data from the ID card will not be processed or stored after the check is completed.
The visitor’s personal data will be processed solely for the purpose of detecting crimes under the conditions specified in Article 10 of the EU GDPR.
Data Retention Period
The visitor’s personal data will be deleted as soon as it is no longer needed for the aforementioned purposes (after two weeks at the latest).
Data recipients / categories of recipients
The visitor’s personal data will be disclosed only to those departments and individuals for whom it is necessary to fulfill our
contractual and legal obligations.
In some cases, service providers support our specialized departments in carrying out their tasks. For example, our service provider Wallenwein Administration & Development UG (Unkenweg 61, 70499 Stuttgart) supports us in guest management.
In addition, we are required by law to disclose certain information
to public authorities, such as tax authorities, law enforcement agencies, and customs authorities.
Transfer to a third country / intention to transfer to a third country
Data will not be transferred to third countries (outside the European Union or the European Economic Area).
Rights of data subjects
Your rights as a data subject are set forth in Articles 15–22 of the GDPR. These include:
- Right of access (Article 15 of the GDPR)
- Right to rectification (Article 16 of the GDPR)
- Right to erasure (Article 17 of the GDPR)
- Right to restriction of processing (Article 18 of the GDPR) Right to object to processing (Article 21 of the GDPR)
- Right to data portability (Article 20 of the GDPR)
To exercise these rights, please contact us at:
datenschutz@mekra.de. The same applies to questions regarding data processing at our company or if you wish to withdraw your consent. You may also file a complaint regarding data processing with the data protection supervisory authority.
If personal data is processed to protect legitimate
interests, you may object to such processing at any time on grounds relating to your particular situation. In that case, the processing of your personal data
will be suspended, unless we can demonstrate the existence of
valid legal grounds for processing that override the visitor’s interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
Obligation to Provide Data
In order to process the visit, the visitor is required to provide
certain personal data. This is necessary to maintain security standards and comply with the resulting legal obligations.
The visitor’s right to be present at our premises cannot be authorized in any other way.
Automated decisions in individual cases
We do not use purely automated processing procedures to make decisions.
Supplementary Note
Regarding data processing by MEKRA Lang GmbH & Co. KG, please refer to our comprehensive information on
data protection at https://www.mekra.de/de/impressum/datenschutz.
*All of the provisions listed above also apply to the affiliated companies of MEKRA Lang GmbH & Co. KG. These include Lang Technics GmbH & Co. KG, MEKRAtronics GmbH, MEKRA Global Mirrors Holding GmbH, and Frieda Lang Haus für Kinder gGmbH.