Duty to provide information pursuant to Art. 12, 13 GDPR on the processing of personal data in the context of online appointment bookings for trade fairs and events

Thank you for your interest in our products and services and for your interest in contacting us. In order to facilitate your and our appointment planning, we offer you the opportunity to arrange appointments with us at an early stage. We would like to inform you here about this data processing in the course of online appointment booking. We would like to point out that you are not obliged to use the online booking, you can also use any other channel to contact us:

1. Responsible for the processing of the data

Lutz Pumpen GmbH | Lutz-Jesco GmbH
Erlenstr. 5 - 7
97877 Wertheim
Tel: +49 (0)9342 879 - 0
info@lutz-pumpen.de | info@lutz-jesco.com
www.lutz-pumpen.de | www.lutz-jesco.com

You can contact our data protection officer at the above address or at: datenschutz@lutz-pumpen.de

2. Categories of data processed and their origin

The categories of personal data processed include the following data provided by you:
- Surname, first name and e-mail address
- Calendar dates
- Optional: address, telephone number, notes
- Metadata (e.g. IP address, time of use)

3. Purpose and legal basis of the processing of personal data

The purpose of collecting and processing personal data is to arrange appointments for meetings and to send corresponding reminder emails for the agreed appointment. The primary legal basis for this is consent Art. 6 para. 1 sentence 1 lit. a or legitimate interest in optimising the allocation of appointments Art. 6 para. 1 sentence 1 lit. f GDPR.

If necessary, your personal data will be processed beyond the appointment agreement in order to protect our legitimate interests or those of third parties (Art. 6 para. 1 sentence 1 lit. f GDPR).

4. Disclosure of personal data

Within our company, only those persons and departments receive your personal data who need it to establish long-term contact, to respond to your enquiries and to fulfil our contractual and legal obligations, or who need it to pursue objectives that are in our legitimate interest. Microsoft Bookings is part of Microsoft Office 365, a software from Microsoft Ireland Operations Limited. A data processing agreement (DPA) was concluded for this purpose in accordance with Art. 28 GDPR. Beyond this, data is only passed on to other bodies due to legal obligations.

5. Transfer of personal data to a third country outside the EU/EEA

Bookings is a service offered and provided by Microsoft in the EU. However, it cannot be ruled out that data may also be transmitted to Microsoft Corp. in the USA in this context. Microsoft can also carry out remote maintenance access from other third countries. If participants use the appointment scheduling function from a third country, data is exchanged with a third country. However, Microsoft is certified in the DPF, which proves the adequacy of the level of data protection. Further information on Microsoft Bookings can be found in Microsoft's privacy policy.

6. Rights of the data subjects

You can request information about the personal data stored about you at the above address. Under certain circumstances, you can also request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used and machine-readable format.

7. Right of appeal

You have the right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for us is

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstr. 20
70173 Stuttgart

8. Right to withdraw consent

If you have given us your consent to process your personal data, you have the right to withdraw your consent at any time. In the event of revocation, we will immediately cease processing or immediately delete the data concerned, unless further processing can be based on another legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to object

If your data is processed on the basis of legitimate interests, you can object to this processing at any time. In this case, we will no longer process your personal data unless we can provide another legal basis for the processing or demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

10. Duration of data storage

We delete your personal data as soon as it is no longer required for the above-mentioned purposes and the statutory retention periods do not prevent the deletion. You can also delete the appointment request at any time via Booking using the Cancel function.

11. Profiling/scoring

We do not use automated processing to make a decision - including profiling - on the establishment, performance or termination of a contractual relationship.