OBO Visitor Management System
Responsible entity:
OBO Bettermann Holding GmbH & Co. KG
Hüingser Ring 52
58710 Menden
Contact details of the Data Protection Officer:
Tel. 02373 / 89-1351
E-Mail: datenschutz@obo.de
Every visitor to our company is recorded in advance in our visitor management system. For this, we need the following information from you:
Mandatory information:
Company, first name, last name, email address, car license plate.
Additionally, we record the check-in and check-out times during your visit.
Purpose:
Company, First Name, Last Name, Check-in time, check-out time: We need the data to log visitors' access to our company premises. This access control is, among other things, a measure to comply with the technical and organizational measures required by Article 32 of the EU GDPR (General Data Protection Regulation) for the security of data processing.
Additionally, we know which visitors are currently on the company premises in case of emergencies. These can be vital information, for example, for the fire department in case of a fire.
We need the company to better identify visitors in case of name similarities.
Email address:
In order to send you the necessary safety briefing and data protection information in advance of your visit and for you to confirm your acknowledgment accordingly.
License plate:
We collect this information so we can inform you in cases such as parking violations or damages.
The data will be used only for the purposes specified above.
Legal basis:
Company, first name, last name, check-in time, check-out time:
Article 6(1)(c) GDPR (Legal obligation for access control).
Furthermore, Article 6(1)(d) of the GDPR. Vital interests of the affected person can be better protected this way. Also Article 6(1)(f). The legitimate interest here is that in an emergency, these data can prevent harm to the visitors' health and lives. For example, we will know during an emergency evacuation which visitors are still on the company premises. The interests or rights of the affected individuals are not compromised.
Email address:
Article 6(1)(f) GDPR. The legitimate interest lies in providing you with the necessary safety instructions and data protection information in advance of your visit, so that you can acknowledge receipt. This will shorten the check-in time. The interests or rights of the affected party are not restricted by this.
License plate:
Article 6(1)(f) GDPR. The legitimate interest is that in the event of parking violations or damages during your visit, we can notify you immediately. A limitation of the legitimate interest is not given here.
Voluntary information:
Salutation, company headquarters, phone number. Check-box "supervisor."
Purpose:
Salutation: So that we can address you as you wish when sending the email, for example.
Company headquarters: If your company has multiple locations, we can better assign you.
Phone number: So that we can quickly inform you in case of emergencies, for example.
Check-Box "Supervisor": This way, we know that you are the first point of contact for all matters related to the visit, and you may be with a visitor group where not every single visitor is registered.
The data will not be used for any purposes other than those specified above.
The legal basis here is
Salutation: Article 6(1)(f) GDPR. The legitimate interest here is to address you in the registration email according to your preference. The legitimate interest of the data subject is not affected here, as the provision is completely voluntary.
Company headquarters: Article 6(1)(f) GDPR. The legitimate interest here is that we can better assign you if your company has multiple locations.
Phone number: Article 6(1)(d) GDPR.
Check-Box "Supervisor": Article 6(1)(f) GDPR. The legitimate interest here is that we recognize that you are coming with a visitor group and then pass on the safety briefing to the other participants in the visitor group.
Deletion of data:
The deletion occurs after 1 year. If you visit us multiple times during this period, the data deletion period will start anew.
Data sharing:
The data may be shared with processors with whom we have concluded a data processing agreement in accordance with Article 28 of the GDPR.
Additionally, the data can be shared with emergency services, such as the fire department, in case of an emergency.
Data will only be shared with law enforcement agencies (e.g., police) if there is appropriate legal authorization.
Confirmation of acknowledgment of the safety briefing and the data protection information.
Before your visit, we will send you our safety instructions and these data protection notices via email. We kindly ask you to confirm that you have acknowledged the safety instructions and the data protection information.
Your rights:
You have the following rights under the EU GDPR:
Right to access under Article 15 EU-GDPR, right to rectification under Article 16 EU-GDPR, right to erasure under Article 17 EU-GDPR Right to restriction of processing under Article 18 EU-GDPR, right to object under Article 21 EU-GDPR Right to data portability under Article 20 EU GDPR, right to withdraw consent, as well as the right to lodge a complaint with the competent data protection supervisory authority www.ldi.nrw.de.