Data protection information BKS identification App
BKS GmbH takes the protection of the personal data of its customers and interested parties very seriously and complies with the rules of data protection laws. The following declaration provides you with an overview of how BKS GmbH ensures this protection and what types of personal data are processed for what purpose when using the BKS identifikation app. The BKS identification app is used to carry out the legitimation process for reordering cylinders and keys.
Responsible
The responsible party pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is BKS GmbH, Heidestraße 71, 42549 Velbert.
Data Protection Officer
Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Germany
Web: www.datenschutz-sued.de
E-Mail: datenschutz.de.gub@g-u.de
When using the BKS identification app, the following personal data will be stored by us:
Log data
Only the following log data will bei stored:
- app ID
- Error date
- Application version
- Error history
- Error message
- Detailed error message
- Device Model
- Operating system version
- Operating system
- Device type
- Manufacturer
The collection and storage of the APP ID is necessary for the installation of the BKS identification app and so for the fulfilment of the usage contract regarding the aforementioned app. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b GDPR.
The collection and storage of log data is based on our legitimate interest, namely our interest in the analysis and elimination of program errors (Art. 6 para. 1 p. 1 lit. f GDPR).
Recipients of the data: We exclude the transfer of data to third parties outside BKS GmbH. Exceptionally, data is processed on our behalf by data processors (Microsoft Corporation). These are carefully selected in each case, are also audited by us and are contractually obligated in accordance with Art. 28 GDPR. Physical storage of your personal data takes place exclusively in data centers within the EU/EEA.
Storage period: The log data is automatically deleted within 30 days of collection. Your app ID is deleted when you uninstall the BKS identification app. For an early deletion of the log data, you are welcome to send us an email to datenschutz.de.gub@g-u.de.
Query of location data for dealer selection
In the course of using the BKS identification app, you also have the option of searching for dealers of our products in your location. Before using this function, you will be asked for your permission to use your location data.
The legal basis for data processing is the consent you have given by clicking on the corresponding button in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.
You are also welcome to search for dealers of our aforementioned products in the BKS identification app without requesting your location data.
Recipients of the data: We exclude the transfer of data to third parties outside BKS GmbH.
Storage period: The location data is only stored for the duration of the use of the BKS identification app. Afterwards, they are deleted immediately.
You can revoke your consent to the processing of your personal data at any time. You can inform us about your revocation via the following contact details [datenschutz@g-u.de]. Such a revocation affects the permissibility of the processing of the personal data without affecting the lawfulness of the data processing carried out on the basis of the consent until the revocation.
Existence of automated decision making
Automated decision making or profiling does not take place.
No obligation to provide personal data
Unless otherwise stated in the previous chapters, the provision of personal data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide the personal data if no other information has been provided previously. Failure to provide your personal data may mean that you cannot use the BKS identification app.
Your rights as a user
When processing your personal data, the GDPR grants you certain rights as a website user:
1.) Right of access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed; if this is the case, you have a right of access to such personal data and to the information specified in Article 15 of the GDPR.
2.) Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to request without delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data. You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.
3.) Right to restriction of processing (Art. 18 GDPR):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of any review.
4.) Right to data portability (Art. 20 GDPR):
In certain cases, detailed in Article 20 of the GDPR, you have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of such data to a third party.
5.) Right to object (Art. 21 GDPR):
If data is collected on the basis of Art. 6 (1) (f) (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Right of appeal to a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint can be asserted in particular before a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement.
