Privacy policy

NAME AND ADDRESS OF THE RESPONSIBLE PERSON

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Rhenus Archiv Services GmbH
Rhenus Platz 1
59439 Holzwickede
Germany

info.ras@de.rhenus.com

NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The data protection officer of the data controller is:

Data Protection Officer
Rhenus Platz 1
59439 Holzwickede
Germany
E-mail: datenschutz@de.rhenus.com
Website: https://www.rhenus.group

Purpose of the portal

Our Telesto Portal is a web-based Rhenus research tool that allows customers to easily manage documents and records. The customer has the possibility to access his archive records data.

The customers' created users can research their archive items and request them within the agreed service time, both as digital documents and in physical form. Likewise, new archival materials to be stored can themselves be entered via the portal and notified for collection. Customer users with administrative rights can independently create and manage new users in the system. The legal basis for the processing of personal data is the legitimate interest according to Art. 6 (1) f) DSGVO. Rhenus Archiv Services has an interest in providing the customer with the possibility to access and manage the archived material independently. Rhenus Archiv Services hereby provides a service offer to its customers.

Categories and recipients of personal data

We manage the following categories

Salutation, first name, last name, e-mail, address, company name, telephone, fax, cost center, delivery address, changes to the user, orders, status of documents (destruction, loan ect.) registration and deregistration, password changes.

We have the following recipients

Recipients are only the Rhenus Archive locations in Germany, as well as the data centers in Germany. No personal data is transferred to third countries.

Duration of storage

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention obligations to the contrary. A detailed deletion concept has been drawn up for this purpose.

Provision of data

Due to the fulfillment of the contract, the customer is obliged to provide the personal data. If he does not wish to provide them, he will not be able to use the Telesto portal.

RIGHTS OF THE DATA SUBJECT

1. right of access

You may request confirmation from us as to whether personal data concerning you are processed by us for.

(1) the purposes for which the personal data are processed;

(2) the categories of personal data which are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information about the origin of the data, if the personal data are not collected from the data subject;

You may obtain from us a free copy of your data. If you are interested in receiving additional copies, we reserve the right to charge you for the additional copies.

2. right of rectification

You have the right to rectification and/or completion vis-à-vis the data controller, if the processed personal data concerning you are inaccurate or incomplete.

3. right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims; or

(4) if you have objected to the processing pursuant to Article 21(1) DSGVO and it has not yet been determined whether the legitimate grounds of the controller outweigh your grounds.

4. right to deletion

You may request us to delete your data if the legal requirements for this are met.

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

(4) The personal data concerning you have been processed unlawfully.

(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

(6) The personal data concerning you was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

5. right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that.

(1) the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and

(2) the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

6. right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests or if we need your data to assert, exercise or defend legal claims

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

7. right to revoke the declaration of consent under data protection law.

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8. right to complain to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.