Information in accordance with Article 13, 14 GDPR of
EXCON Services GmbH
within the framework of orders for claim implementation /collection
The below information is for all private individuals in relation to whom our company asserts a claim of one of our customers within the framework of an order for claim implementation (hereinafter “affected persons”). The information is provided in fulfilment of the legal obligation arising under Article 13, 14 EU General Data Protection Regulation (GDPR).
Identity of the person in charge:
EXCON Services GmbH
Martin-Behaim-Strasse 12, D - 63263 Neu-Isenburg, e-mail: info@excon.com
Contact details of the data protection officer:
Dipl.-Inf. Bernhard C. Witt, it.sec GmbH
Einsteinstrasse 55, D – 89077 Ulm, e-mail: datenschutz@excon.com
Processing purposes and legal bases:
Data processing is carried out for the purposes of contract processing or prosecution. Further purposes of data processing that we pursue are claims management and the legally prescribed prevention of money laundering. The processing of the data of the persons concerned under Article 6(1)(b) GDPR is required for the fulfilment of the agreement concluded between the person affected and the owner of the claim as this also includes the payment obligation. In addition, data processing under Article 6(1)(f) GDPR is required to protect our legitimate interests or the legitimate interests of a third party. The legitimate interests therefore exist both for us and for our customer in connection with the claim against the persons affected. As a precaution, we point out that there is no automatic decision making within the meaning of Article 22 GDPR when processing personal data.
Data categories and data origin:
We process the following categories of data: master data, communication data, agreement data, claim data, and where applicable, payment data.
The data from the above data categories were sent by our customer or by the financial institutions involved in the context of transfer information or were collected directly from the affected persons.
According to Article 6(1)(f) GDPR, to protect legitimate interests, we verify information on address data (where applicable first name, surname, address, email address, telephone number) and the creditworthiness of the affected person. To this end, we collaborate with Regis24 GmbH, Wallstr. 58, 10179 Berlin, from whom we procure or to whom we send data for these purposes. The information in accordance with Article 14 GDPR on the data processing taking place at Regis24 GmbH is available at www.regis24.de/Informationen.
In addition, we determine address data via report register information, where required. Data collected in such a way are not used for advertising purposes.
Recipient:
Within the framework of the collection procedure, the data of the affected person are sent to our customer of the order for claim implementation and, where applicable, the following categories of recipients, if this is required to collect the claim: assignment recipient, information offices, third-party debtors, resident registration offices, courts, bailiffs, lawyers.
Duration of storage:
After payment of the outstanding claim or termination of the order for claim implementation, we verify after the expiry of three years whether we still need the data of the affected person. Insofar as no legal retention period exists, the deletion is carried out; otherwise, it is performed at the latest on expiry of the statutory retention period.
Rights of the affected persons:
The affected persons are entitled to the following rights under articles 15 to 20 GDPR if the requirements are given: right to information, correction, deletion, limitation of processing as well as data portability.
Furthermore, under Article 13 (2)(b), 14(2)(c) in conjunction with Article 21 GDPR affected persons are entitled to a right of objection against the processing, which is based on Article 6(1)(f) GDPR.
Right to complain to the supervisory authority:
Under Article 77 GDPR, affected persons have the right to complain to the supervisory authority if they believe that the processing of their personal data is not lawful. The address of the supervisory authority in charge of our company is: Der Hessische Datenschutzbeauftragte, PO Box 3163, 65021 Wiesbaden, e-mail: poststelle@datenschutz.hessen.de. A complaint is, of course, also possible with any other supervisory authority.
Information in accordance with Article 13, 14 GDPR of
EXCON Services Austria GmbH
within the framework of orders for claim implementation / collection
The below information is for all private individuals in relation to whom our company asserts a claim of one of our customers within the framework of an order for claim implementation (hereinafter “affected persons”). The information is provided in fulfilment of the legal obligation arising under Article 13, 14 EU General Data Protection Regulation (GDPR).
Identity of the person in charge:
EXCON Services Austria GmbH
Sterneckstr. 33, AT – 5020 Salzburg, e-mail: info@excon.com
Contact details of the data protection officer:
Dipl.-Inf. Bernhard C. Witt, it.sec GmbH & Co. KG
Einsteinstrasse 55, D – 89077 Ulm, e-mail: datenschutz@excon.com
Processing purposes and legal bases:
Data processing is carried out for the purposes of contract processing or prosecution. Further purposes of data processing that we pursue are claims management and the legally prescribed prevention of money laundering. The processing of the data of the persons concerned under Article 6(1)(b) GDPR is required for the fulfilment of the agreement concluded between the person affected and the owner of the claim, as this also includes the payment obligation. In addition, data processing under Article 6(1)(f) GDPR is required to protect our legitimate interests or the legitimate interests of a third party:
The legitimate interests therefore exist both for us and for our customer in connection with the claim against the persons affected. As a precaution, we point out that there is no automatic decision making within the meaning of Article 22 GDPR when processing personal data.
Data categories and data origin:
We process the following categories of data: master data, communication data, agreement data, claim data, and where applicable, payment data.
The data from the above data categories were sent by our customer or by the financial institutions involved in the context of transfer information or were collected directly from the affected persons.
According to Article 6(1)(f) GDPR, to protect legitimate interests, we verify information on address data (where applicable first name, surname, address, email address, telephone number) and the creditworthiness of the affected person. To this end, we collaborate with CRIF GmbH, Diefenbachgasse 35, 1150 Vienna, from whom we procure or to whom we send data for these purposes. The information in accordance with Article 14 GDPR on the data processing taking place at CRIF GmbH is available at www.crif.at.
Recipient:
Within the framework of the collection procedure, the data of the affected person are sent to our customer of the order for claim implementation and, where applicable, the following categories of recipients, if this is required to collect the claim or for other legally governed rules: assignment recipient, information offices, third-party debtors, resident registration offices, courts, bailiffs, lawyers.
Duration of storage:
After payment of the outstanding claim or termination of the order for claim implementation, we verify after the expiry of three years whether we still need the data of the affected person. Insofar as no legal retention period exists, the deletion is carried out; otherwise, it is performed at the latest on expiry of the statutory retention period.
Rights of the affected persons:
The affected persons are entitled to the following rights under articles 15 to 20 GDPR if the requirements are given: right to information, correction, deletion, limitation of processing as well as data portability.
Furthermore, under Article 13 (2)(b), 14(2)(c) in conjunction with Article 21 GDPR affected persons are entitled to a right of objection against the processing, which is based on Article 6(1)(f) GDPR.
Right to complain to the supervisory authority:
Under Article 77 GDPR, affected persons have the right to complain to the supervisory authority if they believe that the processing of their personal data is not lawful. The address of the supervisory authority in charge of our company is: Austrian Data Protection Office, Wickenburggasse 8, 1080 Vienna, e-mail: dsk@dsk.gv.at.
