The responsible party in terms of data protection law is:
TIMETOACT GROUP GmbH
Im Mediapark 5
50670 Cologne
Germany

You can find further information about our company, details of authorized representatives, and additional contact options in the legal notice section of our website: 
https://www.timetoact-group.com/en/includes/legal-information

When we receive data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

The legal basis for the processing of personal data is generally Article 6 GDPR, unless there are more specific legal provisions. The following possible legal bases are particularly relevant here:

• Consent (Art. 6(1)(a) GDPR)
• Data processing for the performance of contracts (Art. 6 (1) (b) GDPR)
• Data processing based on a balancing of interests (Art. 6 (1) (f) GDPR)
• Data processing for compliance with a legal obligation (Art. 6 (1) (c) GDPR)

If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with future effect.

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. The interests we pursue in this regard are, in particular:

• Submission and invoicing of quotations and orders, documentation and proof of services rendered and agreements made; proof of timely execution, documentation
• Communication with customers and colleagues, collaboration support, cooperative working, and use of appropriate, up-to-date software; procurement and provision of centralized services by specialists; central coordination and provision of IT services.
• Room planning, meeting and event organization, provision of internet access for visitors
• Maintenance and administration of IT systems, ensuring IT and building security, protection against data loss, protection of own and third-party property
• Protection of corporate interests, evidence management in legal disputes, defense against appeals and enforcement of legally binding claims, settlement of insurance claims
• Marketing, co-marketing, and co-sales as a group, sharing contacts within the group, identifying potential additional offers, avoiding duplication, prioritization and segmentation with regard to advertising efficiency, optimizing newsletter marketing, and reducing the rate of unopened newsletters (“spam”)
• Continuous improvement and efficient execution of business operations, including centralization of tasks within the group and optimization of cost structures

We process the data for as long as is necessary for the respective purposes.

If there are legal retention requirements—e.g., under commercial or tax law—the relevant personal data will be stored for the duration of the retention requirement. Once the retention requirement has expired, we check whether there is any further need for processing. If there is no longer any need, the data is deleted.

As a matter of principle, we review data towards the end of each calendar year to determine whether further processing is necessary. Due to the volume of data, this review is carried out with regard to specific types of data or purposes of processing.

You can, of course, request information about the data we have stored about you at any time (see below) and, if there is no longer a need for it, request that the data be deleted or that its processing be restricted.

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 (1) lit. f) GDPR, if we are legally obliged to do so, or if you have given your consent.

We would like to point out that, as a member of the TIMETOACT GROUP, we share your data with other members within the TIMETOACT GROUP for the purpose of executing the contract and on the basis of our interest in informing you about and allowing you to benefit from the advantages and offers of all companies affiliated with the TIMETOACT GROUP, including our events and consulting services. This also serves the purpose of avoiding multiple information being sent to you by different members of the TIMETOACT GROUP independently of each other and of being able to offer you a comprehensive portfolio of services.

In addition, we use service providers and providers for hosting and various services, to whom the data necessary for their activities is also transmitted, which may include personal data.

Wherever possible, we process your personal data exclusively in data centers in the Federal Republic of Germany or in data centers within the EU. Where this is not possible, we only use services from companies with which we have contractually ensured the protection of your personal data by means of EU standard contractual clauses.

You have the right to obtain information about the personal data we process about you.

If you submit a request for information that is not in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

Furthermore, you have the right to correction or deletion or to restriction of processing, insofar as you are legally entitled to do so.

You also have the right to object to processing within the framework of the legal requirements. The same applies to the right to data portability.

In particular, you have the right to object to the processing of your data in connection with direct marketing pursuant to Art. 21 (1) and (2) GDPR if this is based on a balancing of interests.

We have appointed a data protection officer for our company. You can reach them using the following contact details:

By mail:
Dr. Bittner Group GmbH
– Data Protection Officer TIMETOACT GROUP GmbH –
Podbielskistr. 368
30659 Hanover
Germany

Email: 
datenschutzteam340@drbg.de

You have the right to complain to a data protection supervisory authority about our processing of your personal data.