Information according to Art. 13, 14 GDPR of EXCON Services GmbH in the context of orders for the realization of receivables / debt collection

The following information is directed to all natural persons against whom our company asserts a claim of one of our clients within the scope of an order for the realization of a claim (hereinafter also referred to as "data subjects"). The information is provided in fulfillment of the legal obligation resulting from Art. 13, 14 EU General Data Protection Regulation (GDPR).

Identity of the responsible person:
EXCON Services GmbH
Siemensstraße 10, D - 63263 Neu-Isenburg, E-Mail: info@excon.com

Contact details of the data protection officer:
Stefan Schmidt, EXCON CISO,
Siemensstraße 10 63263 Neu-Isenburg,
E-Mail: datenschutz@excon.com

Processing purposes and legal basis:
Data processing is carried out for the purpose of contract processing or legal prosecution. Other purposes of data processing pursued by us are receivables management and the prevention of money laundering as required by law. According to Art. 6 (1) letter b GDPR, the processing of the data of the data subjects is necessary for the performance of the contract concluded between the data subject and the holder of the claim, as this also includes the obligation to pay. In addition, the data processing is necessary according to Art. 6 (1) (f) GDPR for the protection of our legitimate interests or the legitimate interests of a third party. The legitimate interests exist both for us and for our client in connection with the claim against the data subjects. As a precaution, we point out that the processing of personal data does not involve automated decision-making within the meaning of Article 22 GDPR.

Data categories and data origin:
We process the following categories of data: master data, communication data, contract data, receivables data, payment information, if applicable.

The data from the aforementioned data categories were transmitted to us by our client or the financial institutions involved in the context of transfer information or collected directly from the data subjects.

Pursuant to Art. 6 (1) (f) GDPR, we may check information on address data (if applicable, first name, last name, address, e-mail address, telephone number) and the creditworthiness of the data subject in order to protect legitimate interests. For this purpose, we cooperate with Regis24 GmbH, Wallstr. 58, 10179 Berlin, from whom we obtain or transmit data to them for these purposes. The information pursuant to Art. 14 GDPR on the data processing taking place at Regis24 GmbH is available at www.regis24.de/Informationen.

In addition, we obtain address data by means of information from the population register if required. Data collected in this way is not used for advertising purposes.

Recipients:
In the context of the collection procedure, we will transmit the data of the data subject to our client of the order for the realization of the claim and, if necessary, to the following categories of recipients, insofar as this is necessary for the collection of the claim: assignees, credit agencies, third-party debtors, residents' registration offices, courts, bailiffs, lawyers.

Duration of storage:
After payment of the outstanding debt or termination of the order to realize the debt, we check after three years whether we still need the data of the data subject. If there is no legal retention period, the data will be deleted, otherwise it will be deleted at the latest when the legal retention period expires.

Rights of the data subjects:
The data subjects are entitled to the following rights according to Art. 15 to 20 GDPR if the requirements are met: right to information, correction, deletion, restriction of processing, as well as data portability.

In addition, data subjects have the right to object to processing based on Art. 6(1)(f) GDPR pursuant to Art. 13(2)(b), 14(2)(c) in conjunction with Art. 21 GDPR.

Right of appeal to the supervisory authority:
In accordance with Art. 77 GDPR, data subjects have the right to lodge a complaint with the supervisory authority if they believe that their personal data is not being processed lawfully. The address of the supervisory authority responsible for our company is: Der Hessische Datenschutzbeauftragte, Postfach 3163, 65021 Wiesbaden, e-mail: poststelle@datenschutz.hessen.de.
A complaint is of course also possible with any other supervisory authority.

Information according to Art. 13, 14 GDPR of EXCON Services Austria GmbH in the context of orders for the realization of receivables / debt collection

Identity of the person responsible:
EXCON Services Austria GmbH
Sterneckstr. 33, AT - 5020 Salzburg, E-Mail: info@excon.com

Contact details of the data protection officer:
Dipl.-Inf. Bernhard C. Witt, it.sec GmbH & Co. KG
Einsteinstraße 55, D – 89077 Ulm, E-Mail: datenschutz@excon.com

Data categories and data origin:
We process the following categories of data: master data, communication data, contract data, receivables data, payment information, if applicable.

The data from the aforementioned data categories were transmitted to us by our client or the financial institutions involved in the context of remittance information or collected directly from the persons concerned.

Pursuant to Art. 6 (1) (f) GDPR, we check information on address data (if applicable, first name, last name, address, e-mail address, telephone number) and the creditworthiness of the data subject in order to protect legitimate interests, if applicable. For this purpose, we cooperate with CRIF GmbH, Diefenbachgasse 35, 1150 Vienna, from whom we obtain or transmit data to them for these purposes. The information pursuant to Art. 14 GDPR on the data processing taking place at CRIF GmbH is available at www.crif.at.

Recipients:
In the context of the collection procedure, we will transmit the data of the data subject to our client of the order for the realization of the claim and, if applicable, to the following categories of recipients, insofar as this is necessary for the collection of the claim or is permitted for other legally regulated reasons: assignees, credit agencies, third-party debtors, residents' registration offices, courts, bailiffs, lawyers.

Duration of storage:
After payment of the outstanding debt or termination of the order for the realization of the debt, we check after three years whether we still need the data of the data subject. If there is no legal retention period, the data will be deleted, otherwise it will be deleted at the latest when the legal retention period expires.

In addition, data subjects have the right to object to processing based on Art. 6(1)(f) GDPR pursuant to Art. 13(2)(b), Art. 14(2)(c) in conjunction with Art. 21 GDPR.

Right of complaint to the supervisory authority:
In accordance with Art. 77 GDPR, data subjects have the right to lodge a complaint with the supervisory authority if they believe that their personal data is not being processed lawfully. The address of the supervisory authority responsible for our company is: Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, e-mail: dsk@dsk.gv.at