Data Protection

Controller:

Avantgarde Labs GmbH
Represented by Torsten Hartmann
Theresienstrasse 9, 01097 Dresden
Tel.: 0351 – 215 908 34
Email: info@avantgarde-labs.de
Website: https://avantgarde-labs.com

Data Protection Officer

Dresden Institute for Data Protection (Dresdner Institut für Datenschutz)
Hospitalstrasse 4, 01097 Dresden
Tel.: +49 351 655 722 0
Email: m.just@dids.de
Website: www.dids.de

Purposes of processing and legal basis:

We process the personal data you send to us for the purposes of initiating, maintaining and processing contracts/orders concluded between us, to meet our contractual obligations, and to meet our legal obligations. The legal basis for the data processing is to fulfil a contract and to perform precontractual activities in accordance with Article 6(1)(b) GDPR, and to meet legal obligations in accordance with Article 6(1)(c) GDPR. Personal data will only be processed for purposes beyond these if we have obtained consent from the data subject in accordance with Article 6(1)(a) GDPR.

Data recipients:

Data are sent to the third parties involved in the respective order, such as project owners, subcontractors, courts, financial authorities or the like, inasmuch as this is necessary to achieve the purposes of the data processing or we are required to transfer the data for mandatory legal reasons.

Service providers:

We have concluded contracts with the service providers we use for data processing in accordance with Article 28 GDPR.

Purpose of data transfer to third countries:

We use service providers in third countries as defined by data privacy laws. However, these data transfers only occur when the specific requirements of Article 44 ff. GDPR are met (e.g. by agreeing standard data protection clauses). For more information, please contact our Data Protection Officer via the above contact details.

Duration of storage:

We process and store your data for as long as required to achieve the above purposes, and in particular to meet our contractual and legal obligations. If the data are no longer required to achieve these purposes, they will be erased on a regular basis, unless legal retention obligations apply which require us to continue to process these data for a limited time. When data are processed on the basis of your consent, we will erase the relevant personal data if you as the data subject withdraw your consent and if no further legal requirements apply.

Your rights as a data subject:

Data subjects have the right to request access to their personal data at any time, if necessary to request rectification, erasure or restriction of processing of these data, and to object to data processing. They also have a right to data portability for their benefit. In addition, if data are processed on the basis of a data subject’s consent, the data subject can withdraw their consent with effect for the future at any time. To exercise your rights, contact our Data Protection Officer via the above contact details.

Right to lodge a complaint with a supervisory authority:

In accordance with Article 77 GDPR, all data subjects have a right to lodge a complaint with a supervisory authority if they suspect that their personal data have been processed in a way which infringes data protection regulations.