Rights of Affected Parties under Art. 13 GDPR

Dear customers,

The information below provides you with an overview of the processing of your personal data and your rights under Art. 13 GDPR.

Name and contact details of the data controller: IPH Handelsberatung GmbH, Brienner Strasse 45, 80333 Munich

Contact details of the data protection officer:
You can contact our data protection officer, Gesellschaft für Personaldienstleistungen mbH, at: Pestalozzistrasse 27, 34119 Kassel, telephone: +49 561 78968-93, fax: +49 561 78968-61, e-mail: datenschutz@gfp24.de. 

Purpose of processing and legal basis:
We process the personal data outlined below in accordance with the provisions of the General Data Protection Regulation and the Federal Data Protection Act [Bundesdatenschutzgesetz].

Personal data is processed in order to bring about transactions and services in the performance of our contracts with our customers or to take pre-contractual steps, at your request.

The processing of your data is necessary under GDPR Art. 6 para. 1f in order to safeguard our legitimate interests or those of a third party.

Our legitimate interests consist of, for example, managing our business and the further development of services and products, ensuring IT security and the company’s IT operations and the assertion of legal rights.

Categories and origin of data:

We process personal data obtained by us through our business relations with our customers and prospective customers. We also process – insofar as necessary for the provision of our services – personal data which we have rightfully obtained from other companies.
Relevant personal data could be in the following categories: master data (name, address, other contact and communication data (telephone, e-mail address, mobile phone number etc.), communication data, contract data, receivables data or statistical data.


Within our company, the departments given access to your data are those which need it in order to fulfil our contractual and legal obligations.
We do not disclose your personal data to third parties.
The exception to this is our service partners, if this is necessary for the performance of the contract, such as: client management, strategic positioning and communications, market research, content marketing, payments, support/maintenance of computer/IT applications, research, website management or data destruction.

Duration of storage:

The data stored in relation to you is erased after two years after performance of the contract and the expiry of warranty periods, unless this is contrary to other legal retention obligations. This includes any commercial law or financial law data. It will be erased in accordance with legal requirements after ten years, unless any longer retention periods are prescribed or necessary for legitimate reasons. If you withdraw your consent to the use of your data, it will be erased immediately unless this is inconsistent with the above reasons.

Rights of affected persons:

You can access the information about you stored by us at any time. You have a right to rectification, blocking (restriction of processing) and erasure of your stored data and the processing thereof. If this is contrary to statutory, contractual or commercial or tax law retention periods or other legal considerations, your data will not be erased but it will be blocked.

Right to object:

You have a right to object, i.e. you can object to our use of your data at any time.  Please address your objection to:

IPH Handelsimmobilien GmbH, datenschutz.iph@bbe.de.

Please note that withdrawal of consent takes effect only for the future. It does not affect processing which took place before the withdrawal.

Right to complain to the supervisory authority:

Under Art. 77 GDPR, you have a right to complain to the supervisory authority if in your view your personal data has not been processed lawfully. The address of the competent supervisory authority for our company is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.

Provision of data:

Within the scope of our business relationship, you must provide the personal data necessary in order to establish and implement our business relationship and to fulfil the associated contractual obligations.

Without this data, we cannot perform our high-quality consulting services or provide you with sufficient information. The result would be that we could not fulfil our business objectives properly.

Automated decision-making:

No automated decision-making is carried out in individual cases, including profiling.