Privacy Policy

For your protection and the fastest possible traceability of possible chains of infection with the novel Covid-19 virus ("Corona"), we are required to document your presence at our company site. Below we would like to inform you about this data processing:

1. Name and Contact Details of the Person Responsible

​​​​​​​​​​​​​​MAPAL Italy S.R.L.
Via Monza 82
20060 Gessate (MI)
Tel.: +39 02 953861
E-Mail: info.it@mapal.com
Ing. Claudio Gabos

2. Contact Details of the Data Protection Officer

MAPAL Dr. Kress SE & Co. KG
Data Protection Officer
E-mail: datenschutz@mapal.com

3. Purposes and legal Basis of Processing

We collect the information about you, the company, the visit and the confirmations on the basis of our legitimate interest to ensure the protection of our employees and the entire organization according to Art. 6 para. 1 f) DSGVO, the information about your health according to Art. 9 para. 2 b DSGVO in conjunction with. § 26 para. 3 BDSG.

4. Categories of Personal Data

The following categories of personal data are processed:

• Personal data (surname, first name, country, contact person, vehicle registration number (optional)).
• Data about your company (company and address) (optional)
• Data on their visit (date of arrival, gate, entrance to the site)
• Health data (stay in SARS CoV2 risk area, symptoms, contact with persons with confirmed cases of SARS CoV2)
• Confirmation of completion of safety briefing and knowledge of privacy statement.

5. Criteria for the Duration of Storage of Personal Data

Your health information (stay in SARS CoV2 risk area, symptoms, contact with persons with confirmed cases of SARS CoV2) will be fully deleted after 90 days (Art. 17a DSGVO). All other personal data will be fully deleted after 1 year (Art. 17a DSGVO).

6. Recipients or Categories of Recipients of the Personal Data

The data will only be passed on to the responsible departments and, in the event of an infection of one of your contact persons, to the competent authorities (e.g. public health department in accordance with Sections 16, 17 and 25 of the Infection Protection Act).

7. Transmission of Personal Data to a Third Country

There is no transmission to a third country.

8. Your Rights

You are entitled to the following rights according to Articles 15 to 22 EU-DSGVO if the legal requirements are met: right to information, correction, deletion and restriction of processing as well as a right to data portability.

In addition, you have the right to object to processing based on Article 6 (1) (f) EU-DSGVO pursuant to Article 14 (2) (c) in conjunction with Article 21 EU-DSGVO.

Right of complaint to the supervisory authority:

In accordance with Article 77 EU-DSGVO, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.

9. Source of Personal Data

The exclusive source of the data processed by you is yourself.

10. Obligation to provide the Personal Data

If you do not provide the required data, unfortunately we cannot allow you to visit our premises.

11. Supervisory Authority

The competent supervisory authority for data protection for our organization is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg,
P.O. Box 10 29 32, 70025 Stuttgart,
Germany
E-mail: poststelle@lfdi.bwl.de

12. Automated Decision Making Including Profiling

Automated decision-making including profiling does not take place.