Privacy policy for the time recording app for all Klotz employees

1. name and contact details of the responsible body

Klotz GmbH
Robert-Bosch-Strasse 1
89359 Kötz
Phone: +49 (0) 8221 905-0
E-Mail: info@klotz.de

The company data protection officer can be contacted at the above address or at the e-mail address datenschutz@klotz.de or by calling 08221 905-778 or .

2. purpose of the processing

• Mobile project time recording via an app

3. categories of personal data that are processed

• To use the app, a unique ID is generated for each employee - within the app - and this ID and the employee's abbreviation are used to record and display their project time.
• The app also optionally accesses the camera to scan QR codes. The camera images are processed directly on the device and are only used to recognize QR codes. The camera images are not saved.
• If the employee uses the new contact function in the app, their abbreviation and email address are also transmitted along with the message so that they can receive targeted help in the event of problems and, above all, reply to the employee.
• We use SSL encryption to provide the best possible protection for transmitted employee data. Data transmission to the web server for displaying and saving project times and for searching for work packages and cost types is SSL-encrypted. You can recognize such encrypted connections by the prefix "https://" in the page link in the address bar of your browser. Unencrypted pages are marked with "http://". All data that you transmit to this website cannot be read by third parties thanks to SSL encryption. The provider (or its web space provider) collects data about every access to the website (so-called server log files). The access data is stored in server log files.

4. legal basis of the processing

Data processing is carried out within the scope and for the purposes of the employment relationship in accordance with Section 26 (1) of the German Federal Data Protection Act (BDSG).

5. recipients / categories of recipients

The above-mentioned data will only be transmitted for the above-mentioned purposes. Your data will only be passed on to the following recipients on the basis of the above-mentioned legal basis:

• Selected employees of the Klotz company
• Selected employees of SPiN AG

6. transfer to a third country

The transfer of personal data to a third country does not take place.

7. duration of storage

• Your log-in data will be deleted immediately after you leave the company.
• Your personal data will be anonymized 6 years after leaving the company.

8. rights of data subjects

As a data subject, you have the following rights under the GDPR:

• Information (Art. 15) with restriction according to §34 BDSG
• Rectification (Art. 16)
• Deletion (Art. 17) with restriction according to §35 BDSG
• Restriction of processing (Art. 18)
• Objection (Art. 19)
• Data portability (Art. 20)
• Right to lodge a complaint with a supervisory authority (Art. 77):
  Bavarian State Office for Data Protection
  Promenade 18
  91522 Ansbach