Information pursuant to Articles 13 and 14 of the GDPR provided by EXCON Services GmbH in connection with debt collection/debt repossession mandates
The following information is intended for all natural persons against whom our company asserts a claim on behalf of one of our clients within the scope of a debt collection order (hereinafter also referred to as “data subjects”). The information is provided in compliance with the legal obligation arising from Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
Additional information on how your data is handled in the context of your visit to this website can also be found in our privacy policy.
Identity of the controller:
EXCON Services GmbH
Siemensstraße 10, D - 63263 Neu-Isenburg, email: info@clearfini.com
Contact details of the data protection officer:
Dr. Bettina Kraft
SITS Deutschland GmbH
Wiesbaden Branch
Konrad-Adenauer-Ring 33
65187 Wiesbaden
Purposes of processing and legal bases:
Data processing takes place for the purpose of contract performance or the assertion of legal claims. Other purposes we pursue in processing data are debt management and the prevention of money laundering as required by law. The processing of the data subject's data is necessary in accordance with Art. 6 (1) (b) GDPR for the performance of the contract between the data subject and the debt holder, as the payment obligation is part of this. In addition, data processing pursuant to Art. 6 (1) (f) GDPR is necessary to protect our legitimate interests or the legitimate interests of a third party. Legitimate interests exist for both us and our client in connection with the debt against the data subjects. We would like to inform you in advance that the processing of personal data does not involve automated decision-making within the meaning of Article 22 of the GDPR.
Data categories and data source:
We process the following categories of data: basic data, communication data, contract data, debt data, and, where applicable, payment information.
The data in the aforementioned data categories has been provided to us by our client or by participating banks as part of the transfer information, or has been collected directly from the data subjects.
In accordance with Art. 6 (1) (f) GDPR, for the protection of legitimate interests, we check, where applicable, the address data (where applicable, first name, last name, address, email address, telephone number) and the creditworthiness of the data subject. For this purpose, we work with Regis24 GmbH, Wallstr. 58, 10179 Berlin, from whom we obtain data for these purposes and to whom we transmit data. Information pursuant to Art. 14 GDPR on data processing at Regis24 GmbH is available at www.regis24.de/Informationen.
In addition, we obtain address data from the population register. The data collected in this way will not be used for advertising purposes.
Recipients:
As part of the debt collection process, we will pass on the data of the data subject to our client who has commissioned us to collect the debt and, if necessary for the collection of the debt, to the following categories of recipients: assignees, entitled authorities (e.g., financial authority), credit information agencies, third-party debtors, population registers, courts, bailiffs, lawyers.
Storage period:
After the outstanding debt has been paid or the mandate for debt collection has been terminated, we check after four years whether we still need the data of the data subject. If there is no legal retention period, the data is deleted; otherwise, it is deleted at the latest after the legal retention period has expired.
Rights of data subjects:
If the legal requirements are met, data subjects have the following rights under Articles 15 to 20 of the GDPR: the right to information, correction, deletion, restriction of processing, and data portability.
In addition, data subjects have a right to object to processing pursuant to Art. 13 para. 2 lit. b, 14 para. 2 lit. c in conjunction with Art. 21 GDPR, which is based on Art. 6 para. 1 lit. f GDPR.
Right to lodge a complaint with a supervisory authority:
Pursuant to Art. 77 GDPR, data subjects have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data has been unlawful. The address of the supervisory authority responsible for our company is: Data Protection Officer of the State of Hesse, PO Box 3163, 65021 Wiesbaden, email: poststelle@datenschutz.hessen.de.
Of course, a complaint can also be lodged with any other supervisory authority.
Information pursuant to Articles 13 and 14 of the GDPR from EXCON Services Austria GmbH in connection with debt collection/debt recovery mandates
The following information is intended for all natural persons against whom our company asserts a claim on behalf of one of our clients within the scope of a debt collection order (hereinafter also referred to as “data subjects”). The information is provided in compliance with the legal obligation arising from Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
Additional information on how your data is handled in the context of your visit to this website can also be found in our privacy policy.
Identity of the controller:
EXCON Services Austria GmbH (debt collection agency)
Sterneckstr. 33, AT – 5020 Salzburg, Email: info@clearfini.com
Contact details of the data protection officer:
Dr. Bettina Kraft
SITS Deutschland GmbH
Wiesbaden Branch
Konrad-Adenauer-Ring 33
65187 Wiesbaden, Germany
Purposes of processing and legal bases:
Data processing takes place for the purpose of contract performance or the assertion of legal claims. Other purposes we pursue in processing data are debt management and the prevention of money laundering as required by law. The processing of the data subject's data is necessary in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract between the data subject and the debt holder, as the payment obligation is part of this. In addition, data processing pursuant to Art. 6 (1) (f) GDPR is necessary to protect our legitimate interests or the legitimate interests of a third party. Legitimate interests exist both for us and for our client in connection with the debt against the data subjects. We would like to inform you in advance that the processing of personal data does not involve automated decision-making within the meaning of Article 22 of the GDPR.
Categories of data and source of data:
We process the following categories of data: basic data, communication data, contract data, debt data, and, where applicable, payment information.
The data in the aforementioned data categories has been provided to us by our client or by participating banks as part of the transfer information, or has been collected directly from the data subjects.
In accordance with Art. 6 (1) (f) GDPR, for the protection of legitimate interests, we check, where applicable, the address data (where applicable, first name, last name, address, email address, telephone number) and the creditworthiness of the data subject. For this purpose, we work with CRIF GmbH, Diefenbachgasse 35, 1150 Vienna, from whom we obtain data for these purposes and to whom we transmit data. Information pursuant to Art. 14 GDPR on data processing at CRIF GmbH is available at www.crif.at.
Recipients:
As part of the debt collection process, we will pass on the data of the data subject to our client who has commissioned us to collect the debt and, if necessary for the collection of the debt or permitted for other legal reasons, to the following categories of recipients: assignees, entitled authorities (e.g., financial authority ...), credit agencies, third-party debtors, population registration offices, courts, bailiffs, lawyers.
Storage period:
After the outstanding debt has been paid or the mandate for debt collection has been terminated, we check after four years whether we still need the data of the data subject. If there is no legal retention period, the data is deleted; otherwise, it is deleted at the latest after the expiry of the legal retention period.
Rights of data subjects:
If the legal requirements are met, data subjects have the following rights under Articles 15 to 20 of the GDPR: the right to information, correction, deletion, restriction of processing, and data portability.
In addition, data subjects have a right to object to processing pursuant to Art. 13 para. 2 lit. b, Art. 14 para. 2 lit. c in conjunction with Art. 21 GDPR, which is based on Art. 6 para. 1 lit. f GDPR.
Right to lodge a complaint with a supervisory authority:
Pursuant to Art. 77 of the GDPR, data subjects have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data has been unlawful. The address of the supervisory authority responsible for our company is: Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, email: dsk@dsk.gv.at.