Data protection information and the processing of personal data regarding the interested party/customer and supplier relationship

Last revised and updated on 17 November 2022

According to the EU General Data Protection Regulation (GDPR), we, as the responsible party for the processing of personal data, are required to provide the corresponding information. According to Art. 13 and 14 GDPR, we inform you about the following points:

Controller luca System

The controller of the processing of personal data collected directly by us is:

culture4life GmbH
Mörikestraße 67
70199 Stuttgart
G

info@culture4life.de

CONTACT DETAILS OF OUR DATA PROTECTION OFFICER OF THE CONTROLLER

You can reach our data protection officer as follows:

culture4life GmbH
Data Protection Officer
Rotherstr. 20
10245 Berlin
Germany

privacy@culture4life.de

Processing description

For the purpose of establishing contact, answering inquiries, contract processing, customer service, and supplier management, it is possible to contact us by e-mail at hello@luca-app.de or to contact our Berlin location culture4life GmbH, Charlottenstraße 59, 10117 Berlin.

Legal basis for processing in the relationship with interested parties/customers and suppliers

  • EU GDPR Art. 6 (1) a) allows us to process your data based on your consent for specific purposes, e.g., newsletter subscription. Note: consent also includes an unambiguous action on your part, e.g., you hand us your business card at an event so that we can contact you.  
  • EU GDPR Art. 6 (1) b) covers data processing that is necessary for the fulfilment of a contract as well as for pre-contractual measures, e.g., inquiries via hello@luca-app.de.  
  • EU GDPR Art. 6 (1) c) allows us to process your data based on a legal obligation, e.g., retention obligations under financial and tax law.  
  • EU GDPR Art. 6 (1) f) allows us to process your personal data if we or a third party have legitimate interests in this processing and your interests, fundamental rights or freedoms do not conflict with this, e.g.:  
  • postal advertising,
  • data collection (contact details and function) from public sources, in particular the internet, to qualify our database of interested parties,
  • e-mail advertising in connection with § 7 (3) UWG,
  • commission settlement with our intermediary partners,
  • avoidance of damage and/or liability of the company through appropriate measures,
  • assertion, exercise or defence of legal claims.

Duration of data storage

In general: After the purpose of the data processing has ceased to exist and the legal retention periods have expired, your personal data will be deleted. As a rule, there are 6 or 10-year retention obligations for companies.  

If the storage is based on your consent, we will delete your personal data if you revoke your consent.

Recipients of your data

In our company, only those employees who need to access your personal data in order to perform their duties will be given access to the extent necessary. All employees are bound to confidentiality and data protection.  

Employed service providers may receive your data to fulfil the purposes described if they fulfil the confidentiality requirements under data protection law. For example, these may be companies in the categories of IT services, printing and shipping services, and data destruction. These service providers are so-called AV service providers (order processors), who are especially contractually obligated according to legal requirements.

Your data will not be passed on outside the EU/EEA.

We often receive referrals of potential clients and service providers from our clients and befriended contacts. In direct communication, we name our data source to you

We use the SaaS provider Recruitee B.V., Keizersgracht 313 1016 Amsterdam, Netherlands, for our applicant management. They process your personal data on our behalf.

Your rights

Regarding the processing of your personal data, you have the following rights provided for in the GDPR, which you can exercise against us for all processing operations:

  • The right to request a statement as to whether your personal data is being processed and, if so, the right to be informed of that data. This information includes, among other things, the purposes of processing, the categories of personal data processed, and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 GDPR).
  • The right to request the rectification of your personal data if it is inaccurate or incomplete (Art. 16 GDPR).
  • The right, under certain conditions, to demand that your personal data be deleted immediately (so-called “right to be forgotten”) (Art. 17 GDPR). The deletion of your data can be carried out accordingly, if there is no justified interest or legal retention period to the contrary.
  • The right to request the restriction of the processing of your personal data under certain conditions (Art. 18 GDPR).
  • The right to revoke at any time a consent given to us regarding the processing of your personal data. Such a revocation is valid for the future and does not affect the lawfulness of the processing that took place until your revocation.

You may also contact our data protection officer to exercise these rights against us.

Regardless of the above rights, you have the right to lodge a complaint with a supervisory authority for data protection and freedom of information, for example with the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Postfach 10 29 32, 70025 Stuttgart.

Tel.: +49 711/615541-0
Fax: +49 711/615541-15

poststelle@lfdi.bwl.de