You have reached this page via a link because you want to find out how we process (your) personal data. We gladly provide to you the following information about data protection in fulfilment of our information obligations pursuant to Art. 12 et seqq. of the General Data Protection Regulation (GDPR).

Who is the controller for data processing?

S. Stuttgart Ground Services GmbH
Postfach 23 04 11

D-70624 Stuttgart

You will find additional information about our company and the persons authorised to represent us as well as additional contact opportunities in the legal disclosures on our internet site: https://www.s-ground.de/en/privacy-policy. You can contact our data protection officer at the above address or at datenschutzteam@ahs-aero.de.

What data from you do we process? And for what purposes?

Whenever we have received data from you, we will process them solely for the purposes for which we received or collected them.

The categories of personal data that are processed include (in particular) your master data (such as first name, surname, name affixes, nationality) and contact data (such as private address, mobile phone number, email address). A copy of your personal identity card/passport is required when you apply for an airport ID card at airports. As a rule, your personal data are collected directly from you as part of the business relationship and/or creation of the master data record.

Data processing for any other purposes is considered solely if the legal grounds set forth in Art. 6(4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13(3) GDPR and Art. 14(4) GDPR.

What are the legal grounds for the processing?

The legal grounds for the processing of personal data are set forth in Art. 6 GDPR insofar as there are no other specific statutory provisions. They include the following possibilities in particular:

• Consent (point (a) of Art. 6(1) GDPR)
• Data processing for the fulfilment of contracts (point (b) of Art. 6(1) GDPR)
• Data processing based on the weighing of interests (point (f) of Art. 6(1) GDPR)
• Data processing for compliance with legal obligations (point (c) of Art. 6(1) GDPR)

The primary purpose of data processing is the establishment, conduct and termination of the business relationship. The primary legal grounds for this processing are found in point (b) of Art. 6(1) GDPR. Moreover, if you have given your specific consent in accordance with point (a) of Art. 6(1) and Art. 7 GDPR, it may serve as the authorisation for the use of your data. We also process your data in accordance with point (f) of Art. 6(1) GDPR insofar as required to protect our legitimate interests or the interests of third parties (e.g. government authorities). This is especially true of processing within the corporate group for the purposes of group management, internal communication and other administrative purposes.

If we should wish to process your personal data for any other purposes not mentioned above, we will notify you separately beforehand.

If we process your personal data on the basis of your consent , you have the right to withdraw your consent to our processing at any time with effect for the future.

If we process your data on the basis of a weighing of interests , you as the data subject have the right to object to the processing of your personal data, subject to the provisions of Art. 21 GDPR.

How long will the data be stored?

We process your data for as long as this is necessary for the intended purpose.

If and when there are statutory retention obligations — such as those found in commercial law or tax law provisions — the related personal data will be stored for the duration of the retention obligation. Upon expiration of the retention period, there will be a review to determine whether there is any further need for processing. If there is no such necessity, the data will be erased.

We conduct a review of data toward the end of every calendar year to see if they are still required for processing. Owing to the volume of data, this review is carried out with regard to specific data types or purposes of processing.

You may of course at any time (see below) request information about the personal data concerning you we have stored; if they are no longer required, you may request the erasure of the data or the restriction of their processing.

To what recipients are the data transferred?

Your personal data will be transferred to third parties solely if and when this is necessary for the fulfilment of the contract with you, if the transfer is based on a weighing of interests within the sense of point (f) of Art. 6(1) GDPR, if we are legally obligated to transfer the data or if you have given your consent to the transfer.

If we transfer personal data to service providers or group companies outside the European Economic Area (EEA), the transfer will be carried out solely if and when the EU Commission has confirmed an adequate level of data protection within the third country or if and when other appropriate data protection guarantees (e.g. binding data protection regulations within the enterprise or EU standard contract clauses) are in place. You may use the contact details above to request the information.

Where are the data processed?

We process your personal data primarily in data centres in the Federal Republic of Germany.

We also engage service providers in the European Economic Area or in third countries if and when necessary. We select these service providers carefully — particularly with regard to data protection and data security — and implement any and all measures required under data protection law to ensure that the data processing is permissible.

Your rights as the data subject

You have the right to request information about any personal data concerning you that we have been stored.

If you have requested information in any form other than in writing, we ask you to understand that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or erasure or to restriction of processing insofar as you are legally entitled to do so.

You also have the right to object to the processing within the scope of the legal statutes. The data protection regulations also include the right to data portability.

In particular, you have the right to object to the processing of your data for direct marketing purposes pursuant to Art. 21(1) and (2) GDPR if this is based on a weighing of interests.

Are you obligated to provide your data?

Within the framework of our business relationship, you must provide any personal data that are necessary for the establishment, performance and termination of a business relationship and for the fulfilment of the associated obligations or that we are obligated by law to collect. Without these data, we will not be able to perform the business relationship with you.

Our company does not use any automated decision-making procedures as referenced in points (a) and (b) of Art. 22(2).

Our data protection officer

We have appointed a data protection officer in our company. You may contact the officer at the following address:

AVIATICS Cost & Safety Management GmbH & Co. KG
Kieshecker Weg 148
40468 Düsseldorf
Email: datenschutz@aviatics.de 

Right to lodge a complaint

You have the right to lodge a complaint about our processing of personal data with a data protection supervisory authority.

---

Last revised: 14/12/2023