1. 谁负责处理您的个人数据？
The company that you intend to visit is responsible for processing your personal data. For additional information, please see the short version of the notice you received together with the questionnaire.
2. What kind of personal information do we collect and process?
We collect the following personal data:
- Data related to your current health status, e.g. possible COVID-19 symptoms such as fever, cough, shortness of breath or other breathing difficulties
- Travel information including recently visited destinations listed with a risk level of 5 or 6 (for the list, see the Federal Ministry Republic of Austria - European and International Affairs website (https://www.bmeia.gv.at/reise-aufenthalt/reisewarnungen)
- Information regarding whether any of your close contacts have experienced the symptoms listed above in the past14 days or were diagnosed with COVID-19.
3. 为什么我们使用您的个人数据？
We use your personal data as listed above for the following purposes:
- To maintain the health and safety of our employees and other staff as well as to prevent the spread of the COVID-19 virus as much as possible. We require the information described above to assess the potential risk of COVID-19.
4. What happens if you do not provide us with the information we have requested?
This information is required for us to asses the health risk to our employees. If you refuse, B&R will not able to fulfill the legal obligation applicable to the employer (to maintain the health and safety of our employees). If you do not fill in the form, we will not be able to let you enter a B&R office.
5. 我们处理您的个人数据的法律依据是什么？
To process your personal data for the purposes described above Question 3, we rely on one of the following legal basis:
- We process your sensitive personal data because it is our legal obligation to maintain the health and safety of our employees.
- We may also process your data in the interest of public health, e.g. as protection against serious cross-border threats to health.
We also process your other personal data:
- To fulfill our legal obligations in the field of labor law
- On the basis of our legitimate interest
6. Who receives and processes your personal data (within and outside the EU and EEA or outside the country where your employer is based)?
We only share your personal information with other companies from the B&R and ABB Group or third parties if this is necessary for the purposes described in this notice. If we share your personal data with third parties outside of the EU, we will do so using the appropriate safeguards.
Recipient name or – for non-EU countries – recipient category | 收件人位置 | 目的 | Safeguards in place to protect your personal data |
|---|---|---|---|
B&R affiliates and subsidiaries | List of B&R subsidiaries | The purposes described in the privacy notice | EU standard contractual clauses |
Recipients as required by applicable law or legal procedures (authorities or other bodies specified in a specific legal act, or other local health authorities) | EU and non-EU (within the country of the data controller) | Where required by applicable law or by a lawful request from governmental authorities or a valid legal requirement to conduct a governmental review | If your data is exported from the EU due to these circumstances (this should only happen in exceptional cases), we will ensure adequate protection of your data wherever possible. |
Service providers such as administrative services, including reception | EU and non-EU (within the country of the data controller) | The purposes described in the privacy notice | If your data is exported from the EU due to these circumstances (this should only happen in exceptional cases), we will ensure adequate protection of your data wherever possible. |
If you wish to receive a copy of our privacy policy, please send a request to www.abb.com/privacy.
7. 我们处理和存储您的个人数据多长时间？
Your questionnaire will be destroyed immediately (at the latest, by the end of the day of your visit) if you were asked not to enter our facilities. If you are an external visitor and have answered "no" to all the questions, we will keep your form for 30 days to prove that all persons entering an office have been carefully screened.
8. 您对您的个人数据拥有哪些权利？
If you have questions about data protection, complaints about how we handle your personal data or if you wish to exercise the rights of data subjects listed below, feel free to contact us (www.abb.com/privacy). Under certain circumstances, we may have to restrict these rights of data subjects in order to protect the public interest (e.g. the prevention or detection of criminal offenses) or our business interests (e.g. maintaining legal privilege). 如果您对我们的回复不满意或认为我们正在非法处理您的个人数据，您还可以联系您居住或工作所在国家/地区的数据保护机构，或者您认为可能发生数据泄露，可以根据GDPR第77条进行符合您权利的投诉。除了您提出投诉的权利外，您还有以下权利：
- 知情权：根据GDPR第15条，您有权从我们那里收到有关我们随时根据要求处理的您的个人数据的信息（以文本形式）。This right is limited by the exceptions of Art 4, Para. 6 of the Austrian Data Protection Act, according to which the right of information is not applicable in particular if the provision of this information would endanger a business or trade secret of the responsible party or of a third party.
- Right to rectification: In accordance with Art. 16 of the DSGVO, you have the right to request that we rectify your personal data without delay if it is incorrect. 这项权利受到4, Para. 2 of the Austrian Data Protection Act, according to which, in the event that the correction of personal data processed with the aid of automation cannot be carried out immediately because it is only possible at certain times for economic or technical reasons, the processing of the personal data in question must be restricted with the effect of Art. 18, Para. 2 of the GDPR until this point in time.
- Right to erasure: You have the right to request us to delete your personal data under the conditions set out in Art. GDPR第17条规定的条件下删除您的个人数据。These conditions are particularly met if a) the respective processing purpose has been achieved or otherwise ceases to apply, b) we have processed your data unlawfully, c) you have revoked your consent without the data processing being able to be continued on another legal basis, d) you successfully object to the data processing or e) in cases where there is an obligation to delete the data on the basis of EU law or the law of an EU member state to which we are subject. 这项权利受到4, Para. 2 of the Austrian Data Protection Act, according to which, in the event that the deletion of personal data processed with the aid of automation cannot be carried out immediately because it is only possible at certain times for economic or technical reasons, the processing of the personal data in question must be restricted with the effect of Art. 18, Para. 2 of the GDPR until this point in time.
- Right to restrict processing: In accordance with Art. GDPR第18条，您可以要求我们仅在有限范围内处理您的个人数据。This right exists in particular under the conditions that a) the accuracy of the personal data is disputed, b) you request limited processing instead of deletion under the conditions of a justified request for deletion, c) the data is no longer necessary for the purposes we pursue, but you need the data to assert, exercise or defend legal claims, or d) the success of an objection is still disputed.
- Right to data portability: In accordance with Art. 20 of the GDPR, you have the right to receive your personal data that you provided us in a structured, common, machine-readable format, as well as the right to have us transfer this data to another responsible party.
- Right to object: In accordance with Art. GDPR第21条，您有权随时以与您的特定情况相关的理由反对处理您的个人数据，无论是为了公共利益还是为了维护我们的合法利益。Thereafter, we will stop processing your personal data unless we can prove compelling reasons for processing your personal data that are worthy of protection, which outweigh your interests, rights and freedoms, or unless such processing serves to assert, exercise or defend legal claims. If you object to the processing of your personal data for marketing purposes, we will stop processing your data in any case.
Last updated: Saturday, November 27, 2020