It is the declared aim of the MHP Group to ensure responsible handling of personal data in all its activities. With this privacy policy, we inform you about the processing of your personal data and about your data protection rights.

1. Data controller and data protection officer
The responsible party within the meaning of the General Data Protection Regulation is:
MHP Management- und IT-Beratung GmbH
Königsallee 49
71638 Ludwigsburg
+49 (0)7141 7856-0
info(at)mhp.com

If you have any questions regarding data protection, please contact our data protection officer at dataprivacy(at)mhp.com.

2. Subject of data protection
The subject of data protection is personal data. This includes all information relating to an identified or identifiable natural person (so-called data subject).
For the purposes listed under 3 we process the following personal data from you:
First name, surname, e-mail, company, date and period of visit.

3. Purpose and legal basis of data processing, categories of recipients
We process your personal data for the purposes of guest management and the fulfilment of audit requirements.
The processing of your personal data is necessary for compliance with a legal obligation, according to Art. 6 para. 1 lit. c) GDPR. The relevant legal obligation results from the purpose stated for the processing of the data.
The processing of your personal data is necessary to protect our legitimate interest, pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest arises from the overview of attendance tracking (building utilization and work safety).

Within the data processing for the administration of the MHP World desk and room booking tool for the purposes of guest registration, employees within MHP will have access to your personal data. Access is limited to those persons who need it for the above-mentioned purposes.

In some cases, we commission external service providers to process this personal data. These service providers are carefully selected by us and regularly monitored, in particular with regard to their careful handling and the correct protection of the transmitted data. In addition, all service providers are obligated by us to maintain confidentiality and to comply with legal requirements. Service providers may also be other companies of the MHP Group.

In the present case, personal data is transmitted to:
Gingco Systems GmbH
Kastanienallee 40
38104 Braunschweig

4. Third country transfer
If the recipient of the data mentioned under 3 has its registered office outside the European Economic Area (EEA) in so-called third countries, we will ensure that, with the help of appropriate guarantees pursuant to Art. 44 et seq. GDPR, an adequate level of data protection is ensured at the recipient, or your consent to the transfer has been obtained.

5. Duration of storage and deletion of data
We store your personal data only as long as it is necessary for the fulfillment of the purposes (and no other legal basis intervenes).
Beyond this point in time, your data will only be stored within the scope of legal requirements. These may result from the laws, regulations or other legal provisions of the European Union or a member state of the European Union to which we are subject.

Regarding the purpose of the processing and the legal retention obligations, your personal data will be deleted after 2 years.

6. Automated decision making and profiling
We do not carry out automated decision-making or profiling that has legal effect on you or affects you in a similar way.

7. Rights of the data subjects
You can exercise your right to information, rectification, objection and erasure of data at any time. To do so, contact us by e-mail to info@mhp.com
or in writing to the address mentioned above.
If you wish the data to be deleted but we are still legally obliged to retain it, access to your data will be restricted. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

8. Right of appeal
You have the possibility to file a complaint with the responsible data protection supervisory authority at any time if you believe that the processing of your data violates applicable law.
To do so, you can contact the data protection authority responsible for your place of residence or your country, or the data protection authority responsible for us. You can reach them at poststelle(at)lfdi.bwl.de