Thank you for your interest in our company. In accordance with the requirements of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the photo, film or sound recordings made of you and, if applicable, other personal data collected and your rights in this regard. To ensure that you are fully informed about the processing of your personal data, please take note of the information below. As far as data collection within the Lürssen Group is concerned, it should be noted that Fr. Lürssen Werft GmbH & Co. KG processes this data centrally and is therefore the responsible entity (controller) as defined in data protection law.

Legal form: Limited partnership under German law (Kommanditgesellschaft)
Company name: Fr. Lürssen Werft GmbH & Co. KG
Zum Alten Speicher 11
28759 Bremen

Registered office: Bremen, Local Court Bremen HRA 10066 HB
VAT identification number [Ust.-ID]: DE114659458
Tax number: 60 100 09012

Managing Directors: Peter Lürßen, Dr. Justus Reinke, Lena Ströbele, Sebastian Rheineck

ReviSEC – Information Security Management
Dipl.-Volksw. Bernd Kamlah
Nahblöcken 3
27299 Langwedel
Germany

Tel.: 04232 / 94 50 644
b.kamlah@revisec.de
www.revisec.de

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

The legal basis is point (f) of Art. 6(1) GDPR. Our companies have a legitimate interest to process personal data for the following purposes:

- Contacting us;
- Coordination of events;
- Documentation of projects and related events

In some cases, you give us your voluntary consent to process personal data. You can withdraw your consent at any time with effect for the future.

We only process data that is related to the stated purposes. This may be general data about you (name, date of birth, address, contact information, etc.), photo, film or sound recordings, details of visits to our companies, IT log data when using our online services and, where applicable, other data that you provide to us in connection with the aforementioned purposes.

We process personal data that you have provided to us by filling out the forms for our online services or through other communication channels such as e-mail. Photo, film or sound recordings made by agencies commissioned by us. We also receive IT log data from Internet service providers to the extent necessary for the proper operation and troubleshooting of our online services.

We share your personal data within our group of companies exclusively with those departments and persons who need this data to fulfill our legitimate interest. We may transfer your personal data to our affiliated companies, customers and suppliers to the extent permitted by the purposes and legal bases set out in this Data Protection Information Sheet.

Your personal data is processed on our behalf on the basis of data processing agreements in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of Internet services, media agencies, and companies providing care and maintenance services for our IT systems. Other than that, data will only be forwarded to recipients outside the group of companies if this is permitted or required by law, if the forwarding is necessary to fulfill legal obligations, or if we have your consent.

Our companies work with international customers and suppliers. In certain cases, a transfer to a third country is necessary to fulfill the aforementioned purposes, in which case such transfer is subject to the special conditions of Art. 44 to 49 of the European General Data Protection Regulation (GDPR).

We store your personal data only as long as this is necessary for the fulfillment of the stated purposes. We store your personal data beyond this only to the extent that this is required by law or in the specific case for the establishment, exercise or defense of legal claims for the duration of a legal dispute.

Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right to lodge the complaint shall be without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR.

Please note that such withdrawal has effect only for the future. Processing that took place before the withdrawal is not affected. Please also note that we may need to retain certain data for a certain period of time to comply with legal requirements.

To the extent that your personal data is processed for safeguarding legitimate interests pursuant to point (f) of Art. 6(1) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation pursuant to Art. 21 GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the establishment, exercise or defense of legal claims. To protect your rights, you can contact us using the contact details provided for our data protection officer.