Last updated: March 2022
Cesbit uses personal data from customers, employees and partners. Personal data is mainly collected during the execution of management, project and security services.
Customers must be able to rely on Cesbit to handle personal data with care and security. Cesbit is aware that with the arrival of new technological developments and innovative facilities, the privacy of customers must also be guaranteed, for example through measures in the field of information security, data minimization, transparency and user control.
The board and management play a crucial role in guaranteeing privacy.
Cesbit is responsible for drafting, implementing and enforcing the policy. Among other things, the following legal frameworks apply:
Cesbit handles personal data securely and respects the privacy of those involved. Cesbit adheres to the following principles:Lawfulness, decentness, transparency
Personal data is processed in accordance with the law and in a proper and careful manner.Basis and goal retention
Cesbit ensures that personal data is only collected and processed for specific, explicitly described and justified purposes. Personal data is only processed with a fair basis.Data minimization
Cesbit only processes the personal data that is at least necessary for the predetermined purpose. Cesbit strives for minimal data processing. Where possible, less or no personal data is processed.Retention period
Personal data is not stored any longer than necessary. The retention of personal data may be necessary to properly perform the duties of Cesbit or to be able to comply with legal obligations.Integrity and confidentiality
Cesbit handles personal data with care and treats it confidentially. For example, personal data is only processed by persons with an obligation of confidentiality and for the purpose for which this data was collected. Cesbit also ensures appropriate protection of personal data. This security is laid down in the Cesbit information security policy.Share with third parties
In the case of cooperation with external parties, where data processing of personal data is involved, Cesbit makes agreements about the requirements that data exchange must meet. These agreements comply with the law. Cesbit checks these agreements annually.Subsidiarity
In order to achieve the purpose for which the personal data are processed, infringement of the privacy of the citizen concerned is limited as much as possible.Proportionality
The infringement of the data subject's interests may not be disproportionate in relation to the purpose to be served.Rights of data subjects
Cesbit honors all rights of those involved.