1. Data controller:
The Trust Company GmbH
Bahnstraße 33
47877 Willich
Email: datenschutz@ttc-treuhand.de
2. Sources and categories of data processed:
We process personal data that you provide to us in connection with our trust services or that we obtain from publicly available sources or third parties (e.g. SCHUFA). This includes contact details, contract data, payment information and identification data.
3. Purposes and legal bases:
Data is processed to perform a contract (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c) GDPR), on the basis of legitimate interests (Article 6(1)(f) GDPR) or with your consent (Article 6(1)(a) GDPR).
4. Recipients of data:
Your data is only disclosed to third parties where permitted by law or with your consent. These may include IT service providers, data processors or public authorities.
5. Retention period:
We retain your data for the duration of our business relationship and in accordance with statutory retention requirements (up to 10 years, or longer for relevant trust arrangements).
6. Applicant data:
Application documents are used to conduct the recruitment process and, if no employment results, are deleted within 6 months at the latest.
7. Transfers to third countries:
Data is only transferred to third countries where appropriate safeguards are in place (e.g. EU standard contractual clauses).
8. Your rights:
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Articles 15–21 GDPR). To exercise these rights, please contact us at datenschutz@ttc-treuhand.de.
9. Obligation to provide data:
You are only required to provide data necessary to enter into a contract and comply with legal requirements. Without this data, we may be unable to provide our services.
10. Automated decision-making / profiling:
We do not use automated decision-making within the meaning of Article 22 GDPR.
11. Right to object:
You may object to the processing of your data at any time on grounds relating to your particular situation (Article 21 GDPR).
12. Effective date:
This privacy policy is effective from August 2025 and replaces all previous versions.