Information to be provided to requesting parties under Article 13 and 14 of the GDPR

1. Processing activity

This data protection notice is provided in connection with telephone, postal mail or email requests made by parties concerning any and all activities/tasks of the DIHK. We are unable to respond to your request without processing your data.

2. Identity and contact details of the controller

Deutsche Industrie- und Handelskammer (DIHK)
(German Chamber of Commerce and Industry [DIHK])
Breite Straße 29
D-10178 Berlin
Phone +49 (0)30 20308-0

3. Contact details of the controller's Data Protection Officer

Kei-Lin Ting-Winarto
Deutsche Industrie- und Handelskammer (DIHK)
(German Chamber of Commerce and Industry [DIHK])
Breite Straße 29
D-10178 Berlin
Phone +49 (0)30 20308-2717

4. Purposes of and legal basis for the processing

We process your data in order to take receipt of and respond to your request.

We process your data on the basis of Article 6(1)(a) of the GDPR.

5. Recipients or categories of recipients of the personal data

The recipients or categories of recipients of your personal data are as follows:

  • The DIHK staff responsible for processing your request
  • As required, DIHK colleagues/heads of department to consult on the response
  • As required, the applicable Chamber of Commerce and Industry (Industrie- und Handelskammer; IHK) to clarify the matter or for it to respond
  • As required, expert working groups for legal appraisal
  • As required, German Chambers of Commerce Abroad (Aulandshandelskammern ( AHKs) for them to respond
  • As required, the competent federal ministry for legal appraisal follow-up
  • As required, the German Protective Association against Economic Crime (Deutscher Schutzverband gegen Wirtschaftskriminalität; DSW) or the Centre for Protection against Unfair Competition (Wettbewerbszentrale) for legal action
  • Our service providers for application technical support.

6. Transfer of personal data to a third country

It is not planned for your personal data to be transferred to a third country or international organisation. An exception may arise if a response is needed from a German Chamber of Commerce Abroad outside of the European Economic Area (EEA).

7. Period for which the personal data will be stored

The retention period is the period that applies for any resulting course of action; otherwise, a retention period of three years applies for the event of any follow-up requests.

8. Your rights as a data subject

You have the following rights under the EU General Data Protection Regulation:

If your personal data is processed, you have the right to obtain information about the personal data concerning you that is stored (Article 15 of the GDPR).

If incorrect personal data is processed, you have a right of rectification (Article 16 of the GDPR).

If the statutory requirements are met, you can obtain erasure of the data or restriction of processing and have the right to object to the processing (Articles 17, 18 and 21 of the GDPR).

If you have consented to processing or there is a contract for data processing and the processing is carried out by automated means, you may have the right to data portability (Article 20 of the GDPR).

In the event that you exercise the aforementioned rights, DIHK will determine whether the statutory requirements are met.

To exercise your rights, please contact the Data Protection Officer.

If you have any complaints concerning data protection, you may contact the competent supervisory authority:

BfDI Federal Commissioner for Date Protection and Freedom of Information
Graurheindorfer Straße 153
3117 Bonn
Phone: +49 (0)228 997799-0

9. Source of data

Data concerning third parties may be stated in information requests and processed for the purpose of responding to the request.


Porträtfoto Kei-Lin Ting-Winarto
Kei-Lin Ting-Winarto Referatsleiterin Datenschutz | Rechtsanwältin (Syndikusrechtsanwältin)