Data protection policy

Data protection

Information in the context of the use of our websites and in the context of our activities in social media

Last updated: 11.08.2022

1. Data protection at a glance

1.1 General notes

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

The operator of this site takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

1.2 How do we process your data?

n the one hand, your data is collected when you actively provide it to us, e.g. when you contact us via the contact form, send us an application or contact us for business purposes. Other data is collected automatically, e.g. when you visit the website through our IT systems. This is mainly technical data (e.g. name of the internet service provider, IP address, details of the website from which you are visiting us, files requested, amount of data transferred, downloads/file export, internet browser, operating system or time of page access).

This data is processed automatically as soon as you enter our website.
You can contact us at any time on this and other questions on the subject of data protection using the contact details provided.

1.3 Up-to-dateness and amendment of this information obligation pursuant to Art. 13 and Art. 14 DS-GVO

This data protection information obligation is currently valid and has the status August 2022.

It may be necessary to amend this information due to changes in legal or official requirements, among other things. You can access and print out the current information obligations on data protection at any time on the website https://wiegel.co/data-protection/.

2. General notes and mandatory information

2.1 Data protection

When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

2.2 Note on the responsible body

The data controller for this website is:

WIEGEL Verwaltung GmbH Co KG
Hans-Bunte-Straße 25, 90431 Nuremberg, Germany

Telephone: +49 911 3 24 20-200
E-Mail: info@wiegel.de

2.3 Data Protection Officer required by law

We have appointed a data protection officer for our company.

If you have any questions about data protection, please send your question to: datenschutz@wiegel.de

2.4 What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time under the legal conditions (Art. 15 DS-GVO). You also have the right to demand the correction (Art. 16 DS-GVO) or deletion (Art. 17 DS-GVO) of this data. Furthermore, you have the right to data portability (Art. 20 DS-GVO) and the right to object to data processing (Art. 21 DS-GVO). You also have the right not to be subjected to automated processing. Such processing does not take place. If you have given consent for data processing, you can revoke this at any time for the future. For this purpose, an informal communication by e-mail to us is sufficient. Furthermore, you have the right to lodge a complaint with the data protection supervisory authority at your place of residence / domicile or at the place of the (suspected) violation.

2.5 Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

3. Privacy policy for our website

3.1 Purpose and legal basis

On the one hand, your data is collected when you actively provide it to us, e.g. when you contact us via the contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. name of the internet service provider, IP address, details of the website from which you are visiting us, files requested, amount of data transferred, downloads/file export, internet browser, operating system or time of page access). This data is processed automatically as soon as you enter our website.

The data is collected to ensure the secure and technically error-free provision of the website. For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Art. 6 para. 1 lit. f DS-GVO.

3.2 Cookies, Art. 6 para. 1 p. 1 lit. a, f DS-GVO, § 25 para. 1, 2 TTDSG

The website partly uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required for technically flawless and secure site operation are stored on the basis of our legitimate interest, Art. 6 (1) lit. f DS-GVO. The website operator has a legitimate interest in storing cookies for the technically faultless and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these will be treated separately in this data protection declaration and your consent may be requested.

3.3 Web analytics tools: Matomo (formerly Piwik)

This website uses the open source web analytics software Matomo. The provider is InnoCraft Ltd (“Matomo”), 150 Willis St, 6011 Wellington, New Zealand. We run the analytics service on our own web server, no data is transmitted to third parties. Matomo uses cookies which are stored on your computer and which enable an analysis of your use of the website. For this purpose, the information generated by the cookies about the use of this website is stored on our server. The IP address is anonymised before storage. Matomo cookies remain on your terminal device until you delete them.

The information generated by the cookies about the use of this website is not passed on to third parties.

You may refuse the use of cookies by selecting the appropriate settings on the cookie banner and your browser software, however please note that if you do this you may not be able to use the full functionality of this website. If you delete your cookies, this will have the effect that the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DS-GVO, § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data.

To exercise your opt-out and decide again on the use of Matomo cookies in the future, please either follow the option described above to opt-out or click on the “Cookies” link at the foot of this website.

3.4 Plugins and tools

3.4.1 Google Maps

This site uses the mapping service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website.

We have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 p. 1 lit. a DS-GVO, § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future. In this case, an opt-out cookie will be stored in your browser, which prevents information from being transmitted to and stored by Google.

To exercise your opt-out and decide again about the use of Google Maps in the future, please either follow the option to opt-out described above or click the “Cookies” link at the bottom of this website.

More information on the handling of user data can be found in Google’s privacy policy:  https://policies.google.com/privacy?hl=en-UK

3.5 Data processing in connection with our contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The principle of data minimisation is observed here, in that you only have to provide the data that we absolutely need from you to contact you. These are your e-mail address, your name, your postcode and the message field itself. In addition, your IP address is processed due to technical necessity and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. to answer your questions more individually).

The processing of this data is based on Art. 6 (1) lit. b DS-GVO, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) DS-GVO) or on your consent (Art. 6 (1) (a) DS-GVO) if this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

In order to answer your enquiry, we will – if necessary – pass on your contact request to the responsible persons at the relevant WIEGEL company. A list of the WIEGEL companies that may be responsible for you can be found here: https://wiegel.co/sites/.

This is done on the basis of the legitimate interest according to Art. 6 para. 1 lit. f EU-DS-GVO on our part to contact you in an uncomplicated and speedy manner. You have the right to object to this.

3.6 Data processing in connection with an enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DS-GVO, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f DS-GVO) or on your consent (Art. 6 para. 1 lit. a DS-GVO) if this has been requested.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

3.7 Recipients of the data / categories of recipients

Within our group of companies, we ensure that only those persons receive your data who need it to fulfil contractual and legal obligations.

In certain cases, service providers support our specialist departments in the fulfilment of their tasks. The necessary data protection contracts have been concluded with all service providers.

3.8 Disclosure to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the corresponding consent. Otherwise, we will not disclose your data to third parties unless we are obliged to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

3.9 Third country transfer / intention to transfer to a third country

Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the implementation of the contractual relationship, is required by law or you have given us your consent.

We do not transfer your personal data to any service provider or group company outside the European Economic Area.

3.10 Storage period of the data

We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored even after the primary processing purpose has been fulfilled (e.g. for verification purposes). This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). As soon as there are no longer any retention obligations, the data will be routinely deleted after the purpose has been achieved.

In addition, we may retain data if you have given us permission to do so or if there is a legal dispute and we use evidence under statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

3.11 Obligation to provide the data

Various personal data are necessary for the establishment, implementation and termination of the contractual relationship and the fulfilment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

In certain cases, data must also be collected or made available due to legal requirements. Please note that, for example, the processing of an enquiry or the implementation of an underlying contractual relationship is not possible without the provision of this data. However, if you provide all mandatory information, there will be no negative consequences for you.

3.12 Server log files

Server log files are not stored.

3.13 Secure transfer of your data

In order to protect the data stored with us in the best possible way against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we use appropriate technical and organisational security measures. The security level is continuously reviewed in cooperation with security experts and adapted to new security standards.

The data exchange from and to our website is encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. In addition, we offer our users content encryption as part of the contact forms. The decryption of this data is only possible for us. In addition, there is the option of using alternative communication channels (e.g. the postal service).

3.14 TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3.15 Links to other providers

Our website also contains – clearly recognisable – links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their content. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements become known.

4. Data protection information for social media

We maintain presences in the “social media”, presently on Facebook and YouTube. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our websites.

4.1 Name and address of the person responsible for the company

In addition to us, the following company is responsible for the company websites in the sense of the DS-GVO as well as other data protection regulations:

Facebook
(Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

YouTube
(Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union.

4.2 Purpose and legal basis

We ourselves maintain the fan pages in order to communicate with the visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to be able to further develop and optimise the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed by the social networks and made available to us. We have no influence on the generation and presentation of this data.

In addition, your personal data will be processed by the social media providers, but also by us, for market research and advertising purposes. It is possible, for example, that usage profiles are created based on your usage behaviour and the resulting interests. This allows, among other things, advertisements to be placed within and outside the platforms that correspond to your interests. Cookies are usually stored on your computer for this purpose. Independently of this, data that is not directly collected on your end devices may also be stored in your usage profiles. The storage and analysis also takes place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

Beyond that, we do not collect or process any personal data.
The processing of your personal data by us is based on our legitimate interests in effective information and communication pursuant to Art. 6 para. 1 sentence 1 lit. f. DS-GVO.

If you are asked for consent to data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis of the processing is Art. 6 para. 1 sentence 1 lit. a., Art. 7 DS-GVO.

4.3 Your rights / possibility to object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data with the respective network, you must

log out of the respective network before visiting our fan page,
delete the cookies present on the device and
exit and restart your browser.

After logging in again, however, you will once more be recognisable to the network as a specific user.

For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

Facebook
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads und https://www.youronlinechoices.com

YouTube
Privacy policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=en und https://www.youronlinechoices.com

Overall, you have the following rights regarding the processing of your personal data:

Right to information; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to complain about unlawful processing of your personal data to the competent data protection authority.

Since we do not have complete access to your personal data, you should contact the providers of the social media directly if you wish to make a claim, as they each have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact: datenschutz@wiegel.de.

4.4 Notes on copyright and artistic copyright

Should you wish to publish images, texts, plans, videos, music etc. on our website, you should be aware that by doing so you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

5. Data protection information for applicants (m/f/d)

5.1 Purpose and legal basis for processing Art. 6, para. 1, lit. a, b, f DS-GVO

Personal data of applicants are collected, processed or used for the purpose of carrying out and processing the application procedure and assessing the suitability for the position in question.

The processing of your applicant data is necessary in order to be able to decide on the establishment of an employment relationship. The primary legal basis for this is Art. 6 para. 1 b) DS-GVO, § 26 para. 1 BDSG. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future. Furthermore, we may also process your data to exercise our house rights. The processing of special categories of personal data (e.g. health data) is based on your consent according to Art. 9 (2a) DS-GVO, unless legal permissions such as Art. 9 (2 b) are relevant. Your applicant data will be treated confidentially at all times. Should we wish to process your applicant data for a purpose not mentioned above, we will inform you of this in advance.

5.2 Origin (source) and categories of personal data processed

The categories of personal data processed include, in particular, your master data (first name, surname, name affixes, nationality), contact data (private address, (mobile) telephone number, e-mail address) as well as other data relating to the application procedure (cover letter, certificates, questionnaires, interviews, qualifications and previous activities). If you have also voluntarily provided special categories of personal data (e.g. health data, religious affiliation, degree of disability) in the letter of application or in the course of the application procedure, processing will only take place if you have consented to this or if a legal authorisation justifies this. Your personal data is generally collected directly from you as part of the recruitment process. In addition, we may have received data from third parties (e.g. recruitment agencies) to whom you have provided your data for disclosure. In addition, we process personal data that we have permissibly obtained from publicly accessible sources (e.g. professional social networks). In this respect, the processing of your data is based on Article 6 (1) b) DS-GVO.

Of course, you can also communicate with us in encrypted form for the transmission of sensitive data by e-mail. We can offer you various encryption methods for this purpose. Please contact us if you would like this.

5.3 Recipients (categories) of personal data

Within the company, only those persons and departments (management, personnel administration, specialist department, works council) receive your personal data that need them for the recruitment decision and to fulfil our pre-contractual/contractual and legal obligations.

External bodies (contractual partners) insofar as these are necessary for the fulfilment of the contract. External contractors (service companies) in accordance with Art. 28 DS-GVO to handle the processing of data on our behalf: External IT service providers, personnel consultants, recruitment agencies, temporary employment agencies, waste disposal service providers.

Other external bodies, companies belonging to the group or other external bodies for the fulfilment of the above-mentioned purposes, insofar as the person concerned has declared his or her written consent, this is necessary for the fulfilment of the contract or a transfer is permissible for predominant legitimate interest: Credit institutions (e.g. to reimburse travel expenses), tax advisors.

5.4 Transfer to third countries

Personal data will not be transferred outside the European Union.

5.5 Duration of storage / deletion

According to the legal retention period: 6 months for applications due to job advertisement for consideration of the AGG.

We delete your personal data no later than six months after completion of the application process if an employment relationship does not materialise. This does not apply if legal provisions prevent deletion or if further storage is necessary for the purpose of providing evidence or if you have consented to longer storage. If we are unable to offer you a vacancy, but believe on the basis of your profile that your application may be of interest for future vacancies, we will store your personal application data beyond this, provided we have your express consent to do so. In this case, we will delete your data after a maximum of 12 months or if you revoke your consent.

5.6 Right to withdraw consent

Within the meaning of Art. 6 (1) a) or Art. 9 (2) a), every data subject has the right to revoke individual or all consents given for e.g. the performance of a contract at any time and without disadvantages for him/herself, without the lawfulness of the processing carried out on the basis of the consent up to the revocation being affected.

Please send any revocation of consent or objection in writing to:

WIEGEL Verwaltung GmbH & Co KG
Hans-Bunte-Straße 25, 90431 Nuremberg, Germany
datenschutz@wiegel.de

5.7 Automated decision making and profiling

Noautomated decision-making procedures pursuant to Art. 22 DS-GVO or other profiling measures Art. 4 No. 4 DS-GVO are used.

5.8 Obligation to provide the data

The decision whether or not to establish an employment relationship with you can only be made if you provide us with certain personal data, such as your CV. In doing so, we naturally observe the principle of data economy and data avoidance in that you only have to provide us with the data that we need to fully examine your application documents or that we are legally obliged to collect.

Unfortunately, we cannot review your application documents without this data.

Of course, you have the option of voluntarily providing us with additional information in your application documents.

5.9 Third country transfer/intent to transfer

Data is only transferred to third countries (outside the European Union or the European Economic Area) if you have given us your consent to do so or if this is required by law.

We do not transfer your personal data to any service provider or group company outside the European Economic Area.

6. Data protection information for customers and interested parties

6.1 Purpose and legal basis for processing Art. 6, para. 1, lit. a, b, f DS-GVO

Personal data is collected, processed or used to fulfil the business purpose such as pre-contractual measures (e.g. to prepare offers, process enquiries), to fulfil contractual obligations (order, order and payment processing, invoicing), to supply goods and services (Art. 6 para. 1 lit. b DS-GVO), as well as to maintain business contact and to inform the business partner about new products and service offers (para. 1 lit. f DS-GVO). In addition, we may also process your data for the purpose of exercising domiciliary rights (video surveillance of public areas pursuant to Art. 6 Para. 1 f) DS-GVO. Furthermore, there may be a legal obligation to process your data (e.g. due to tax law requirements), (Art. 6 para. 1 lit. c DS-GVO).

6.2 Categories of personal data processed

Essential categories of data are:

Name
Address
Contact details of contact persons in the company (first name, last name)
Communication data (telephone number, mobile number, email address, fax number)
Customer number as well as order and delivery data for the purpose of initiation
Order and contract data
Billing and payment data Bank details, SEPA mandate

6.3 Origin (source) of the data

The stored data was collected within the framework of our contractual relationship and for the initiation of contracts as well as individual orders, or it arose within the framework of the business relationship and initiation of business. The data is stored for the fulfilment and processing of the orders placed with us as well as the documentation and archiving obligations under commercial and tax law. Recording from entries in the ERP system, signatures from e-mail and documents. In this respect, the processing of your data takes place on the basis of Article 6 Paragraph 1, lit. b, c, f DS-GVO.

6.4 Recipients (categories) of personal data

Public bodies that receive data on the basis of statutory regulations: Financial authorities

Internal units involved in the execution of the respective business processes: Management, administration, accounting, controlling, production, design, project department, documentation, sales, shipping (logistics), purchasing, technology and IT.

External bodies (contractual partners) insofar as these are necessary for the fulfilment of the contract. External contractors (service companies) in accordance with Art. 28 DS-GVO to handle the processing of data on our behalf: IT service provider, software provider, waste disposal company

Other external bodies: companies belonging to the group or other external bodies for the fulfilment of the above-mentioned purposes, insofar as the person concerned has declared his or her written consent, this is necessary for the fulfilment of the contract or a transfer is permissible for predominant legitimate interest: Credit institution, tax advisor, business and wage tax and company auditor, Crif-Bürgel, lawyer, customs

6.5 Transfer to third countries

Personal data will not be transferred outside the European Union.

6.6 Obligation to provide the data

As soon as your data is no longer required for the above-mentioned purposes or you have revoked your consent, it will be deleted by us. Data will only be stored beyond the end of the contractual relationship if we are obliged or entitled to do so. Regulations that oblige us to retain data can be found, for example, in the German Commercial Code (Handelsgesetzbuch) or in the German Fiscal Code (Abgabenordnung). A retention period of up to ten years may result from this (if necessary, include or supplement the specific storage period). In addition, statutory periods of limitation must be observed.

6.7 Obligation to provide the data

In order to enter into or process a contractual relationship, you are obliged to provide certain personal data. This is necessary for the establishment, implementation and termination of the contractual relationship and the fulfilment of the associated contractual and legal obligations. The execution of the contract is not possible without the provision of this data.

6.8 Automated decision making and profiling

No automated decision-making procedures pursuant to Art. 22 DS-GVO or other profiling measures Art. 4 No. 4 DS-GVO are used.

6.9 Third country transfer/intent to transfer

Data is only transferred to third countries (outside the European Union or the European Economic Area) if you have given us your consent to do so or if this is required by law.

We do not transfer your personal data to any service provider or group company outside the European Economic Area.

7. Data protection information for suppliers

7.1 Purpose and legal basis for processing Art. 6, para. 1, lit. a, b, c, f DS-GVO

Personal data is collected, processed or used to fulfil the business purpose of quotations, order confirmations, invoices, ordering goods and services as well as to maintain business contact and information by the supplier (Art. 6 para. 1 lit. a, b, f DS-GVO). In addition, we may also process your data for the purpose of exercising domiciliary rights (video surveillance of public premises pursuant to Art. 6 (1) f) DS-GVO. Furthermore, there may be a legal obligation to process your data, e.g. due to tax law requirements (Art. 6 para. 1 lit. c DS-GVO).

7.2 Categories of personal data processed

Essential categories of data are:

Name
Address
Contact details of contact persons in the company (first name, last name)
Communication data (telephone number, mobile number, email address, fax number)
Customer number as well as order and delivery data for the purpose of initiation
Order and contract data,
Billing and payment data

7.3 Origin (source) of the data

7.4 Recipients (categories) of personal data

Public bodies that receive data on the basis of statutory regulations: Financial authorities

Internal units involved in the execution of the respective business processes: Management, accounting, controlling, production, documentation, construction, project department, sales, purchasing, technology and IT

7.5 Transfer to third countries

Personal data will not be transferred outside the European Union.

7.6 Duration of storage / deletion

As soon as your data is no longer required for the above-mentioned purposes or you have revoked your consent, it will be deleted by us. Data will only be stored beyond the end of the contractual relationship if we are obliged or entitled to do so. Regulations that oblige us to retain data can be found, for example, in the German Commercial Code or in the German Fiscal Code. A retention period of up to ten years may result from this (if necessary, include or supplement the specific storage period). In addition, statutory periods of limitation must be observed.

7.7 Obligation to provide the data

7.8 Automated decision making and profiling

No automated decision-making procedures pursuant to Art. 22 DS-GVO or other profiling measures Art. 4 No. 4 DS-GVO are used.

7.9 Third country transfer/intent to transfer

Data is only transferred to third countries (outside the European Union or the European Economic Area) if you have given us your consent to do so or if this is required by law.

We do not transfer your personal data to any service provider or group company outside the European Economic Area.