Hiermit informieren wir Sie gemäß Datenschutz-Grundverordnung (DSGVO) und Bundesdatenschutzgesetz (BDSG) über die Verarbeitung Ihrer personenbezogenen Daten durch den Verantwortlichen und die Ihnen zustehenden Rechte.
According to Art. 6 para. 1, sentence 1 lit. a) GDPR, we process your personal data if you have voluntarily provided it to us for one or more specific purposes. Please note your right of withdrawal (under 'What rights you have as a data subject').
In accordance with Art. 6 para. 1, sentence 1 lit. b) GDPR, we process your personal data as a customer. Other purposes include: creating offers, handling warranties, handling guarantees, customer support, initiating, concluding, executing, billing, and terminating contracts.
In accordance with Art. 6 (1), sentence 1, lit. c) of the GDPR, we process your personal data when we are legally obligated to do so. This obligation may arise from a law or an official or judicial order. This includes compliance obligations, accountability in data protection, fulfilling data subjects' rights under data protection law, commercial and tax retention obligations.
In accordance with Art. 6(1), Clause 1, lit. f) of the GDPR, we process your personal data to safeguard our legitimate interests, unless your interests or fundamental rights and freedoms requiring the protection of personal data override. Please note your right to object (under 'What rights do you have as a data subject?').
Our legitimate interests: sales promotion, credit and default checks, direct marketing (see below), assertion of legal claims and defense in legal disputes, ensuring IT security and IT operations, measures for business management and the development of services and products, examination and optimization of procedures for needs analysis and direct customer approach.
In order to maintain the business relationship, we also process the professional contact details of employees in companies.
Due to our legitimate interest in direct marketing (§ 7 para. 3 UWG), we may send you regular information by mail or email about our company, current offers on our products and services, provided that the legal requirements are met and you have not objected to the use of your data. Please note your right of withdrawal (under 'What rights do you have as a data subject?').
Master data, Contact data, Creditworthiness data, Usage data, Contract data, Invoice data
We primarily collect your personal data directly from you.
In individual cases, we also receive your personal data from the data recipients (see below) as well as from publicly available sources such as websites, trade, company, address registers, and credit agencies.
Within our company, only departments with a legitimate need are granted access to ensure the proper fulfillment of our contractual and legal obligations.
We use various business processes that involve your personal data to be carried out by so-called 'data processors'. These are external service providers who process your personal data on our behalf. To protect your data, we have entered into a contract for data processing according to Art. 28 GDPR or an equivalent agreement with these companies.
This includes in particular:
• Customer onboarding
• Regular maintenance activities
• Software rollouts
“Third parties” are companies that do not belong to our company and process your personal data independently and autonomously. They receive your data because we are contractually or legally obligated to do so, you have given your consent, or we have a legitimate interest in doing so.
These include in particular: banks, data subjects, courts, business partners, customers, suppliers, public authorities and institutions (e.g. supervisory authorities, tax authorities), lawyers, tax advisors, law enforcement authorities, insurance companies
none
none
We use various business processes that involve your personal data to be carried out by so-called 'data processors'. These are external service providers who process your personal data on our behalf. To protect your data, we have entered into a contract for data processing according to Art. 28 GDPR or an equivalent agreement with these companies.
This includes in particular:
• Customer onboarding
• Regular maintenance activities
• Software rollouts
With your consent in accordance with Art. 6 para. 1 lit. a GDPR, the data will be stored until you revoke your consent. We store your consent statement for accountability purposes for 3 years.
For pre-contractual and contractual purposes, data will be stored beyond the end of the contract until the expiration of relevant limitation periods (e.g. 3 years in accordance with § 195 BGB or up to 5 years in accordance with § 634a BGB) from the concluded contract, unless the data needs to be retained for longer periods for other purposes.
In the context of our legitimate interests, data will be stored until the data subject exercises their right to object under Art. 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Prospect data will be stored for as long as it is assumed that there is still an interest in collaborating with us. If we assume that there is no longer an interest, we will delete it. Supplier and business partner data will be stored until the supplier's or business partner's objection, unless the data needs to be retained for other purposes.
In direct advertising, the data will be stored until the data subject exercises their right to object under Art. 21 para. 2, 3 GDPR.
In accordance with existing legal obligations, data will be stored for as long as the law requires.
For the retention obligations that apply to us, the relevant documents will be kept until the relevant statutory provisions expire (e.g. 10 or 6 years according to §§ 140, 147 AO, § 257 HGB, § 22 UStG).
In the context of the business relationship, we need from you the personal data that are required for the establishment and execution of a business relationship as well as for the fulfillment of the related contractual obligations.
By law, we are required to clearly identify you, document our business relationship with you, and invoice properly.
If you do not provide us with data that we need for contractual or legal reasons, we may not be able to enter into or continue the business relationship with you.
According to Article 15 of the GDPR, you have the right to access your personal data processed by us, unless a legal exception applies.
According to Article 16 of the GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you.
According to Article 17 of the GDPR, you have the right to request the deletion of your personal data processed by us, provided that a legally specified reason exists and there is no legal exception.
According to Art. 18 GDPR, you have the right to restrict the processing of your personal data with us if a legally specified reason exists.
According to Art. 20 of the GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that a legally specified reason exists and there is no legal exception.
According to Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on our legitimate interests (Art. 6(1)(e) or (f) GDPR), including profiling based on those provisions. Exceptions are provided in Art. 21(1) sentence 2 GDPR.
You have the right to object at any time to the use of your data for the purpose of direct marketing, without incurring any costs other than the transmission costs at the basic rates. Upon receipt of your objection, we will no longer process your personal data for these purposes. The objection should be addressed to the contact address of the data controller mentioned above.
According to Art. 7(3) of the GDPR, you have the right to withdraw your consent at any time. This also applies to revoking consent declarations that you provided to us before the GDPR came into effect, i.e., before May 25, 2018. Revoking your consent does not affect the lawfulness of processing based on the consent before its withdrawal.
According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement if you believe that the processing of personal data relating to you violates the GDPR.
According to Article 79 of the GDPR, without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, you have the right to an effective judicial remedy if you consider that your rights under the GDPR have been infringed as a result of processing of your personal data not in compliance with this Regulation.