Data protection is very important to us. Below we will inform you how we process your data and what rights you are entitled to.
|Unternehmen:||GRAF-SYTECO GmbH & Co. KG|
|Anschrift:||Neue Wiesen 12
|Name:||Herr Edmund Hilt|
Your personal data will be processed in accordance with the provisions of the European Data Protection Regulation (EU-DSGVO), the Federal Data Protection Act (BDSG) and other relevant data protection regulations. The processing and use of the individual data depends on the existing business relationship or agreed service. Our contract documents, forms, consent forms and the other information provided to you (for example on the website) provide further details and additions to the processing purposes.
The purposes of the processing of personal data arise from the granting of consent. Any given consent can be revoked at any time by you with effect for the future. Consents granted before the validity of EU GDPR (25.05.2018) can also be revoked at any time. Processing that took place before the revocation remains unaffected by the revocation. Example: sending a newsletter.
The purposes of the data processing arise on the one hand from the initiation of pre-contractual measures, which precede a contractually regulated business relationship and, on the other hand, to the fulfillment of the obligations arising from the contract concluded with you.
The purposes of data processing arise from the statutory requirements or are in the public interest (for example, compliance with statutory retention requirements). Furthermore, we process your data if necessary for the fulfillment of tax control and reporting obligations as well as the archiving of data for purposes of data protection and data security as well as the examination by tax and other authorities. In addition, the disclosure of personal data in the context of administrative / judicial action may be required for purposes of gathering evidence, prosecuting or enforcing civil claims.
The purposes of processing arise from the protection of our legitimate interests. It may be necessary to process the data provided by you beyond the actual performance of the contract. Our legitimate interest may be used to justify the further processing of the data you have provided, unless their interests or fundamental rights and freedoms prevail. This is done for the following purposes:
The following data is processed:
We continue to process personal information from public sources (such as the Internet, media, press, trade and club registries, registration records). We process, if necessary, personal information that we have lawfully obtained from third parties (such as address publishers, credit bureaus).
We disclose your personal data within our company to the areas that need this data to fulfill the contractual and legal obligations or to implement our legitimate interests.
In addition, the following places can receive your data:
A transfer of the data provided by you to a third country or an international organization will never take place. Should you wish to transfer the data provided by you to a third country or an international organization in individual cases, we will only do so after your written consent and release from professional secrecy.
For the processing of the data provided by you no fully automated decision making (including profiling) acc. Art. 22 EU-GDPR is used. If we use these procedures in individual cases, we will inform you about this separately, if this is required by law.
The processing of the data provided by you takes place as long as it is necessary to achieve the contractually agreed purpose, as long as the contractual relationship or the business relationship with you exists. In addition, we are subject to various storage and documentation requirements, including but not limited to: from the Commercial Code (HGB) and the Tax Code (AO). The deadlines for storage and documentation specified therein are up to 10 years beyond the end of the business relationship or the pre-contractual legal relationship. Ultimately, the storage period is also judged by the statutory limitation periods, for example, according to §§195ff. of the Civil Code (BGB) can usually be three years, in some cases, but also up to thirty years.
All you need to do is to provide the information necessary to enter into a business relationship or enter into a pre-contractual relationship with us, or that we are required to collect by law. Without this data we will generally not be able to conclude or execute the contract. This may also apply to data required later in the business relationship. If we also request data from you, you will be made aware of the voluntary nature of the information separately.
You have the right, upon request, to obtain free information as to whether and what data is stored about you and for what purpose the storage takes place.
You have the right to request immediate correction of your incorrect personal data from the person responsible. Considering the purpose of the processing, you are entitled to demand the completion of incomplete personal data.
You have the right to ask the person responsible for your data to be deleted immediately. The controller is obliged to delete personal data immediately if one of the following applies:
You have the right to request the restriction of processing if one of the following conditions is met
You have the right to receive the data provided by you in a structured and machine-readable format from the person responsible. A forwarding to another responsible person may not be hindered by us.
At any time you have the right to oppose the processing of your data, which, pursuant to Art. 6 para. 1f. EU-DSGVO (data processing on the basis of a balance of interests) or Art. 6 (1) EU-DSGVO (data processing in the public interest) takes the form of objections if there are reasons for this arising from your particular situation. This also applies to a profiling based on this provision within the meaning of Art. 4 No. 4 EU-DSGVO. If you file an objection, we will not process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If necessary, we also process your personal data in order to operate direct mail. If you do not want to receive advertising, you have the right to object to it at any time. This also applies to the profiling, as far as it is associated with such direct mail. We will consider this contradiction for the future. We will no longer process your data for direct marketing purposes if you object to the processing for these purposes. The objection can be made informally to the address listed under point 1.
You have a right of appeal to the data protection supervisory authority (Art. 77 EU-DSGVO). The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit