Information on the collection of personal data pursuant to Art. 13 GDPR (Obligation to inform)
With the following information we would like to inform you as a customer, business partner, supplier or interested party or as a contact person of a business partner, supplier or interested party about the processing of your personal data.
Der Hessische Beauftragte für Datenschutz und InformationssicherheitGustav-Stresemann-Ring 165189 WiesbadenTel.: +49 (0) 611 – 1408 0E-Mail: [email protected]
CTM-COMIn den Leppsteinswiesen 1464380 RoßdorfTel.: +49 (0) 6154-57605-111E-Mail: [email protected]
§ 2 Information on the processing of personal data:
(1) Purpose of the processing of your personal data and the legal basis for its processing
Your personal data will be processed insofar as this is necessary for the initiation or execution of the contract and for the performance of other business relationships (including the processing of purchase orders, deliveries or payments) or for the preparation or response to requests for quotations, for determining the terms of the contractual relationship and with regard to product development activities, or for safeguarding the legitimate interests of HACH KG.
The legal basis is Art. 6 para. 1 lit. b GDPR insofar as the processing takes place for the purpose of initiating or implementing the contract. If this is not the case, your personal data will be processed to safeguard the legitimate interests of HACH KG in accordance with Art. 6 Para. 1 lit. f, to fulfil legal obligations in accordance with Art. 6 Para. 1 lit. c or if you have given your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
(2) The following categories of data shall be collected:
We process personal data which we receive from you within the framework of our business relationship and from you, your customers, suppliers or interested parties within the framework of orders placed by you. In addition, we process personal data that we obtain permissibly from public directories and official announcements and other generally accessible sources or that is made available to us by contractual partners. In addition to personal data or master data (name, address, associated company, function and contact data), relevant personal data for the processing of business relationships are data on current and previous orders, payment and billing data, usage data and protocols as well as advertising and sales data and information comparable with the aforementioned categories.
(3) recipients or categories of recipients of the data:
Within our company, those departments that need your data to fulfil our contractual and legal obligations as well as the legitimate interest are given access to it. Also contract processors used by us (Art. 28 GDPR) may receive data for these purposes. These processors are companies in the following categories: IT services, logistics, printing services, telecommunications, marketing, legal and tax consultancy, debt collection, auditing, accounting.
We will only disclose your data to third parties for their own use if and to the extent that we have obtained your consent or if this is provided for by contractual and/or statutory provisions. Third parties in the above sense are public authorities and private enterprises.
In addition, to the extent permitted by law, we may transfer your personal data to authorities (e.g. social insurance carriers, tax authorities or criminal prosecution authorities) and courts in Germany and abroad to fulfil statutory obligations or in the interests of the company.
Data will not be transferred to locations in countries outside the European Union (so-called third countries).
(4) Duration of data storage
The personal data collected by us within the framework of the contract will be stored for the duration of the business relationship and then deleted unless we have
- are obliged to store data for a longer period of time pursuant to Article 6 para. 1 lit. c GDPR due to storage and documentation obligations (e.g. under German Commercial Code (HGB), German Criminal Code (StGB[NHCG1] )
- or if there is a legitimate interest in storage pursuant to Article 6 para 1 lit. f GDPR, e.g. during the current limitation period, which as a rule is three years, but in certain cases may also be up to 30 years,
- or you have consented to further storage in accordance with Art. 6 para. 1 lit. a GDPR.
As soon as the storage of the data is no longer necessary to carry out the mentioned storage purposes or in the case of revocation of a consent given by you, your data will be deleted immediately.
§ 3 Your rights as a data subject:
As the data subject of this data processing, you have the following rights, which you can exercise vis-à-vis us and/or our service providers:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data portability.
You are welcome to contact the e-mail address [email protected]to exercise your rights.
You have the right to complain to the competent supervisory authority (see above) if there is a data protection violation or suspicion of a data protection violation.
§ 4 Reason for the provision of your data and possible consequences of not providing it
If your personal data is not provided, we cannot process it for the purposes listed under § 2 (1).
§ 5 Withdrawal of Consents
You have the right to withdraw at any time any data protection consent that you have given to our company. The withdrawal of consent shall not affect the lawfulness of the processing carried out on its basis until withdrawed.
You are welcome to contact the e-mail address [email protected]to withdraw your consent.
§ 6 Note