Legal basis of processing
Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. Suppose the processing of personal data is needed to fulfil a contract to which the data subject is a party, for example for the delivery of goods or another service or consideration. In that case, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example, in cases of inquiries about our products or services. Suppose our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations. In that case, the processing is based on Article 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company, and his name, age, health insurance data or other vital information would then have to be passed on to a doctor, hospital or another third party. In this case, the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on the legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because the European legislator has specifically mentioned them. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
Legitimate interests in the processing pursued by the controller or a third party
Is the processing of personal data based on Article 6 I lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our shareholders.
Duration for which the personal data will be stored
The criterion for the duration of the storage of personal data is the respective legal retention period. After the expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for the fulfilment or initiation of the contract.
Legal or contractual provisions for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision
We inform you that the provision of personal data is partly required by law (e. g. tax regulations) or may also result from contractual regulations (e. g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded that a data subject provides us with personal data, which must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee clarifies to the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the non-provision of the personal data would have.
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
Objection to advertising e-mails
The use of contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby rejected. The operator of this website expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.