Section 6 – Other processing purposes
1. Compliance with legal regulations
We also process your personal data to comply with other legal obligations that we may have in connection with our business. This includes, in particular, retention periods under commercial, trade or tax law. In doing so, we process your personal data in accordance with Art. 6 (1) sentence 1 lit. c GDPR (legal basis) for the fulfillment of a legal obligation to which we are subject.
2. Legal enforcement
We also process your personal data in order to be able to assert our rights and enforce our legal claims, as well as to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary in order to prevent (or prosecute) criminal offenses. We process your personal data in this context to protect our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR (legal basis) insofar as we assert legal claims, defend ourselves in legal disputes or prevent or investigate criminal acts (legitimate interest).
3. Consent
Insofar as you have given us consent to process personal data for certain purposes (e.g. sending information material and offers), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e. Before 5/25/2018. Please note that such a revocation is only effective for the future, and processing operations up to that point are not affected.
Section 7 – Recipients of data
Within our company, access to your data is granted to the departments that require these data to fulfill our contractual and legal obligations. Service providers and vicarious agents used by us (e.g. technical service providers, shipping companies and waste disposal companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary while taking into account the requirements of data protection law. In some cases, the recipients receive your personal data as processors and are then bound by our strict instructions when handling your personal data. In some cases, the recipients act independently under their own responsibility for data protection and in doing so, are also obliged to comply with the requirements of the GDPR and other data protection regulations.
Finally, in individual cases we transmit personal data to our consultants in legal or tax matters, whereby these recipients are obligated to comply with special confidentiality and secrecy regulations due to their professional status.
Section 8 – Data transfer to third countries
In the context of using the above-mentioned tools, for example Google, we may transfer your IP address to third countries (see above). Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations unless expressly stated otherwise in this Privacy Policy or unless you have given us your consent to do so on the website.
Section 9 – Duration of data storage
We initially process and store your personal data for the duration for which the respective purpose of use requires corresponding storage (see above for the individual processing purposes). This may also include the periods of initiation of a contract (pre-contractual legal relationship) and the processing of a contract. On this basis, personal data are regularly erased within the context of the fulfillment of our contractual and/or legal obligations, unless their temporary further processing is necessary for the following purposes:
• Fulfillment of legal storage obligations, which result, for example, from the German Commercial Code (Sections 238, 257 [4] HGB) and the German Fiscal Code (Section 147 [3], 4 AO). The periods specified there for storage and documentation are up to ten years.
• Preservation of evidence, while taking into account the statute of limitations. According to Sections 194 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
Section 10 – Data security
Personal data are protected by us by means of appropriate technical and organizational measures in order to ensure an adequate level of protection and to safeguard the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data from unauthorized disclosure by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content such as your contact requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may contain security flaws. Complete protection of the data against access by third parties is therefore not possible.
Section 11 – Links (hyperlinks) to third-party websites
Our website contains links (so-called hyperlinks) to websites of third parties (e.g. website of another company), via which you are forwarded to the respective website. You can recognize such a redirection by the changed URL (Uniform Resource Locator) in your browser, among other things. We have no influence on the handling of your personal data on a linked website and accept no responsibility in this regard. Please refer to the respective company’s website for more information in this regard.
Section 12 – Your rights as a data subject
As a data subject whose personal data are processed by us, you have the following rights:
1. Right of access
You are entitled to request the disclosure of information regarding which of your personal data are processed by us at any time within the scope of Art. 15 GDPR. In particular, you can request the disclosure of information about the processing purposes, the category of data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, and the origin of your data if it has not been collected by us, as well as the existence of automated decision-making (including profiling) and, if applicable, meaningful information about its details. The restrictions of Section 34 of the German Federal Data Protection Act (BDSG) apply.
2. Right to rectification
If the information concerning you is not (or is no longer) correct, you can request the rectification of incorrect data or the completion of your data stored by us in accordance with Art. 16 GDPR.
3. Right to erasure
You are entitled to request the erasure of your personal data from us under the conditions of Art. 17 GDPR, unless the processing is necessary for the exercising of the right to freedom of expression and information, for compliance with a statutory obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims. In addition, the restrictions of Section 35 BDSG apply.
4. Right to restriction of processing
Within the framework of the requirements of Art. 18 GDPR, you have the right to request the restriction of the processing of the data concerning you, insofar as the accuracy of the data is disputed by you or the processing is unlawful, if we no longer need the data and you refuse to allow their deletion because you need them for the assertion, exercise or defense of legal claims. You also have this right under Article 18 GDPR if you have objected to the processing in accordance with Article 21 GDPR.
5. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, or to request that it be transferred to another data controller.
6. Right to revoke a declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. Please note that the revocation is only effective for the future. The lawfulness of the processing carried out on the basis of the consent until said revocation is not affected by the revocation.
7. Information about your right to object pursuant to Art. 21 GDPR
You have the right to object to the processing of your data that is carried out on the basis of Art. 6 (1) sentence 1 lit. f GDPR (data processing on the basis of a balance of interests) or Art. 6 (1) sentence 1 lit. e GDPR (data processing in the public interest) at any time, if there are grounds for doing so that arise from your particular situation. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. We will consider an objection to any direct marketing measures immediately and without further consideration of existing interests. The objection can be made without any formalities and should be sent via the above-mentioned contact options.
8. Right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters for this purpose. A list of data protection supervisory authorities and their contact details can be found via the following link: https://www.bfdi.bund.de/EN/Infothek/Anschriften_Links/anschriften_links-node.html.
9. Other concerns
For further data protection questions and concerns, please contact our Data Protection Officer. We kindly ask you to address corresponding inquiries as well as the exercising of your aforementioned rights to us via the above-mentioned contact options.
Section 13 – Obligation to provide data
In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or respond to your inquiries to us. Personal data that we do not absolutely require for the above-mentioned processing purposes are marked accordingly as voluntary information.
Section 14 – Automated decision-making/profiling
We do not use automated decision making or profiling (an automated analysis of your personal circumstances).
Section 15 – Topicality and amendments to this Privacy Policy
This Privacy Policy is currently valid and shall remain so as of January 23, 2023.
Due to the continuous development and improvement of our website and offers contained therein, or due to changes in statutory or regulatory requirements, it may become necessary to change this Privacy Policy from time to time.