1. Contact details of the person responsible for data processing
Managing director: Marco Kurre
Phone: +49 (0) 931 32 93 06 - 0
Fax: +49 (0) 931 32 93 06 - 6
Entry in the commercial register: AG Würzburg HRB 9513
Tax number: 257/123/70257
Sales tax ID: DE229680131
Responsible for the content: Marco Kurre
2. Processing purposes and legal basis
Your personal data will be processed in accordance with the provisions of the European General Data Protection Regulation (EU GDPR), the Federal Data Protection Act (BDSG) and other relevant data protection regulations. The processing and use of the individual data depends on the existing business relationship or the agreed service. You can find further details and additions to the processing purposes in our contract documents, forms, declarations of consent and the other information made available to you (e.g. on the website).
2.1 Based on consent (Art. 6 Paragraph 1 Letter a EU GDPR)
The purposes of the processing of personal data result from the granting of consent. You can revoke your consent at any time with effect for the future. Consents that were given before the EU GDPR came into force (May 25, 2018) can also be revoked at any time. Processing that took place before the revocation remains unaffected by the revocation. Example: sending a newsletter.
2.2 To fulfill contractual obligations (Art. 6 Paragraph 1 Letter b EU GDPR)
The purposes of the data processing result on the one hand from the initiation of pre-contractual measures that precede a contractually regulated business relationship and on the other hand to fulfill the obligations from the contract concluded with you.
2.3 Due to legal obligations (Art. 6 Paragraph 1 Letter c EU GDPR) or in the public interest (Art. 6 Paragraph 1 Letter e EU GDPR)
The purposes of the data processing result from the legal requirements or are in the public interest (e.g. compliance with legal retention requirements).
Furthermore, we process your data, if necessary, for the fulfillment of tax control and reporting obligations as well as the archiving of data for the purposes of data protection and data security as well as checking by tax and other authorities. In addition, it may be necessary to disclose personal data in the context of official / judicial measures for the purpose of gathering evidence, prosecuting or enforcing claims under civil law.
2.4 Legitimate interests of us or third parties (Art. 6 Paragraph 1 Letter f GDPR)
The purposes of the processing result from the safeguarding of our legitimate interests. It may be necessary to process the data you have provided beyond the actual fulfillment of the contract. Our legitimate interest can be used to justify the further processing of the data you have provided, provided that your interests or fundamental rights and freedoms do not prevail. This is done for the following purposes:
For obtaining information and exchanging data with credit agencies if this goes beyond our economic risk
For the limited storage of your data if deletion is not possible or only possible with disproportionately high effort due to the special type of storage
For the assertion of legal claims and defense in legal disputes that cannot be directly assigned to the contractual relationship
3. Categories of personal data that are processed by us
The following data are processed:
Company data (company name, industry, address, email address, telephone number and comparable data)
Personal data (contact person, position in the company and comparable data)
Confirmation of payment / coverage from banks
We continue to process personal data from public sources (e.g. internet, media, press, trade and association registers, population registers).
If necessary, we process personal data that we have lawfully received from third parties (e.g. address publishers, credit agencies).
4. Who will receive your data?
We pass on your personal data within our company to those areas that need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
In addition, the following offices can receive your data:
Processors employed by us (Art. 28 EU-DSGVO), service providers for supporting activities and other persons responsible within the meaning of the EU-DSGVO, in particular in the areas of IT services, logistics, courier services, printing services, external data centers, support / maintenance of IT Applications, archiving, document processing, accounting and controlling, data destruction, purchasing / procurement, customer management, letter shops, marketing, telephony, website management, tax advice, auditing services, credit institutions
Public bodies and institutions when there is a legal or official obligation, according to which we are obliged to provide information, report or pass on data or the data transfer is in the public interest
Bodies and institutions based on our legitimate interest or the legitimate interest of third parties (e.g. authorities, credit agencies, debt collection, lawyers, courts, experts and control bodies)
other places for which you have given us your consent to transfer data
5. Transmission of the data you have provided to third countries or international organizations
The data you have provided will not be transmitted to a third country or an international organization under any circumstances. If, in individual cases, you would like the data you have provided to be transferred to a third country or an international organization, we will only do this with your written consent and release from professional secrecy.
6. To what extent is there automated decision-making in individual cases
No fully automated decision-making (including profiling) in accordance with Art. 22 EU GDPR is used to process the data you have provided.
If we use these procedures in individual cases, we will inform you about this separately, provided this is required by law.
7. How long do we store your data?
The data provided by you will be processed for as long as it is necessary to achieve the contractually agreed purpose, as long as the contractual relationship or business relationship with you exists.
In addition, we are subject to various storage and documentation obligations, which result from the Commercial Code (HGB) and the Tax Code (AO), among others. The periods for storage and documentation specified there are up to 10 years after the end of the business relationship or the pre-contractual legal relationship.
Ultimately, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§195ff. of the German Civil Code (BGB) as a rule three years, but in certain cases it can be up to thirty years.
8. Scope of your obligations to provide us with your data
You only need to provide the data that is required for the establishment and implementation of a business relationship or for a pre-contractual relationship with us or that we are legally obliged to collect. Without this data, we will usually not be able to conclude or execute the contract. This can also relate to data required later in the context of the business relationship. If we also request data from you, you will be informed separately that the information is voluntary.
9. Information about your rights
9.1 Right to information in accordance with Article 15 EU GDPR
You have the right, upon request, to receive information free of charge as to whether and which data is stored about you and for what purpose it is stored.
9.2 Right to rectification in accordance with Article 16 EU GDPR
You have the right to request the person responsible to correct your incorrect personal data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
9.3 Right to deletion ("right to be forgotten") in accordance with Article 17 EU GDPR
You have the right to demand that the person responsible delete your data immediately. The person responsible is obliged to delete personal data immediately if one of the following points applies:
Purposes for which the personal data were collected no longer apply
You withdraw your consent to the processing. There is no other legal basis for the processing
You object to the processing. There is no other legal basis for the processing.
The personal data was processed unlawfully
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
The personal data was collected in relation to information society services offered in accordance with Article 8 (1)
9.4 Right to restriction of processing in accordance with Art. 18 EU GDPR & §35 BDSG
You have the right to request that processing be restricted if one of the following conditions is met
The accuracy of your personal data has been questioned
The processing is unlawful, but you refuse to delete it.
Personal data is no longer required for the purposes of processing, but you need the data to assert, exercise or defend legal claims.
You have lodged an objection to the processing in accordance with Article 21 (1) EU GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh you, the processing will be restricted.
9.5 Right to data portability in accordance with Article 20 EU GDPR
You have the right to receive the data you have provided in a structured, common and machine-readable format from the person responsible. Forwarding to another responsible person must not be hindered by us.
9.6 Right of objection in accordance with Article 21 EU GDPR
You have the right at any time to object to the processing of your data, which is based on Art. 6 Para. 1f. EU GDPR (data processing on the basis of a balance of interests) or Art. 6 Paragraph 1 e EU GDPR (data processing in the public interest) takes place, to object if there are reasons for this that arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 EU GDPR.
If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
We may also process your personal data in order to operate direct mail. If you do not wish to receive advertising, you have the right to object to this at any time. This also applies to profiling insofar as it is associated with such direct advertising. We will consider this contradiction for the future.
We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.
The objection can be sent informally to the address listed under point 1.
10. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the data protection supervisory authority (Art. 77 EU GDPR).
The supervisory authority responsible for us is:
The Bavarian State Commissioner for Data Protection (BayLfD)