Data protection information for customers/other contract partners and interested parties
(Information on data protection about our processing of customer and interested party data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR))
Halbstark GmbH (limited liability)
Neckarstraße 122, 70190 Stuttgart
Dear customers & potential prospects,
In accordance with the requirements of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your related data protection rights. Which data is processed in detail and in which way is used depends largely on the services requested or agreed upon. To ensure that you are fully informed about the processing of your personal data as part of the fulfilment of a contract or the implementation of pre-contractual measures, please take note of the following information.
- RESPONSIBLE BODY IN TERMS OF DATA PROTECTION LAW
- PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary to establish, execute, fulfill a contract and to carry out pre-contractual measures. Insofar as personal data is necessary to initiate or carry out a contractual relationship or as part of the implementation of pre-contractual measures, processing is lawful in accordance with Article 6 (1) (b) GDPR. If you give us express consent to process personal data for specific purposes (e.g. transfer to third parties, evaluation for marketing purposes or advertising by e-mail), the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR given. Any consent you have given can be withdrawn at any time with effect for the future (see section 9 of this data protection information). If necessary and permitted by law, we process your data beyond the actual purposes of the contract to fulfill legal obligations in accordance with Art. 6 para. 1 lit. c GDPR. In addition, processing may be carried out to protect legitimate interests of us or third parties and to defend and assert legal claims in accordance with Article 6 (1) (f) GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
- CATEGORIES OF PERSONAL DATA
We only process data that is related to the establishment of the contract or the pre-contractual measures. This may include general data about you or people in your company (name, address, contact details, etc.) as well as any other data that you provide to us as part of the establishment of the contract.
- SOURCES OF DATA
We process personal data that we receive from you as part of contacting us, establishing a contractual relationship or as part of pre-contractual measures, or that you provide to the public on your own company website.
- RECIPIENTS OF DATA
We only pass on your personal data within Halbstark GmbH to the areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interest. Your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. In this case, the categories of recipients are providers of Internet service providers and providers of customer management systems and software. Transfer of data to recipients outside Halbstark GmbH otherwise only to the extent permitted or required by law, transfer is necessary for processing and thus to fulfill the contract or, at your request, to carry out pre-contractual measures, we have your consent or we are authorized to provide information. Under these conditions, recipients of personal data may include: External tax advisor Public bodies and institutions (e.g. public prosecutor, police, supervisory authorities, tax office) if there is a legal or regulatory obligation, recipients to whom the transfer is immediately necessary to establish or fulfill the contract.
- TRANSFER TO A THIRD COUNTRY
A transmission does not take place.
- DURATION OF DATA STORAGE
Where necessary, we process and store your personal data for the duration of our business relationship or to fulfill contractual purposes. This includes, among other things, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, including the Commercial Code (HGB) and the Tax Code (AO). The storage and documentation periods prescribed there are two to ten years. Finally, the storage period is also based on the statutory limitation periods, which, for example, under Sections 195 et seq. of the Civil Code (BGB), can generally be three years, but in certain cases can also be up to thirty years.
- YOUR RIGHTS
Every data subject has the right to information under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to deletion under Article 17 GDPR, the right to restrict processing under Article 18 GDPR, the right to notification under Article 19 GDPR and the right to data portability under Article 20 GDPR. In addition, there is a right of appeal to a data protection supervisory authority under Article 77 GDPR if you believe that the processing of your personal data is not done lawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The contact details of the supervisory authority for data protection are: The State Commissioner for Data Protection and Freedom of Information
Lautenschlagerstrasse 2070173 Stuttgart
Telephone: +49 (0) 711 615 541-0
Fax: +49 (0) 711 615 541-15
If the processing of data is based on your consent, you are entitled under Article 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to store certain data for a specific period of time in order to comply with legal requirements (see section 8 of this data protection information).
Right to object:
**Insofar as your personal data is processed in accordance with Article 6 (1) (f) GDPR to protect legitimate interests, you have the right, in accordance with Article 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling legitimate reasons for processing. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims. **To protect your rights, simply send an e-mail to email@example.com
- NECESSITY OF PROVIDING PERSONAL DATA
The provision of personal data for the purpose of deciding whether to conclude a contract, to fulfill a contract or to carry out pre-contractual measures is voluntary. However, we can only make a decision as part of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the performance of the contract or pre-contractual measures.
- AUTOMATED DECISION MAKING
In principle, we do not use fully automated decision-making in accordance with Article 22 GDPR to establish, fulfill or carry out the business relationship or for pre-contractual measures. Should we use these procedures in individual cases, we will inform you separately or obtain your consent, provided this is required by law.
For reasons of easier readability, the masculine language form is chosen in this contract. When people are mentioned in the masculine form, the feminine form is included.