10.Data protection information in accordance with Art. 13 and 21 DSGVO
Responsible
The Pöppelmann Group is responsible for the collection and processing of data.
Pöppelmann GmbH & Co. KG
Plastic tool design and engineering
Bakumer Straße 73
49393 Lohne
Fax: +49 (0) 44 42 / 982-1003
Email: datenschutz(at)poeppelmann.com
We are also jointly responsible for data processing:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook").
Voluntary information:
We generally only collect the data as required by law or as necessary to conclude or fulfil a contract or that have been made available to us voluntarily and based on consent. The provision of any other information is voluntary. Not providing such data does not entail any negative consequences. However, by not providing data, subsequent communication may be more complicated or delayed in individual instances.
Data processing for the fulfilment of a contract:
We process the collected data pursuant to point (b) of Article 6(1) GDPR for the fulfilment of a contract, or pursuant to point (f) of Article 6(1) GDPR for purposes of the legitimate interests of processing the contract if you are a contact person of one of our business partners. This includes related activities as part of customer support. If necessary, the personal data will be forwarded to the companies involved in processing the contract, e.g. banks to process the payments. The data necessary to fulfil the contract will be deleted after the relevant purpose has been served and only held available for any enquiries. The data will not be deleted if any receivables are still outstanding upon termination of the contract that still have to be collected. If statutory retention obligations apply, the data concerned will be archived for the term of such retention obligations.
Data processing to pursue legitimate interests:
In the absence of consent or of any other evident legal basis for data processing we will process your data only to pursue legitimate interests and only if the prerequisites of point (f) of Article 6(1) GDPR apply, in other words if our legitimate interests in the data processing, or those of a third party, override your interests or fundamental rights and freedoms in an individual case. The data will be deleted if the legitimate interest no longer exists, but will be retained for the term of any applicable statutory retention obligations at least.
You have the right to object to the data processing. For further information, please see the following section ‘Rights of the data subject’.
Data processing based on consent:
If you have consented to be informed by us by telephone or email about our company’s products and services, your data will be processed based on point (a) of 6(1) GDPR. You can withdraw your consent at any time; however, this will not in any way affect the lawfulness of the processing made before the withdrawal. If you withdraw your consent, we will cease processing the data.
Data processing for direct marketing:
We process your data to the permissible extent for direct marketing purposes, especially for sending our advertising, such as product information or invitations to events. The processing is based on point (f) of Article 6(1) GDPR and is in pursuit of our legitimate interest to inform you about new products, events and services. Each customer has an independent right to object to this processing; if this right is exercised, we will cease to process the data for direct marketing purposes. If data were stored exclusively for direct marketing purposes, the data will be erased after the objection.
Data processing to comply with legal obligations:
If so required, we process your data to comply with any legal obligations, e.g. vis-à-vis tax authorities. The data processing is based in this case on point (c) of Article 6(1) GDPR. A legal obligation is derived from section 147 of the German Abgabenordnung [Tax Code - AO]. The data will be deleted after expiry of the period stipulated by law, unless there is a legitimate interest in continued storage.
Recipient of data:
We will transmit your data to third parties (e.g. lawyers to pursue payments in arrear) if the data protection laws provide for an authority for such transmission (e.g. by reference to one of the aforementioned case groups). Furthermore, your data may be forwarded to external service providers (e.g. IT service providers, companies which erase or archive data, providers of printing services or cloud providers), which assist us in the processing of data as part of processing carried out on behalf of a controller and, in so doing, are strictly governed by instructions.
As a rule, no data processing takes place outside the EU or the EEA. If such processing does occur, it will take place only in countries in regard to which the EU has issued an adequacy decision and based on standard data protection clauses adopted by the EU pursuant to point (c) of Article 46(2) GDPR. Upon request, we will gladly allow you to view the contract or provide you with a copy thereof. We will neither sell your data to third parties nor market them otherwise.
Contact details of the Data Protection Officer:
Peter Suhren
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88, 28217 Bremen
Telephone: +49 (0) 421 69 66 32-0
Email: office(at)first-privacy.com
Rights of data subjects:
Data subjects have the right to obtain information from the controller about the personal data concerning them and to obtain rectification or erasure of inaccurate data provided that any of the reasons stated in Article 17 GDPR apply, e.g. if the data are no longer necessary in relation to the intended purposes. Data subjects also have the right to obtain a restriction of the processing of their data if any of the conditions stated in Article 18 GDPR applies as well as the right to data portability if any of the conditions stated in Article 20 GDPR apply. If data are processed based on point (e) (data processing in the exercise of official authority or for the performance of a task carried out in the public interest) or point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, data subjects have the right to object at any time to the processing, based on grounds relating to his or her particular situation. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority:
All data subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of data concerning them infringes data protection laws. The right to lodge a complaint may be exercised in the member state of the data subject's habitual residence, place of work or the place of the alleged infringement. In Lower Saxony, the supervisory authority is the Landesbeauftragte für den Datenschutz Niedersachsen [Data Protection Commissioner of the Federal State of Lower Saxony], Prinzenstraße 5, 30159 Hannover.
Information about the right to object pursuant to Article 21 GDPR
If data are processed based on point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, you have the right to object to the processing on grounds relating to your particular situation at any time. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defence of legal claims. If possible, please direct your objection to: datenschutz@poeppelmann.com.
