10. Information duties pursuant to Article 13 GDPR
The Pöppelmann Group is responsible for the collection and processing of data.
Pöppelmann GmbH & Co. KG
Plastic tool design and engineering
Bakumer Straße 73
Fax: +49 (0) 44 42 / 982-1003
We are also jointly responsible for data processing: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook").
As a cardinal rule, we only collect such data as are required by law or as necessary to conclude or fulfil a contract, or such data as have been made available to us voluntarily and based on consent. The provision of any other information is voluntary. Not providing such data does not entail any negative consequences. However, by not providing data, subsequent communication may be more complicated or delayed in individual instances.
Data processing for the fulfilment of a contract:
We process the collected data pursuant to point (b) of Article 6(1) GDPR for the fulfilment of a contract, or pursuant to point (f) of Article 6(1) GDPR for purposes of the legitimate interests of contract execution if you are a contact person of one of our business partners. This includes related activities as part of customer support. If necessary, the personal data will be forwarded to the companies involved in the execution of the contract, e.g. to banks for payment processing. The data necessary to fulfil the contract will be deleted after the relevant purpose has been served and only held available for any enquiries. The data will not be deleted if any receivables are still outstanding upon termination of contract and are to be collected. If statutory retention obligations apply, the data concerned will be archived for the term of such retention obligations.
Data processing to pursue legitimate interests:
In the absence of consent or of any other evident legal basis for data processing we will process your data only to pursue legitimate interests and only if the prerequisites of point (f) of Article 6(1) GDPR apply, in other words if our legitimate interests in the data processing, or those of a third party, override your interests or fundamental rights and freedoms in an individual case. The data will be deleted if the legitimate interest no longer exists, but will be retained for the term of any applicable statutory retention obligations at least.
You have the right to object to the data processing. For further information please see the following section, ‘Rights of the data subject’.
Data processing based on consent:
If you have consented to be informed by us by telephone or email about our company’s products and services, your data will be processed based on point (a) of 6(1) GDPR. You can withdraw your consent at any time; however, this will not in any way affect the lawfulness of processing prior to withdrawal. If you withdraw your consent, we will cease processing the data.
Data processing for direct marketing:
We process your data to the permissible extent for direct marketing purposes, especially for sending our advertising, such as product information or invitations to events. The processing is based on point (f) of Article 6(1) GDPR and is carried out in pursuit of our legitimate interest to inform you about new products, events and services. Each customer has an independent right to object to this processing; if this right is exercised, we will cease to process the data for direct marketing purposes. If data were stored exclusively for direct marketing purposes, the data will be erased after the objection.
Data processing to comply with legal obligations:
If so required, we process your data to comply with any legal obligations, e.g. vis-à-vis tax authorities. The data processing in this case is based on point (c) of Article 6(1) GDPR. The legal obligation is derived from section 147 of the German Abgabenordnung [Tax Code - AO]. The data will be erased after the expiry of the period stipulated by law, unless there is a legitimate interest in continued storage.
Recipients of data:
We will transmit your data to third parties (e.g. lawyers to enforce payments in arrears) if the data protection laws authorize such transmission (e.g. by reference to one of the aforementioned case groups). Furthermore, your data may be forwarded to external service providers (e.g. IT service providers, companies which erase or archive data, providers of printing services or cloud providers) which assist us in the processing of data as part of processing carried out on behalf of a controller and, in so doing, are strictly governed by instructions.
As a cardinal rule, no data processing takes place outside the EU or the EEA. If such processing does occur, it will take place only in countries in regard to which the EU has issued an adequacy decision and based on standard data protection clauses adopted by the EU pursuant to point (c) of Article 46(2) GDPR. Upon request, we will gladly allow you to view the contract or provide you with a copy thereof. We will neither sell your data to third parties nor otherwise market them.
Contact details of the Data Protection Officer:
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88, 28217 Bremen
Telephone: +49 (0) 421 69 66 32-0
Rights of data subjects:
Data subjects have the right to obtain information from the controller about the personal data concerning them and to obtain rectification or erasure of inaccurate data provided that any of the reasons stated in Article 17 GDPR apply, e.g. if the data are no longer necessary in relation to the intended purposes. Data subjects also have the right to obtain a restriction of the processing of their data if any of the conditions stated in Article 18 GDPR applies as well as the right to data portability if any of the conditions stated in Article 20 GDPR applies. If data are processed based on point (e) (data processing in the exercise of official authority or for the performance of a task carried out in the public interest) or point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, data subjects have the right to object at any time to the processing, based on grounds relating to their particular situation. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defense of legal claims.
Right to lodge a complaint with a supervisory authority:
All data subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of data concerning them infringes data protection laws. The right to lodge a complaint may be exercised, in particular in the Member State of the data subject's habitual residence, place of work or the place of the alleged infringement. In Lower Saxony, the supervisory authority is the Landesbeauftragte für den Datenschutz Niedersachsen [Data Protection Commissioner of the Federal State of Lower Saxony], Prinzenstraße 5, 30159 Hannover.
Information about the right to object pursuant to Article 21 GDPR
If data are processed based on point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, you have the right to object to the processing on grounds relating to your particular situation at any time. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defense of legal claims. If possible, please direct your objection to: firstname.lastname@example.org.
Information about the right to object to direct marketing
We process your data for direct marketing purposes. You have an independent right to object to this processing; if this right is exercised, we will cease to process the data for direct marketing purposes. If possible, please direct your objection to: marketing(at)poeppelmann.com