Privacy policy customers and potential customers

Data protection information for customers and potential customers of ISRW Dr.-Ing. Klapdor GmbH

Information on data protection during our processing of customers’ and potential customers’ data in accordance with articles13, 14 and 21 of the General Data Protection Regulation (GDPR)

Dear customer or potential customer,

In accordance with the provisions of articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data collected regarding you and your rights in respect of this under data protection law. In any individual case, the data that is processed and the way in which it is used depend primarily on the requested or agreed services. Please make yourself familiar with the following information in order to ensure that you are fully informed about the processing of your personal data within the framework of the fulfilment of a contract or conduct of measures prior to entry into a contract.

1. Responsible party for the purposes of data protection law

ISRW Dr.-Ing. Klapdor GmbH
Kalkumer Str. 173, 40468 Düsseldorf
+49 211 41 85 56-0

info@isrw-klapdor.de
www.isrw-klapdor.de

2. Contact details of our Data Protection Officer

Dominik Fünkner
datenschutzbeauftragter@datenschutzexperte.de

3. Legal basis for processing

We process your personal data in compliance with the European General Data Protection Regulation (EU-GDPR) and the German Data Protection Law (BDSG) in so far as this is necessary for the establishment, conduct or execution of a contract or the conduct of measures prior to entry into a contract. Insofar as the specification of personal data is necessary in order to initiate or conduct a contractual relationship or for the conduct of measures prior to entry into a contract, the processing of such data is lawful in accordance with article 6, paragraph 1, point b GDPR.

If you provide us with express consent to process your personal data for certain purposes (e.g. transmission to third parties, analysis for marketing purposes or advertising contacts) then the lawfulness of this processing is established on the basis of article 6, paragraph 1, point a GDPR. After consent has been given, it can be withdrawn again with future effect (see point 9 of the present data protection information).

If necessary and legally permitted, we will process your data beyond the contractual purpose itself in order to fulfil legal obligations in accordance with article 6, paragraph 1 point c GDPR. In addition, processing may be performed in order to defend our own or third-parties’ legitimate interests in accordance with article 6, paragraph 1, point f GDPR. We may inform you separately and indicate the legitimate interest if this is stipulated by law.

4. Categories of personal data

We only process data that is connected with the establishment of the contract or measures conducted prior to entry into the contract. This may be general data regarding your own person or persons in your company (name, address, contact data, etc.) or possibly other data which you communicate to us for the purposes of establishing a contract.

5. Data sources

We process data which we receive from you when you make contact with us or when establishing a contractual relationship or for the purposes of conducting measures prior to entry into a contract.

6. Data recipient

Within our company, we only pass on your personal data to departments and individuals who require this data in order to fulfil contractual and legal obligations or to exercise our legitimate interests.

Your personal data is processed on our behalf on the basis of contracts with processors in accordance with article 28 GDPR. In such cases, we ensure that processing of personal data is performed in compliance with the provisions of the GDPR. In this case, the categories of recipients are providers of customer management services and software (here: MOSER Software).

Otherwise, data is only transferred to recipients outside of the company if this is permitted or required by legal provisions, transfer is required in order to implement and therefore to execute the contract or, at your request, to conduct measures prior into entry into a contract, we have obtained your consent, or we are authorized to provide information. If these conditions are met then the recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor, police, supervisory authorities, tax office) in the presence of a legal or administrative obligation.
   
• Recipients for whom transmission is absolutely necessary in order to establish or execute the contract.

7. Transmission to a third country

In general, there is no intention to transfer data to a third country.

8. Period of storage

Insofar as it is is necessary, we process and store your personal data for the duration of our business relations and/or for the fulfilment of the contractual purposes. This also includes the initiation and conduct of a contract.

In addition, we are subject to various obligations with regard to retention and documentation by virtue of both the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods set out in these texts vary between two and ten years.

Finally, the period of storage also depends on the statutory periods of retention which, for example in accordance with §§ 195 ff of the German Civil Code (BGB), are generally set at three years but may be as much as thirty years in certain cases.

9. Your rights

All data subjects have the right to information in accordance with article 15 GDPR, the right to rectification in accordance with article 16 GDPR, the right to erasure in accordance with article 17 GDPR, the right to restrict processing in accordance with article 18 GDPR, the right to notification in accordance with article 19 GDPR and the right to data portability in accordance with article 20 GDPR.

You also have a right to lodge a complaint with a data protection supervisory authority in accordance with article 77 GDPR if you are of the opinion that your personal data is not being processed lawfully. The right to lodge a complaint does not preclude any other further form of administrative or legal redress.

If data is processed on the basis of your consent then you are entitled, in accordance with article 7 GDPR, to withdraw this consent for the use of your personal data at any time. Please note, that the withdrawal of consent applies only to the future. Processing operations undertaken prior to the withdrawal of consent are unaffected by this. Please also note that we may have to store certain data for a certain period of time in order to fulfil legal requirements (see point 8 of the current data protection information).

Right to objection

If your personal data is processed in order to defend legitimate interests in accordance with article 6, paragraph 1, point f GDPR then, in accordance with article 21 GDPR, you have the right to object to the processing of this data at any time on grounds relating to your own particular situation. We will then not process this data any further unless we are able to demonstrate compelling legitimate grounds for this processing. These must override your interests, rights and freedoms or the processing must serve to establish, exercise or defend legal claims.

Please contact us if you wish to exercise your rights.

10. Necessity of the provision of personal data

There is generally no legal or contractual requirement to provide personal data in order to establish, conduct or execute a contract or to conduct measures prior to entry into a contract. You are therefore not required to provide us with details concerning personal data. Please note, however, that such data is usually necessary in order for us to make decisions concerning the conclusion of contracts, the execution of contracts or for measures prior to entry into a contract. If you do not provide us with personal data then we may not be able to reach any decision regarding contractual measures. We recommend that you only ever provide personal data that is necessary to conclude or execute a contract or to conduct measures prior to entry into a contract.

11. Automated decision-making

We do not use any fully automated decision-making processes in accordance with article 22 GDPR when establishing, conducting or executing business relations or during the conduct of measures prior to entry into a contract

Status of this privacy policy: 06.05.2019