Data processing principles for Zahna-Fliesen GmbH
We wish to present our data privacy information below in order to comply with our obligations to provide information under Article 12 et seq. of the General Data Protection Regulation (GDPR):
Who is responsible for data processing?
The responsible party, or controller as per data protection law, is:
Paul-Utzschneider Strasse 1
06895, Zahna-Elster, Germany
Additional information about our enterprise, details of the authorised representatives and also other contact information is available on our website’s legal notice: http://www.zahna-fliesen.de /impressum
Which of your data do we process? And for what purpose?
We will only ever process data that you have sent us for the purposes for which we received or collected it.
We will only consider processing data for other purposes if the legal provisions required in that respect under Article 6(4) GDPR have been satisfied. Obviously, we would comply with any obligations to provide information in accordance with Articles 13(3) and 14(4) GDPR in this scenario.
What is the underlying legal basis for this?
Unless specific legislation denotes otherwise, Article 6 GDPR shall always form the legal basis for the processing of personal data. The following is considered to be particularly relevant in this regard:
- Consent (Article 6(1)(a) GDPR)
- Data processing for the performance of contracts (Article 6(1)(b) GDPR)
- Data processing for compliance with a legal obligation (Article 6(1)(c) GDPR)
- Data processing on the basis of a weighing of interests (Article 6(1)(f) GDPR)
If personal data is processed on the basis of your consent, you are entitled to withdraw the consent you have given us at any time to prevent us from processing your data in future.
If we process data on the basis of a weighing of interests, you, as the data subject, are entitled to object to the processing of personal data in consideration of the provisions under Article 21 GDPR.
How long will data be stored for?
We will process the data for as long as this is required for the relevant purpose.
If retention requirements exist in law, e.g. commercial or fiscal law, the personal data concerned will be stored for the period stipulated in that retention requirement. It will be checked upon expiry of the retention period whether the data still needs to be processed. The data will be erased if this is not the case.
We categorically check whether data requires further processing at the end of each calendar year. The sheer quantity of data means that this check focuses on specific types of data or processing purposes.
Of course, you may request access to the data we have stored that pertains to you at any time (see below) and request that this data be erased or processing restricted should the data not require processing.
Who will receive your data?
Your personal data will only ever be passed on to third parties if this is necessary to perform the contract agreed with you, if data may be divulged on the basis of a weighing of interests as defined under Article 6(1)(f) GDPR, if we are legally obliged to divulge such data or if you have issued your consent to do so.
Where will data be processed?
We will only process your personal data in data centres located in the Federal Republic of Germany.
Your rights as a data subject
You are entitled to access the personal data pertaining to you that we have processed.
Please understand that we may ask you to provide evidence to prove that you are indeed who you claim to be should you make a non-written request to gain access to data.
You are also entitled to rectify or erase data or to restrict processing thereof to the extent permitted by law.
You also have the right to object to data processing and the right to data portability in accordance with statutory provisions.
In particular, in accordance with Article 21(1) and (2) GDPR, you have the right to object to your data being processed for direct marketing purposes if such processing is performed on the basis of a weighing of interests.
Our data protection officer
We have appointed a data protection officer for our enterprise. Use the following contact information to get in touch with him:
Vierling Mr Frank Vierling
Franz-Mehring Str. 3 06846
Right to complain
You have the right to complain about our processing of personal data to a data protection supervisory authority.