1. Purpose of data collection, -processing or –use

The main purpose is collection, processing and use of data on behalf of the fulfillment of customer orders. The secondary purpose is the supplier support as well as the interest care. Specifically these include: customer administration and acquisition, appointment management, contract processing, service processing, invoicing, goods purchase and payment transactions.

2. Legal basis for processing

The legal basis for the processing of personal data of our customers is Article 6 (1) (b) GDPR according to which processing for the performance of a contract with the person concerned is permitted.

3. Recipients or categories of recipients to whom the data is communicated

Basically we do not disclose personal data of our customers to third parties unless the disclosure is mandatory due to legal regulations or order fulfillment. In this case those affected will be informed if they are not already aware of it. GDPR Customer information for data processing May 2018

4. Data transmission to third countries

A transfer of data to countries outside the EU or EEA (third countries) is not planned.

5. Retention period of personal data

In principle, we delete data when the purpose for which, the data was collected has ceased to exist, e.g. upon termination of a contractual relationship, provided that no statutory retention obligations prevent deletion. If deletion is not possible, e.g. data stored in an electronic archiving system, it will be blocked for further processing. The retention period or deletion periods of customer data depend on the type of data. We keep a detailed list of the data categories and types of data we process in an electronic register of processing activities pursuant to Article 30 DSGVO, which we are happy to provide to data subjects upon request. We do not delete data that we need for the assertion, exercise or defense of legal claims pursuant to Article 17 3 letter e) DSGVO.

6. Right to information, authorization, deletion and limitation of processing

You have the right to obtain information about your PERSONAL DATA STORE by us at any time. Likewise, they have the right to have their personal data corrected, blocked or, apart from the mandatory data storage for business processing, deleted.
In order that a blocking of data can be taken into account at any time, this data must be kept in a blocking file for control purposes. You can also request the deletion of the data, unless there is a legal obligation to retain the data. If such an obligation exists, we will block their data upon request.

7. Consent

You may make changes or revoke your consent by written notice to us with an effect on the future. GDPR Customer information for data processing May 2018

8. Provision of personal data

To fulfill the contract the client or the person concerned is obliged to provide personal data to the extent necessary for the fulfillment of the contract. It is the responsibility of the client to provide the employee or the responsible office only with data necessary for fulfillment of the contract (minimum principle).

9. Right of appeal to the supervisory authority

You have the right to call you EU data protection supervisory authority and to learn there about your rights under the General Data Protection Regulation (GDPR).