Obligations to inform under Article 13 GDPR
What do we want to tell you?
The new European data protection law obligates us to inform you about your personal data that are being
processed. To the extent possible, this will occur on a case-by-case basis, such as if you conclude acontract with us or order a newsletter. To inform you as thoroughly as possible about when and why we’re
processing your personal data, and what rights you have as a data subject, we’ve summarised the mostimportant cases for you. Of course, we’d be glad to answer any additional questions or requests you might
have. The respective contact data are listed in the following, as are the other obligations to inform under
Article 13 GDPR.
Data Controller:see data privacy statement https://www.homag.com/unternehmen/datenschutz/
Data protection officer:
see data privacy statement https://www.homag.com/unternehmen/datenschutz/
1.
Purposes for the data processing and their legal bases
There are many individual purposes for which we and you might contact each other. And the datatransmitted and processed thereby can be just as diverse. We’ve summarised the typical cases andpurposes for you here, then listed the normal data categories and associated legal bases. For otherpurposes not mentioned here, you will be informed when the data are collected.
Typical purposes(examples)- Purchase of goods orservices- Additional aspects inconnection with thecontractual relationship withyou, including questions
and complaints- Subscription to a newsletter- Invitation to trade fairs, etc.

- Keeping your data ready in
the IT systems- Evaluation for statistical
purposes- Postal advertisement

Processed data
categories
Last name, first name,address andelectronic contact
data, such as email
address andtelephone number

Legal basis

ErasureInitiating and fulfilling
contracts(Art. 6 (1) (1) (b)
GDPR)

Email address, last
name, first name,subject matter of theconsent
Processed data
correspond to theoriginally processeddata plus consolidated
evaluation data

Consent (Art. 6 (1)(1) (a) GDPR)

Without undue delay
after the purpose of thedata’s collection nolonger applies (has beenachieved) or after theend of the subsequent
retention period.
Without undue delay
after withdrawal ofconsent

Protecting legitimate
interests (Art. 6 (1)(1) (f) GDPR)

Without undue delay
after the purpose of thedata’s collection nolonger applies (has beenachieved) or after theend of the subsequent
retention period.

2.
Storage period
As a general principle, the data will be erased as soon as they are no longer needed to attain the goal forwhich they were collected. Since the legislature has issued various retention requirements with which wemust comply, the data will be erased without undue delay after those time limits expire.
3.
RecipientNaturally, the aforementioned data will primarily be processed in our business, but only the competentdepartments in question will be provided with the data or given access to them. Since we cannot render all
the services of a modern business operation ourselves, we use various service providers and suppliers withwhom we have concluded appropriate contractual regulations to protect your data. Additional recipients canbe government agencies, for example, to whom we must transmit data due to statutory obligations.

We use those service providers for the following purposes, among others:- Executing print jobs
- Marketing strategies- Supporting and maintaining data processing services- Supporting events such as trade fairs- Hosting websites
4.
Possibility for objection, withdrawal and rectification
You may at any time lodge an objection against the data processing for certain purposes. You can do thisusing the contact data …
Whenever your data are processed on the basis of your consent, you may withdraw that consent at anytime, with effect for the future. If nothing else is specified, you may send your objection to our address oremail addresses given above, regardless of form.
5.
Rights of the data subject
You have the following rights regarding the personal data we are processing which concern you:right of access, rectification or erasure; right to restriction of processing; right to lodge an objection against
the processing and the right to data portability. You also have the right to lodge a complaint with asupervisory authority.
6.
Additional information
You can find additional data privacy information on our websites.
Last revised 2018-06-03

2