Source: https://www.sofha.de/notes-on-data-processing
Timestamp: 2019-04-21 11:01:27+00:00

Document:
The DPO can be reached at the above address or at GDPR@sofha.de.
II. Collection and storage of personal data as well as the nature and purpose and their use.
• Information that is necessary for the processing and execution of the order/project/contract.
The data processing ensues upon your request and is required, in accordance with Art. 6 (1) sentence 1 (b) GDPR, for the purposes mentioned for the appropriate processing of the order/project/contract and for the mutual fulfillment of obligations arising from the customer/contractual relationship with you. This also applies to processing operations required to carry out pre-contractual actions. The personal data collected by us for the commissioning shall be stored until the expiry of any warranty period from the contractual relationship and deleted thereafter, unless we are obliged, pursuant to Art. 6 (1) sentence 1 (c) GDPR, to store your personal data for a longer period of time due to tax and commercial requirements for storage and documentation (HGB, StGB or AO), or if you have consented to a further storage period pursuant to Art. 6 (1) sentence 1 (a) GDPR.
A transfer of your personal data to third parties for purposes other than those listed below shall not take place. Insofar as this is required pursuant to Art. 6 (1) sentence 1 (b) GDPR for the execution and handling of the customer/contractual relationship with you, your personal data will be passed on to third parties. This includes in particular the transfer to partner companies and subcontractors of us, which we use for order processing. The transferred data may be used by the third party exclusively for the stated purposes.
If you have the right to rectify, delete or limit the processing against us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Insofar as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 (f) GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR provided that there are grounds for doing so arising from your particular situation. If you would like to exercise your right to object, just send an e-mail to GDPR@sofha.de.
Without prejudice to any other administrative or judicial remedy, you have the right to object to a supervisory authority under Art. 77 GDPR if you believe that the processing of personal data concerning you is in violation of the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 77