Source: https://kumavision.com/en/informationspflichten
Timestamp: 2019-04-24 22:53:38+00:00

Document:
KUMAVISION AG takes the protection of your personal data very seriously. Your privacy is important to us. We process your personal data in accordance with the applicable statutory data protection requirements for the following purposes. Personal data in the sense of this data protection information is all information, which has a relation to your person.
Here's how we handle this data. For a better overview, we have divided our data protection information into chapters.
If you have any questions or comments about privacy (such as information and updates of your personal information), you may also contact our Privacy Officer.
As far as this is necessary for the provision of our services, we process from other companies or other third parties (eg credit bureaus, adress publishers) permissible received personal data. In addition, we process personal data that we have legitimately taken, obtained or acquired from publicly available sources (such as telephone directories, trade and association registers, registration registers, debtor directories, land registers, press, Internet and other media) and may process.
We process personal data in accordance with the provisions of the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and other applicable data protection regulations (details below). Which data is processed in detail and how it is used depends largely on the services requested or agreed upon. Further details or additions to the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and / or other information provided to you (eg as part of the use of our website or our terms and conditions).
The processing of personal data takes place to carry out our contracts with you and the execution of your orders as well as to carry out measures and activities in the context of pre-contractual relationships, eg with interested parties. This essentially includes: contractual communication with you, the corresponding billing and related payment transactions, the verifiability of orders and other agreements as well as quality control through appropriate documentation, goodwill procedures, measures to control and optimize business processes and to fulfill the general due diligence requirements Control and control by affiliates; statistical evaluations of corporate management, costing and controlling, reporting, internal and external communications, emergency management, billing and tax assessment of operating services, risk management, legal claims and defense of legal disputes; Ensuring IT security (including system and plausibility tests) and general security, ensuring and exercising home ownership (eg through access controls); Ensuring the integrity, authenticity and availability of data, preventing and resolving criminal offenses, and oversight by oversight bodies or control bodies (eg auditing).
ensuring and exercising the rights of the home through appropriate measures (such as video surveillance), as well as to secure evidence of crime and its prevention.
Processing of your personal data for specific purposes (eg use of your e-mail address for marketing purposes) may also be based on your consent. As a rule, you can revoke these at any time. This also applies to the revocation of declarations of consent prior to the application of the GDPR, ie before the 25. May 2018, have been granted to us. You will be informed separately about the purposes and consequences of a withdrawal or non-grant of consent in the relevant text of the consent. In principle, the revocation of consent only works for the future. Processing that occurred before the revocation is unaffected and remains legal.
Like everyone involved in business, we too are subject to a variety of legal obligations. These are primarily legal requirements (eg commercial and tax laws), but also, if applicable, regulatory or other regulatory requirements. The purposes of processing may include the fulfillment of tax control and reporting obligations, as well as the archiving of data for privacy and data security purposes, as well as audits by tax and other authorities. In addition, the disclosure of personal data in the context of administrative / judicial action may be required for the purposes of collecting, prosecuting or enforcing civil claims.
You only need to provide the information necessary to enter into a business relationship or enter into a pre-contractual relationship with us or we are required to collect it by law. Without this data we will generally not be able to conclude or execute the contract. This may also apply to data required later in the business relationship. If we also request data from you, you will be made aware of the voluntary nature of the information separately.
We do not use purely automated decision-making procedures in accordance with Article 22 DSGVO. Insofar as we should use such a procedure in individual cases in the future, we will inform you separately if this is required by law. We may process your information partially with the aim of evaluating certain personal aspects (profiling).
In order to provide you with targeted information and advice on products, we may use evaluation tools. These enable needs-based product design, communication and advertising, including market and opinion research. Data on nationality as well as special categories of personal data according to Art. 9 DSGVO are not processed.
In the context of the relationship, you must provide the personal information necessary to establish, conduct and terminate the transaction and to perform the related contractual obligations or we are required to collect it by law. Without this data, we will not be able to conduct the transaction with you.
Within our company, those internal bodies or organizational units receive their data which they need to fulfill our contractual and legal obligations or in the processing and implementation of our legitimate interests.
In addition, we will not share your data with third parties. Insofar as we commission service providers within the scope of order processing, your data will be subject to the same security standards as ours. In other cases, the recipients may only use the data for the purposes for which they were transmitted to them.
A transfer of data to offices in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries), if it is necessary for the execution of an order / contract by or with you, it is required by law ( For example, tax reporting obligations), it is within the scope of a legitimate interest of us or a third party or you have given us consent.
The processing of your data in a third country can also take place in connection with the involvement of service providers in order processing. Unless there is a decision by the EU Commission regarding an appropriate level of data protection for the country in question, we ensure that the rights and freedoms are adequately protected and guaranteed under corresponding EU treaties. Corresponding detailed information is available on request. Information on the appropriate or reasonable guarantees and the possibility of obtaining a copy thereof may be obtained from the Data Protection Officer on request.
In addition, we are subject to various storage and documentation obligations, which result inter alia from the Commercial Code (HGB) and the Tax Code (AO). The deadlines for storage and / or documentation specified therein are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship at the end of the calendar year.
Furthermore, specific legal regulations may require a longer retention period, such as the preservation of evidence under the statutory limitation provisions. According to §§ 195 ff. Of the German Civil Code (Bürgerliches Gesetzbuch, BGB), the regular limitation period is three years; however, limitation periods of up to 30 years may also be applicable.
If the data is no longer required for the fulfillment of contractual or legal obligations and rights, these are regularly deleted, unless their - limited - further processing is required to fulfill the purposes of a predominantly legitimate interest. Such an overriding legitimate interest exists, for example, even if a deletion because of the special nature of the storage is not or only with disproportionate effort possible and processing for other purposes by appropriate technical and organizational measures is excluded.
Under certain conditions, you can assert your privacy rights with us.
So you have the right to receive information from us about your stored data according to the rules of Art. 15 DSGVO (possibly with restrictions according to § 34 BDSG).
Upon your request, we will correct the data stored about you according to Art. 16 DSGVO, if these are incorrect or incorrect.
If you wish, we will erase your data according to the principles of Art. 17 DSGVO, provided that other legal regulations (eg statutory retention requirements or the restrictions under § 35 BDSG) or a predominant interest on our part (eg to defend our rights and obligations) Claims) do not oppose.
Taking into account the requirements of Art. 18 DSGVO, you may require us to restrict the processing of your data.
Furthermore, you may object to the processing of your data in accordance with Art. 21 DSGVO, which requires us to stop processing your data. However, this right to objection only applies in the case of very special circumstances of your personal situation, whereby rights of our company may conflict with your right of objection.
You also have the right to receive your data under the conditions of Art. 20 DSGVO in a structured, common and machine-readable format or to transmit it to a third party.
In addition, you have the right to withdraw your consent to the processing of personal data at any time with regard to us with future effect (see point 2.3).
Furthermore, you have a right of appeal to a data protection supervisory authority (Art. 77 DSGVO). However, we recommend that you first make a complaint to our data protection officer.
Your requests for the exercise of your rights should, if possible, be addressed in writing or by e-mail to the address indicated above or directly in writing or by e-mail to our data protection officer.
You have the right to object at any time to the processing of your data, which takes place on the basis of Art. 6 para. 1 f DSGVO (data processing based on a balance of interests) or Art. 6 para. 1 e DSGVO (Data Processing in the Public Interest) if there are reasons for this arising from your particular situation.
This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If necessary, we also process your personal data in order to operate direct mail. If you do not want to receive advertising, you have the right to object to it at any time; this also applies to profiling insofar as it is associated with such direct mail. We will consider this contradiction for the future. We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.
You also have the option to lodge a complaint with the above-mentioned data protection officer or with a data protection supervisory authority.
We are pleased that you are interested in us and have applied or applied for a position in our company. We would like to provide you below with information on the processing of your personal data in connection with the application.
The legal basis for the processing of your personal data in this application process is primarily § 26 BDSG in the version valid as of 25.05.2018. Thereafter, the processing of the data required in connection with the decision to establish an employment relationship is permitted.
If the data may be required for the prosecution after completing the application process, data processing based on the requirements of Art. 6 DSGVO, in particular for the exercise of legitimate interests under Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion or defense against claims.
Applicants' data will be deleted in case of cancellation after 6 months.
We use a specialized software provider for the application process. This person acts as a service provider for us and may also be aware of your personal data in connection with the maintenance and care of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing takes place in a permissible manner.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then ask for proof from you proving that you are the person for whom you are claiming to be.
You also have the right to correct or delete or limit processing to the extent that you are legally entitled to do so.
The revocation must be sent by post to the Human Resources Department or by e-mail to: HR-Services@kumavision.com.
You have the right to complain to us about the processing of personal data by us with the competent supervisory authority for data protection.

References: Art. 9
 Art. 15
 § 34
 Art. 16
 Art. 17
 § 35
 Art. 18
 Art. 21
 Art. 20
 Art. 6
 Art. 6
 Art. 4
 § 26
 Art. 6
 Art. 6