Source: https://www.giesser.de/polish/Serwis/ochrona-danych-osobowych/For-customers-and-interested-parties
Timestamp: 2019-04-22 19:59:45+00:00

Document:
1. Who is responsible for data processing and who can you contact about it?
Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act BDSG and other relevant data protection regulations. The processing and use of the individual data depends on the agreed or requested service. In our contract documents, forms, consent statements and other information provided to you (for example, on the website or in the Terms and Conditions), you can find further details and additions to the processing purpose.
We process your personal data to carry out our contracts with you, i.e. especially for (possibly specify). Furthermore, your personal data will be processed for the implementation of measures and activities in the context of pre-contractual relationships.
We process your personal data when necessary to fulfill legal obligations (such as commercial -, tax laws).
Identity and age checks, prevention of fraud and money laundering, the prevention, combating and clarification of terrorist financing and offending criminal offenses, comparison with European and international anti-terrorist lists, the fulfillment of tax control and reporting obligations as well as the archiving of data for data protection and data security purposes and the examination by tax and other authorities. In addition, the disclosure of personal data in the context of administrative/judicial action may be required for the purpose of gathering evidence, prosecuting or enforcing civil claims.
We process your personal data when it is necessary to safeguard a task that is in the public interest.
- for advertising or market research, if you have not objected to the use of your data.
- for obtaining information and exchanging information with credit bureaus, if this goes beyond our economic risk.
- for limited storage of your data, if a deletion due to the special nature of the storage is not or only with disproportionate effort possible.
- for further development of services and products as well as existing systems and processes.
- for disclosure of personal data in due diligence, e.g. at company sales.
- for enrichment of our data by using or researching publicly available data.
- for statistical analysis or market analysis.
- for assertion of legal claims and defense in legal disputes, which are not directly attributable to the contractual relationship.
- for development of scoring systems or automated decision-making processes.
- for internal and external investigations and or security checks.
- for eventual monitoring or recording of telephone calls for quality control and training purposes.
- for certifications of private or official matters.
- to ensure and exercise our domestic law through appropriate measures (such as video surveillance)..
Furthermore, we process personal data from public sources (such as the Internet, media, press, trade and club registries, registration records, debtor directories, land registers).
Data processing outside the EU or the EEA does not take place (is usually the case).
Or, if data is transmitted outside the EU, the text is adapted - otherwise delete.
A transfer of data to offices in countries outside the European Union (EU) or the European Economic Area EEA, so-called third countries), takes place when it is necessary for the execution of an order/contract by or with you, it is required by law (e.g. tax reporting obligations), it is in the legitimate interest of us or a third party or you have given us consent.
The processing of your data in a third country can also take place in connection with the involvement of service providers in order processing. Unless there is a decision by the EU Commission regarding an appropriate level of data protection for the country in question, we ensure that the rights and freedoms are adequately protected and guaranteed under corresponding EU treaties. Corresponding detailed information is available on request.
If necessary, we process your personal data for the duration of our business relationship, including the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations, which among others derive from the Commercial Code (HGB) and the Tax Code (AO). The deadlines for storage and documentation specified there are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.
Ultimately, the storage period is also judged by the statutory limitation periods, which can be, for example, according to §§ 195 ff. of the Civil Code (BGB) usually three years, in some cases, but also up to thirty years.
8. To what extent is there automated decision-making in an individual case (including profiling)?
If profiling is used this must be described here.
You have the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to restrict processing under Art. 18 GDPR and the right of data transferability from Art. 20 GDPR. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR). In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR). Basically, according to article 21 GDPR, there is the right to object to the processing of personal data by us. However, this right to objection only applies in the case of very special circumstances of your personal situation, whereby rights of our company may conflict with your right of objection. If you want to assert any of these rights, please contact our data protection officer (datenschutzbeauftragter@giesser.de).
You only need to provide the information necessary to enter into a business relationship or enter into a pre-contractual relationship with us, or that we are required to collect by law. Without this data we will generally not be able to conclude or execute the contract. This may also apply to data required later in the business relationship. If we request additional data from you, you will be made aware of the voluntary nature of the information separately.
At any time you have the right to object to the processing of your data, which takes place on the basis of Art. 6 (1) f GDPR (data processing based on a balance of interests) or Art. 6 (1) e GDPR (Data Processing in the Public Interest) if there are reasons for this arising from your particular situation. This also applies to a profiling based on this provision within the meaning of Art. 4 (4) GDPR.
If you file an objection, we will not process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If necessary, we also process your personal data in order to operate direct mail. If you do not want to receive advertising, you have the right to object to it at any time. This also applies to the profiling, as far as it is associated with such direct mail. We will consider this contradiction for the future.
We will no longer process your data for direct marketing purposes if you object to processing for these purposes.
The objection can be made informally to the address listed under point 1.

References: Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 6
 Art. 4