Source: https://www.sms-group.com/legal/data-protection-notice/
Timestamp: 2019-04-22 08:29:34+00:00

Document:
In this data protection notice SMS group GmbH, Eduard-Schloemann-Strasse 4, 40237 Duesseldorf, Germany, dataprotection(at)sms-group.com, (hereinafter “we”, “us” or “SMS group GmbH”) wish to inform you as the controller pursuant to data protection law of how we process your personal data during your visit to our website www.sms-group.com.
For the proper execution of business transactions with customers and suppliers or other business partners (“business partners”), we process personal data on our business partners or on our contact persons working for our business partners, based on the relevant circumstances and as and when required. Such data include contact details (name, gender, title, job title and professional qualification, role and position, professional experience, address, telephone number, and e-mail address), and, where applicable, payment details (bank accounts, cards, and payments), communication data (all e-mails, letters, or other forms of correspondence from and to you, including the circumstances of said communication), and all other data and documents containing data about you (e.g., contracts, purchase orders, invoices, and delivery notes) which are required to maintain the business relationship.
If you represent a supplier (i.e. another company) and seek to use the supplier portal function to register a supplier, we, in addition to information requested about the company, also ask for certain contact data such as name, function and address of you or another representative in order to get in contact you to finalise the registrations as a supplier.
If you are interested to book a training, course, etc. in our TECademy, you can submit us information about the type of event you would like to book in addition to certain contact data such as name, function and address of you in order to get in contact with you to finalise the booking.
When you are invited or want to apply to get access to our restricted Customer Log-in Area you must enter your name and contact details (e.g. address, function, telephone number, email address) and set a personal password to register. Within the Customer Log-in Area you will find various options and selections to identify your particular expertise and / or interests according to the offerings on the website.
We set up a user profile on your use of our website under a pseudonym, which enables us to understand the manner in which our website is being used.
When you use our websites, data on your usage (such as the date and time of your visit, pages called up and files requested, type and version of the web browser used by you, type and operating system of the end device you use as well as your IP address) is temporarily stored in a log file on our server.
With respect to personal data collected for applications via our Career portal, please see the separate data protection notice there.
If you are our contact person in your role as the proprietor or agent of a business partner, such as, for example, a (potential) customer, supplier, cooperation partner, service provider, etc., we process the business partner data relating to you for the purpose of a) communicating with you on planned, ongoing, or past business transactions, (b) preparing, implementing and processing business transactions subject to the contractually agreed performance (e.g., fulfillment, delivery, invoicing, postprocessing, customer service, and the assertion of rights and legal claims), c) if you are a (potential) customer in connection with the marketing and sale of our products and services (cf. also 2.5), and (d) the longer-term maintenance of the business relationship in our customer and supplier management systems.
Our contract documents, declarations of consent where applicable, and other information made available to you (e.g. website or general terms and conditions) contain further details and supplementary information on the purposes of personal data processing.
The legal basis of this processing of personal data for a specific purpose is set out in Art. 6 (1) b GDPR (provided that the data are required for the performance of a contract with you, and you yourself are our business partner), in Art. 6 (1) c GDPR (provided that we are subject to legal obligations, such as the Anti-Money Laundering Act, or export control and sanctions legislation), and otherwise in Art. 6 (1) f) GDPR (our legitimate interest in the preparation, execution, administration, and communication as part of our business relationship, or the marketing and direct marketing of our products and services).
You may object to the processing of your data on the basis of Art. 6 (1) f GDPR (in accordance with Art. 21 (1) GDPR). We may then provide evidence of overriding reasons for the processing of your data, in order that we can continue to process it.
We shall process your data for the duration of our business relationship, including the preparation and performance of a contract, and, over and above this, in compliance with statutory storage and limitation periods.
The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) letter f GDPR in providing you with the respective service you requested (e.g. Supplier portal, TECademy, request for contact). If your query concerns the initiation or processing (including customer service or warranty) of a contract, the additional legal basis for the processing is Art. 6 (1) letter b GDPR. You may oppose the processing of your data on grounds of Art. 6 (1) letter f GDPR. In this case, upon proving mandatory reasons for the processing we can continue the processing. This can, in such case, be particularly necessary in order to prove past queries and communications with you. If no such mandatory reasons exist, we will cease our communication with you and delete already collected data.
When you permitted to register yourself in our Customer Log-in Area, we process the registration data in order to set up and manage your customer account, your log-ins, your selections made by you as well as your activities within that area. As a registered customer, you have access to your personal customer account (via your email address and your chosen password), in which you can, amongst other things, check your data, selections as well as store and change your personal settings (e.g. password settings, newsletter settings, etc).
The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) letter f GDPR in providing you with the aforesaid Customer Log-in Area service, respectively the performance of a user contract with you (Art. 6 (1) letter b GDPR).
This data is deleted when the registration on our website, respectively the customer account, is cancelled or modified.
You can object to a processing of your data on the basis of Art. 6 (1) letter f GDPR (according to Art. 21 (1) GDPR). In such cases we may, in principle, prove mandatory reasons for the processing in order to continue such processing. We will not do so for the use of a customer account, however, and in this case the customer account will have to be deleted and will no longer be available to you. Please note that we may possibly store data about the transactions visible in your customer account for a longer period.
We also wish to use the data entered by you in any event or collected during your use of the websites to inform you about products and services relating to our product range (“Services”) (advertising) or to improve our product offers and services (product development).
Moreover, we use your usage data to understand your surfing behaviour and thereby improve the offers displayed to you and to offer personalised information.
On our website, you may subscribe to our newsletter, which is free of charge. The data collected upon subscription will be processed (the data provided in the mandatory fields are indispensable for receipt of the newsletter, data in the voluntary fields only serve the purpose of a more personalised contact and selection of the displayed information). We use the open source software tool Mautic for our e-mail services.
We will contact you by email with information, offers and promotional offers regarding Services that are personally tailored to you and your interests and use, either on the basis of your express consent, or – if you have previously acquired similar products or services and in this context have provided your email address – also without separate consent. In this context, we will also process data on your user conduct after we have sent you emails (e.g. click behaviour, open).
By telephone, we will only contact you with your respective express consent with information, offers and promotional offers regarding Services that are personally tailored to you and your interests and use. Also without consent, we may inform you where appropriate within the legally permissible scope by written mail advertising of Services.
You may at any time wholly or partially object to the creation of pseudonymised data, the use of your personal data for advertising and product-development purposes as well as the ensuing contact for such purposes in a specific form or may revoke any consents you may have granted. Please use the corresponding functions that are already provided for your use (e.g. the unsubscribe function in your personal customer account) or address a corresponding written notification (reference: data protection) or email to the contact details given in clause 6.3.
The legal basis for the processing is your consent (Art. 6 (1) letter a GDPR) and our legitimate interests (Art. 6 (1) letter f GDPR, where applicable in connection with Sec. 7 para. 3 German Unfair Competition Act (UWG).
The legal basis for the processing is our legitimate interest in providing the website with our services (Art. 6 (1) letter f GDPR). The processing is a mandatory prerequisite for the use of our website; no objection right is hence available.
service providers for the practical execution of advertising and marketing measures, e.g. service providers for email distribution, online surveys and analysis Cookies. For our e-mail services we use the open source software tool Mautic (see also 2.4.3).
Where applicable, we shall transfer the data supplied by you to the relevant branch offices and establishments of SMS group in Germany and in other countries during the preparation or performance of a contract, if this is required to answer your inquiry (e.g. if your inquiry relates to a business transaction or a price quotation from another country). The legal basis for the transmission shall be the rendering of the service for which you have submitted a request for quotation or a service which has been contractually agreed with you, Art. 6 (1) b GDPR, or if we have a legitimate interest in processing your inquiry, Art. 6 (1) f GDPR.
Please note that this may, depending on your enquiry, involve a transfer or your personal data to countries outside the European Economic Area, that do not necessarily provide the same level of data protection. We have ensured an adequate level of protection by signing the EU model clauses (Art. 46 (2) GDPR), and you may get a copy of the relevant parts from the contact person named in clause 6.3.
In order to transport any materials, etc., that you may have ordered, we transmit your address and contact details, to the extent necessary, to parcel transportation enterprises. The legal basis for the transfer is the performance of the contract with you, Art. 6 (1) letter b GDPR.
To the extent you want to share one of our websites in a social network (e.g. Facebook or Twitter) and for this purpose click one of the “share” buttons, the respective information will be transferred to the social network. Of course, you have to be logged into the respective social network. The legal basis for the transfer is our legitimate interest to provide you with the opportunity to “share”, Art. 6 (1) letter f GDPR.
We and our partners use so-called “Cookies” to fashion our website in a most user-friendly way and to enhance the relevance of advertisements for the users of our website. Cookies are small files stored on the user’s device. They allow the storage of information for a determinate period of time and the identification of the user’s device. For this purpose, also tracking-pixel might be used that are not stored on the user’s hard drive, but that may in the same way help to recognize a user’s device.When using the term “Cookie”, this refers to Cookies in the technical sense as well as tracking pixel and other technologies.
Analytics Cookies gather general information on how users use a website, e.g. which pages they visit most frequently and whether they receive any error messages from websites. These Cookies do not collect any data that may lead to an identification of the user. The data collected with these Cookies will not be merged with any other information on the visitors of our website.
Users can prevent the storage of Cookies by adjusting the setting of their browser accordingly; moreover, users can prevent that the data generated by the Cookie on their use of the online offer is transmitted to and processed by Google by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=de.
Targeting and advertising Cookies are used to better customise advertisements to your interests. They limit the number of times the same advertisement is shown to you, evaluate the efficacy of an advertising campaign, and analyse how the viewing of a certain advertisement influences the conduct of individual users. Such Cookies are usually placed by advertising networks with the consent of the respective website operator (in this case us). They register a user’s visit of the website and either pass such information on to other entities, e.g. advertising companies, or directly adapt advertisements accordingly. Frequently, they are linked to certain website functions provided by such third companies. We also use these Cookies to create a link to social networks, which in turn may use the information on your use of the website to customise advertisements on other websites to your interests, and also to provide the advertising networks used by us with information about your visit so that, based on your browsing behaviour, you will be shown exactly such advertisements as may potentially interest you.
Also in these cases the data collected via such Cookies will not be merged with any other information on the visitors of our website.
If you would rather receive information about these Cookies directly from us, please contact us via email at: dataprotection(at)sms-group.com.
You have the right to object at any time to the processing of your data for direct marketing purposes (cf. also clause 2.5; Art. 21 para. 2 and 3 GDPR).
Please address your concerns in writing (reference: data protection) or by email to the contact details given in point 6.3 below. We reserve the right to check your identity to ensure that your personal data is not disclosed to unauthorised persons.
During the transfer of your personal data to us it is encrypted with Secure Socket Layer (SSL). Personal data which is exchanged between you and us or other participating enterprises is fundamentally transmitted via encrypted connections which meet the latest technical standards.
Our employees and our retained service providers are naturally obliged to maintain confidentiality.
We have appointed a data protection officer. Please contact him or send your requests in writing to SMS group GmbH, Eduard-Schloemann-Strasse 4, 40237 Duesseldorf, Germany, quoting “Data protection”, or email us at dataprotection(at)sms-group.com.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21