Source: https://www.stahlgruber.si/en/privacy
Timestamp: 2019-12-13 02:50:30
Document Index: 298155021

Matched Legal Cases: ['Art. 6', 'Art. 6', 'art. 6', 'Art. 6', 'Art. 6', 'art. 28', 'Art. 6', 'Art. 6', 'Art. 4']

privacy - STAHLGRUBER
Information on Data Protection for Customers, Suppliers and other Business Partners
(Last revised: 1 February 2019)
The protection of your personal data and your right to informational self-determination have always been of great importance to us at STAHLGRUBER GmbH. In the following we would like to inform you about how your personal data is processed by us and what rights you have as the data subject pursuant to Articles 13, 14 and 21 of the European General Data Protection Regulation (GDPR). The following general information is valid as of May 25, 2018, and may replace any previously published information or versions. If a special situation arises regarding processing, you will receive separate or supplementary information. This includes, for example, the data protection statements on our websites, terms of participation concerning events, and information regarding consent. The following general information will be updated as needed. The current version can be viewed at https://www.stahlgruber.de/en/privacy.
- Historical data on any business relationship with STAHLGRUBER GmbH and affiliated companies
If you access the websites of STAHLGRUBER GmbH or use other electronic services provided by us, we will process various IT-specific information. In addition to the type, time and duration of access, such processing also includes the IP addresses that you use, as well as data about the devices that you use, such as: operating system, browser and amount of transmitted data. As part of the processing activities referred to in Point 3, so-called “cookies” are also used. Further information can be found in the specific information concerning data protection for each respective website or electronic service. The information for the website “stahlgruber.de” is available at the end of this document.
Like any other company, STAHLGRUBER GmbH has to fulfil and comply with a wide variety of legal obligations. To do this, personal data must also be processed. The legal basis for this is Art. 6 Para. 1 Sent. 1 (c) of the GDPR. Furthermore, personal data may have to be processed during the performance of a task carried out in the public interest. The legal basis for this is Art. 6 Para. 1 Sent. 1 (e) of the GDPR. The requirements and the resulting processing activities and purposes arise, in particular, from commercial and tax law but also from other supervisory or regulatory requirements. The retention periods for business documents require, for example, that a large number of documents, including the personal data that such documents contain, are stored on a long-term basis.
c) Processing for the protection of the legitimate interests of STAHLGRUBER GmbH or a third party
As a customer or business partner of STAHLGRUBER GmbH, you are accustomed to having a trusting relationship with us. In addition to the execution and fulfilment of contracts with you, the implementation of pre-contractual measures, the fulfilment of legal obligations, and the preservation of public interests, we process personal data in order to safeguard our legitimate interests or those of third parties. The legal basis for this is the first sentence of art. 6 para. 1 sentence 1 letter f) GDPR. The processing activities comprise in particular:
- Obtaining offers for credit insurance and taking out credit insurance to reduce the economic risk for STAHLGRUBER GmbH
- Obtaining information and exchanging data with credit agencies, among other things to reduce the economic risk for STAHLGRUBER GmbH and to grant payment terms
- Video surveillance in the context of the protection of domiciliary rights, for the prevention and prosecution of criminal offences as well as for the protection of the property of STAHLGRUBER GmbH and of third parties
Within STAHLGRUBER GmbH, the departments have access to personal data which they require for their professional activities and for carrying out the processing described under point 3. Your personal data will only be passed on to entities outside STAHLGRUBER GmbH if this is legally permitted and is necessary as part of the processing mentioned under point 3.
- The transfer is necessary for the performance of a contract which you have concluded with STAHLGRUBER GmbH or a third party or for the implementation of pre contractual measures. Art. 6 para. 1 sentence 1 letter b) GDPR
- The transfer is necessary for the fulfilment of legal obligations to which STAHLGRUBER GmbH is subject.
- The transfer is necessary to protect the legitimate interests of STAHLGRUBER GmbH or a third party. Art. 6 para. 1 sentence 1 letter f) GDPR
Like most other companies, STAHLGRUBER GmbH works together with service providers. These vicarious agents are obliged to comply with data protection regulations. If the order processing is within the meaning of art. 28 GDPR, the service provider may only process personal data in accordance with the instructions and within the narrow limits of the respective order. The service providers and contractors that STAHLGRUBER GmbH makes use of come from the following categories in particular:
Apart from service providers who act on behalf of STAHLGRUBER GmbH, other categories of recipients may be taken into consideration:
- STAHLGRUBER GmbH suppliers,
- companies associated with STAHLGRUBER GmbH for the purpose of joint administration, risk management, controlling and/or statutory obligations
How long does STAHLGRUBER GmbH store your personal data?
STAHLGRUBER GmbH processes your personal data as long as is necessary to conduct the business relationship, including pre-contractual measures, and to comply with statutory obligations.
Furthermore, STAHLGRUBER GmbH is obligated to observe retention periods under commercial and tax law. These are defined, in particular, in the German Commercial Code, the German Tax Code and the German Prevention of Money-Laundering Act and can be up to 10 years after the business relationship or contract formation phase has ended.
Personal data is processed by STAHLGRUBER GmbH solely in Germany or the European Union. Such data shall only be forwarded to service providers, associated companies or other third parties outside the European Union in accordance with statutory provisions, if:
f) this is necessary to safeguard the legitimate interests of STAHLGRUBER GmbH or an associated company, or
As a data subject, you have various rights that you can assert against STAHLGRUBER GmbH under certain conditions. These include the right to information (Article 15 GDPR), the right to correction (Article 16 GDPR), the right to deletion (Article 17 GDPR), the right to restricted processing (Article 18 GDPR) and the right to data portability (Article 20 GDPR). Restrictions in accordance with Sections 34 and 35 FDPA (amended version) shall apply to the rights to information and deletion. You have the right to object to the processing of data on grounds of a legitimate interest (Article 21 (1) GDPR). In such cases, we shall cease processing the data unless compelling legitimate reasons exist for processing, or if processing is necessary for asserting, exercising or defending legal claims. This shall apply analogously for the processing of your personal data for direct marketing purposes (Article 21 (2) GDPR). You may withdraw your consent at any time pursuant to Article 7 (3) GDPR. This shall also apply for any consent given prior to 25.05.2018. The withdrawal of consent shall not affect the lawfulness of any processing for which consent was given and which was carried out prior to the withdrawal thereof.
Competent supervisory authority for the non-public sector in Bavaria:
If you would like to exercise your rights, please contact the STAHLGRUBER GmbH Data Protection Officer, preferably in writing. The contact details are listed under 1 above.
You are required to provide any and all personal data that is necessary for entering into and conducting a business relationship, for implementing pre-contractual measures and for fulfilling the contractual obligations related thereto. You are also required to provide any and all data that STAHLGRUBER GmbH is legally obligated to process. Without this data, we shall not be able to conclude or perform the respective contract with you. Such an obligation to provide personal data may only arise at a later stage of the business relationship. Any other personal data provided is done so on a voluntary basis.
STAHLGRUBER GmbH uses automated individual decision-making processes pursuant to Article 22 GDPR for the performance of contracts. If the buyer is repeatedly in default of payment, the option of making a purchase with a specific payment target shall be automatically blocked. This measure aims to reduce payment defaults. The data subjects shall have the right to obtain human intervention on the part of the controller, to express their own point of view and to contest the decision.
STAHLGRUBER GmbH evaluates the creditworthiness of business partners. For these purposes, scoring can be used. In this process, the probability that a business partner will meet their payment obligations is calculated on the basis of mathematical and statistical procedures. The values are included in the assessment of creditworthiness, in the granting of payment terms and in risk management. The computation can include industry affiliation, company size, information from credit agencies, information about the history of the company, experience gained from the business relations and payment history.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning your person, provided that the processing is based on Art. 6 (1) (1) (e) GDPR (processing in the public interest) or on Art. 6 (1) (1) (f) GDPR (processing in the interest of STAHLGRUBER GmbH or a third party). This applies also to profiling based on this regulation within the meaning of Art. 4 (4) GDPR.If you object, STAHLGRUBER GmbH will no longer process the personal data concerning your person unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the assertion, exercise or defence of legal claims.
STAHLGRUBER GmbH uses your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning your person for such marketing purposes. This includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, STAHLGRUBER GmbH will no longer process your personal data for such purposes.
Users who have deactivated the saving of cookies for the Google Ad program should not expect to any cookies when they watch YouTube videos either. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you have to block the saving of cookies in your browser. Further information on data protection at “YouTube” can be found in the data protection declaration of the provider at: hwww.google.de/intl/de/policies/privacy/