Source: https://www.oxando.com/en/privacy-policy-and-information/
Timestamp: 2020-07-14 08:59:33
Document Index: 1386905

Matched Legal Cases: ['art. 13', 'art. 13', 'art. 13', 'art. 13', 'art. 6', 'art. 13', 'art. 13', 'art. 13', 'art. 6', 'art. 13', 'art. 13', 'art. 15', 'art. 16', 'art. 17', 'art. 18', 'art. 21', 'art. 13', 'art. 13', 'art. 77', 'art. 13']

Privacy Policy and Information – oxando
Startseite > Privacy Policy and Information
Issued 29th of June 2020
Obligation to supply information according to the GDPR
Obligation to supply information according to art. 13 GDPR
Responsible for processing data acc. to art. 13 par. (1) lit. a) GDPR – the controller
Contact details of the controller and it`s representatives:
Geschäftsführer: Andreas Schmidt, Tobias Zug
Registergericht: Amtsgericht Mannheim HRB 701956
Contact details of the data protection officer acc. to art. 13 par. (1) lit. b) GDPR
+49 9123 70275-0
Purposes and legal basis for the processing of personal data acc. to art. 13 par. (1) lit. c) GDPR
Personal data is processed for the purpose of fulfilling contracts or to act out preceding actions prior to closing a contract. This includes cutomer master data, as well as contact history, offers, orders, invoices, project data and other legal obligations of the controller.
The legal basis is formed by art. 6 GDPR. Further substantial legal foundations that apply to the controller oxando GmbH are the german „HGB“, „StGB“, „GmbHG“ and other relevant legal obgligations, including but not limited to contractual arrangements. The processing of newsletters is based on permission by the data subject.
Information about the processing of data for the legitimate interests pursued by the controller or by a third party acc. to art. 13 par. (1) lit. d) GDPR
Where required the processing of personal data will go beyond the fulfillment of the contract to safeguard justified interests of oxando GmbH or third parties. This includes:
– Sales management and sales controlling
– Assertion of legal claims and defending legal interests
– Insuring IT-security and IT-operations
– Measures for building- and facility-safety (such as access control) and to protect domiciliary rights
– Measures for business management and development
Recipients and categories of recipients of personal data (data transfer) acc. to art. 13 par. (1) lit. e) GDPR
Within the borders of Germans, the European Union and the european economic region
Certified public accountants, court bailiffs and other donors as well as other public authorities for the fulfillment of legal obligations or obtaining certificates. Logisitc companies, customers as well as suppliers and other parties or business partners.
Third country including adequacy decision by the Commission acc. to art. 13 par. (1) lit. f) GDPR
Within the scope of international business relationships data is transfered acc. to art. 6 par. (1) lit. b) to fulfill contracts or to act out preceding actions prior to closing a contract. For this type of action an adequacy decision by the Commission is not necessary.
Storage period acc. to art. 13 par. (2) lit. a) GDPR
Personal data will be deleted after the attainment of the particular purpose. The particular purpose to store data results from legal obligations as well as industry-sector-specific relevant regulations.
Rights of the data subject acc. to art. 13 par. (2) lit. b) GDPR
At any time you can make use of your individual rights by contacting the above listed contacts. If your personal data is processed, you are considered to be an affected data subject according to the regulations of the GDPR euqipped with the following rights:
Reference to individual rights of the affected data subject:
The data subject has the right to obtain confirmation from the controller as to wether or not personal data concerning him or her are being processed. And, if this is the case, the data subject has the right to obtain information and access to the personal data and all matters listed in art. 15 GDPR.
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement (art. 16 GDPR).
The data subject has the right to request from the controller to delete personal data without undue delay, in case one or all reasons listed in art. 17 GDPR are applicable, for example if data is no longer needed to fulfill the related purpose (right of erasure).
The data subject has the right to request from the controller to restrict processing of personal data in case one or all preconditions listed in art. 18 GDPR are applicable, for example during the verification process of the controller after the data subject objected to the processing of his or her personal data.
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller then shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (art. 21 GDPR).
Rights of the data subject acc. to art. 13 par. (2) lit. c) GDPR
In case the data subject gave us permission to process his or her personal data for particular purposes (for example the processing of personal pictures), this type of processing is legitimate according to the given permission.
A once given permission can be revoked at any time. This also applies to permissions that have been given to us before the regulations of the GDPR were in place (before 25th of May 2018).
Please note, that the revocation only applies to the future. Processing that has been done before the revocation is not affected.
The right to lodge a complaint with a supervisory authority acc. to art. 13 par. (2) lit. d) GDPR
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority – in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement – if the data subject considers that the processing of personal data relating to him or her infringes the regulations of the GDPR (art. 77 GDPR).
The supervisory authority for Baden-Wurttemberg is the following:
Königstrasse 10 a
Provision of personal data acc. to. art. 13 par. (2) lit. e) GDPR
In connection to our business relationship the data subject only has to provide personal data that is needed for the establishment, the execution and termination of the employment or peronal data the we require for the fulfillment of statutory requirements. Without this data we will most likely not be able to commence the employment.
Amendments to the purpose
We reserve the right to change this privacy statement following the regulations of the GDPR. The current issue of the privacy statement can be found on our website: https://www.oxando.com/datenschutz/
In addition to that it can be requested under the before mentioned contact details at any time.
If we intent to process personal data for reasons other than the mentioned purposes we will inform the data subject in advance and according to legal provisions.
Issued 15th of May 2018
Telefon: +49 (0621) 860 860 0