Source: https://www.setago-pick2light.ch/information-zur-verarbeitung-von-kunden-und-lieferantendaten/?lang=en
Timestamp: 2019-09-17 03:32:38
Document Index: 615224616

Matched Legal Cases: ['Art. 13', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art. 20', 'Art. 77', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 4', 'Art. 27']

Information on the processing of customer - supplier data — SETAGO Pick2Light
Phoenix Mecano Komponenten AG takes the protection of your personal data very seriously. Your privacy is extremely important to us. We process your personal data in accordance with the applicable statutory data protection requirements and for the purposes described below. Personal data for the purposes of this privacy statement means any information relating to you as a person.
Below you will find information on how we handle this data. For the sake of clarity, we have divided this Privacy Statement into sections.
Telephone +41 52 742 75 00
Fax: +41 52 742 75 90
email address: datenschutz@phoenix-mecano.ch
You can also contact our Data Protection Officer if you have any questions or comments relating to data protection (e.g. regarding access to or updating your personal data),
email: datenschutz@phoenix-mecano.ch
2.1 Source used for data collection
We process personal data which we have collected directly from you.
As far as this is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g. credit agencies, address publishers). In addition, we process personal data which we have lawfully collected, received or acquired from publicly accessible sources (such as telephone directories, trade and association registers, civil registers, debtor registers, land registers, press, Internet and other media) and which we are permitted to process.
2.2 Origin and data categories of data which was not collected directly from you
As far as this is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties. In addition, we process personal data which we have lawfully collected, received or acquired from publicly accessible sources (press, Internet and other media) and which we are permitted to process. Relevant personal data categories may in particular include the following:
– Personal data (name, date of birth, place of birth, nationality, marital status, occupation/sector and comparable data)
– Contact data (address, email address, telephone number and comparable data)
– Payment/cover confirmation for bank and credit card customer history
– Data on your use of our offered telemedia (e.g. date and time of access to our web pages, apps or newsletters, clicks on our pages/links or postings and comparable data)
2.3 Purposes of and legal bases for data processing
We process personal data in accordance with the provisions of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (EU GDPR) as well as all other applicable laws.
If the EU GDPR applies to you, we hereby provide you with all information pursuant to Art. 13 EU GDPR.
The specific data processed in each case and the manner in which it is used depends primarily on the services requested and/or agreed upon. Please refer to the respective contract documents, forms, a declaration of consent and/or other information made available to you (e.g. in conjunction with the use of our website or in our terms and conditions) for further details or additions to the purposes of the data processing.
Purposes of fulfilling a contract or implementing pre-contractual measures (Art. 6 (1) (b) EU GDPR)
The processing of personal data is carried out for implementing our contracts with you and executing your orders, as well as for implementing measures and activities within the framework of pre-contractual relationships, e.g. with interested parties. These include in essence: contract-related communication with you, the corresponding billing and related payment transactions, the traceability of orders and other agreements as well as quality control by means of corresponding documentation, goodwill procedures, measures for controlling and optimising business processes as well as for fulfilling the general due diligence obligations, management and control by affiliated companies; statistical evaluations for corporate management, cost recording and controlling, reporting, as well as internal and external communication.
Emergency management, billing and fiscal evaluation of operational services, risk management, assertion of legal claims and defence in the event of legal disputes; guaranteeing IT security (including system and/or plausibility tests) and security in general, ensuring and exercising domiciliary rights (for example by means of access controls); ensuring the integrity, authenticity and availability of the data, prevention and investigation of criminal offences as well as monitoring by supervisory bodies or controlling authorities (e.g. audits).
Purposes within the framework of a legitimate interest on our part or of third parties (Art. 6 (1) (f) EU GDPR)
In addition to the actual fulfilment of the contract or the preliminary contract, we may process your data, where necessary, for protecting our legitimate interests or those of third parties, in particular for the purposes of
• Advertising or market and opinion research, provided that you have not objected to the use of your data;
• Verifying and optimising procedures for requirement analysis;
• Further developing services and products as well as existing systems and processes;
• Enriching our data, including using or researching publicly accessible data;
• Statistical evaluations or market analysis; benchmarking;
• Asserting legal claims and defence in the event of legal disputes which are not
• directly attributable to the contractual relationship;
• Restricted storage of the data if erasure is not possible due to the special type of storage or is possible only at a disproportionately high expense due to the special type of storage;
• Developing scoring systems or automated decision-making processes;
• Preventing and investigating criminal offences, unless these are exclusively to fulfil legal requirements;
• Building and plant security (for example through access controls) if this exceeds the general duties of care;
• Preserving and maintaining certifications under private law or of official nature;
• Ensuring and exercising domiciliary rights by means of corresponding measures (such as video surveillance) as well as preserving evidence in the event of criminal offences and their prevention.
Purposes on the basis of your consent (Art. 6 (1) (a) EU GDPR)
Your personal data can also be processed for specific purposes (e.g. the use of your email address for marketing purposes) with your consent. You can usually withdraw this consent at any time. You will be informed separately about the purposes and about the consequences of a withdrawal or refusal of consent in the respective text of the declaration of consent. As a general principle, withdrawing consent only has future effect. Any processing of data which took place before consent was withdrawn is not affected by this and remains lawful.
Purposes for fulfilling legal requirements (Art. 6 (1) (c) of the EU GDPR or in the public interest (Art. 6 (1)(e) of the GDPR)
As is the case with all parties involved in economic activities, we are subject to a number of legal obligations. These are primarily legal requirements (such as trade and tax legislation), as well as supervisory or other official regulations. The purposes of the processing include the fulfilment of fiscal monitoring and reporting obligations as well as archiving of data for purposes of data protection and data security and inspection by tax and other authorities. Furthermore, the disclosure of personal data may be required in the context of official/judicial measures for the purposes of evidence collection, prosecution or the enforcement of claims under civil law.
You only need to provide the information required for entering into and conducting a business relationship or a pre-contractual relationship with us or information which we are obliged to collect by law. As a rule, we are unable to conclude or execute the contract without this data. This may also apply to data required later in the business relationship. If we request additional data from you, reference will be made to the voluntary nature of the information.
2.4 Consequences of the failure to provide data
In the context of the business relationship, you must provide the personal data required for establishing, conducting and ending the legal transaction and complying with the thereby associated contractual obligations as well as data which we are legally required to collect. We will not be able to conduct the legal transaction with you in the absence of this data.
Within our company, your data will be received by the internal departments or organisational units which require it to fulfil our contractual and statutory obligations or in the context of processing and implementing our legitimate interest.
The data will only be forwarded to external agencies
• for the purpose of fulfilling legal requirements, according to which we are obliged to provide information, notification or the disclosure of data, or pass on data in the public interest (see Section 2.4);
if external service providers process data on our behalf as order data processors or acquirers of functions (e.g. computer centres, support/maintenance of EDP/IT applications, archiving, voucher processing, call-centre services, compliance services, controlling, data validation or plausibility checking, data destruction, purchasing/procurement, customer administration, letter shops, marketing, media technology, research, risk controlling, settlement, telephony, website management, audit services, financial institutions, printing companies or data disposal companies, courier services, logistics);
• on the basis of our legitimate interest or the legitimate interest of the third party in the context of the purposes mentioned (e.g. to authorities, credit bureaus, debt collection agencies, lawyers, courts, experts, subsidiaries, committees and controlling authorities);
• if you have given us your consent for transmission to third parties.
We will not forward your data to third parties other than for these purposes. If we commission service providers as part of order processing, your data will be subject to the same security standards there as those which apply to us. In all other cases, the recipients may use the data only for the purposes for which it was transmitted to them.
2.6 Recipients of the data outside Switzerland
Data is transferred to agencies in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries).
2.7 Retention periods
We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the performance of a contract.
Furthermore, we are subject to various statutory retention and documentation obligations. The retention and documentation periods specified therein extend up to 15 years. In addition, it may be necessary to retain personal data for the time during which claims can be asserted against us (statutory limitation period).
Specific legal requirements may also require a longer storage period.
If data is no longer required for fulfilling contractual or statutory rights and obligations, it will be erased on a regular basis, unless temporary further processing of the data is necessary to fulfil the purposes arising from an overriding legitimate interest. Such an overriding legitimate interest also exists for instance, if erasure is not possible or is possible only at a disproportionately high expense due to the special type of storage and if processing of the data for other purposes is excluded by means of appropriate technical and organisational measures.
You can assert your data protection rights against us under certain conditions.
• For example, you have the right to receive information from us concerning your data stored by us pursuant to the provisions of Art. 15 EU GDPR.
• At your request, we will correct the stored data relating to you pursuant to Art. 16 EU GDPR if it is inapplicable or incorrect.
• If you wish, we will erase your data in accordance with the principles of Art. 17 EU GDPR, provided that this does not conflict with other statutory regulations or an overriding legitimate interest on our part (e.g. for defending our rights and claims).
• Taking into account the prerequisites of Art. 18 EU GDPR, you can ask us to restrict the processing of your data.
• Furthermore, you can object to the processing of your data pursuant to Art. 21 EU GDPR on the basis of which we must discontinue the processing of your data. However, this right to object only applies in the event of very special circumstances concerning your personal situation, whereby rights of our company may conflict with your right to object.
• You also have the right to obtain your data subject to the prerequisites of Art. 20 EU GDPR in a structured, common and machine-readable format or to transmit it to a third party.
• In addition, you have the right to withdraw the consent granted to us for the processing of personal data at any time with future effect (cf. Section 2.3).
• Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 EU GDPR). However, we recommend that you always address a complaint to our Data Protection Officer first.
• If possible, your requests to exercise your rights should be made in writing or by email to the address stated above or sent directly in writing or by email to our Data Protection Officer.
Specific reference to your right to object pursuant to Art. 21 GDPR
You have the right at any time to object to the processing of your data which is carried out on the basis of Art. 6 (1) (f) EU GDPR (data processing on the basis of the balancing of interests) or Art. 6 (1) (e) GDPR (data processing in the public interest), if there are reasons for this which arise from your particular situation.
This also applies to profiling based on this provision within the meaning of Art. 4 (4) EU GDPR. If you object, we will no longer process your personal data unless we can prove that there are compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
We may also process your personal data for the purposes of direct advertising. If you do not wish to receive any advertising, you have the right to object to this at any time; this also applies to profiling provided that it is associated with such direct advertising. We will comply with this objection for the future. We will no longer process your data for direct advertising purposes if you object to processing for these purposes.
Objections can be made informally and should preferably be addressed to:
You also have the option of submitting a complaint to the Data Protection Officer stated above or to a data protection supervisory authority.
We have also appointed an EU representative pursuant to Art. 27 (1) GDPR. The representative can be reached under the following contact data:
Telephone: +49 571 5041-114
email: Imort@Ifina.de