Source: http://www.guidelines-executivecompensation.de/data-protection-statement.html
Timestamp: 2019-01-16 07:38:27
Document Index: 672154951

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6']

Data protection statement – Board Remuneration
(1) We are glad that you are visiting our website www.hkp.com and that you have shown an interest in our company and its range of services. The protection of personal data is very important to us. All web activity undertaken by hkp Deutschland GmbH is carried out in accordance with the applicable legislation governing the protection of personal data and data security, in particular the GDPR (EU General Data Protection Regulation). This data protection notice tells you about how the information that is collected during your visit to our website is handled. Personal data is any information that relates to you, such as name, postal address, e-mail addresses or user behaviour. For the sake of simplicity, the pronouns “he”, “him” and “his” are used below to refer to both male and female users.
(2) Details of the service provider and controller in the sense of data protection law are listed under the company details and contact details in our legal notice. Our address is also the contact address of the data protection officer appointed by us.
(3) When contact is established, your details, which are required for the processing of your query and for the purpose of any potential follow-up questions, will be saved for the duration of the statutory retention period (legal basis is Art. 6 (1) 1 c) GDPR and will then be erased in accordance with Point 4 (1) of this data protection statement.
(1) When you use our services that are subject to a charge and wish to place an order for something, it is necessary for you to provide your personal data to conclude the contract which are required to process your order. Fields that are compulsory for the execution of contracts are marked accordingly; additional fields are voluntary. The data you provide is used by us to process your order (legal basis is Art. 6 (1) 1 b) GDPR). The address, payment and order data are stored after the processing of the contract for the duration of the statutory retention obligations in particular under tax and commercial law (legal basis is Art. 6 (1) 1 c) GDPR) and are then erased, provided you have not consented to further storage or the further processing of the data is required for asserting, exercising or defending legal claims or promotional contact (see also Point 5 (1) of this data protection statement). We check the latter at the end of each third calendar year beginning with the calendar year following the initial storage.
(2). You have the option of whether you provide your data required for the order only once for this order or whether you would like to create a customer account in which your data will be stored for subsequent orders (legal basis is Art. 6 (1) 1 b) GDPR). When creating an account, the data provided by you will be revocably stored.
(3) In order to process your order, we will provide your data to our main bank and to logistics service providers and payment service providers selected by you (legal basis is Art. 6 (1) 1 b) GDPR). Our service providers are only permitted to process or use your data for the purpose for which it was necessary to transmit it to them. You may access the data at any time. Insofar as data is passed on to external service providers, we have put technical and organisational measures into place to ensure that data protection regulations are observed. We may also pass on your details for debt collection purposes (legal basis is Art. 6 (1) 1 f) GDPR).
(4) In order to prevent third parties from gaining unauthorised access to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.
(5). Where we are rendering services in advance, for instance if a customer is paying in instalments or buying on account, we may use a service provider to verify the identity and creditworthiness of the customer e.g. a credit agency (legal basis is Art. 6 (1) 1 f) GDPR. Furthermore, we do not exclude the possibility of using anonymised usage data for the purposes of market research.
(6) We advise you that, in individual cases and by order of the appropriate authorities, we are entitled to provide information about data, insofar is this is required for public prosecution purposes, to enable the police forces of the German federal states to prevent crimes, to fulfil the statutory tasks of the constitution protection authorities of the German federal government, the German federal states, the Federal Intelligence Services or Military Intelligence, or to enforce intellectual property rights (legal basis is Art. 6 (1) 1 c) GDPR).
(1) After the sale of a product or service, we reserve the right to send you advertising material via the e-mail address provided to us about our services in the area of “consulting with a focus on performance management, talent management and remuneration”. The same applies to the use of your address details for sending advertising by post about our own offers as well as recommendations of third-party products and services. The legal basis is Art. 6 (1) 1 f) and Recital 47 GDPR. It is possible to informally object to this advertising at any time (see Point 6 (1) of this statement.
(2) For subscriptions to our Newsletter, we use a double opt-in process, regardless of any order placed as described in paragraph (1). This means that after you have subscribed, we send a confirmation e-mail to that address, requesting confirmation from you that you wish to receive the Newsletter. If you do not confirm within 24 hours, your information will be locked and automatically deleted after one month. If you confirm that you wish to receive the Newsletter, we will save your e-mail address until such a time as you unsubscribe from the Newsletter. The data is only saved to enable us to send you the Newsletter (legal basis is Art. 6 (1) 1 a) GDPR). Furthermore, we save the IP addresses used and the times at which the registration and confirmation took place, in order to prove that you subscribed and, if necessary, to resolve any misuse of your personal data (legal basis is Art. 6 (1) 1 a) and c), Art. 7 (1) GDPR. This data will be erased provided there is no check at the end of the third calendar year, beginning with the calendar year following the initial storage, requiring a longer storage period.
(3) The only field that must be filled out in order to receive the Newsletter is an e-mail address. The provision of additional, accordingly marked information is voluntary and such data is used to personally address you. This data is also deleted in full when the storage duration determined in paragraph (2) has lapsed.
(4) You may revoke your consent to the sending of the Newsletter at any time and unsubscribe from the newsletter. It is possible to do this by clicking on the link that is provided in every Newsletter or by expressing this wish in a message sent to the contact details listed in our site’s legal notice.
9. Further information according to GDPR
(1) This data protection statement only applies to this website www.hkp.com. So that you can receive the best information possible, you will find links to third-party websites on our pages. Insofar as this is not clearly recognisable, we advise you that such links are external. This data protection statement does not apply to these other providers. If you leave this website, you are recommended to carefully read the privacy policy of each external website as a first step.
(2) hkp Deutschland GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Germany is the controller for processing your personal date. You can find further contact details in our website’s legal notice.
(3) We also transmit data to recipients in Switzerland (Section 1 (6) 1 Federal Data Protection Act [BDSG]) and to recipients in other third-party countries, provided there is an adequacy decision of the EU Commission. Otherwise, there is no intention to transmit your data to a recipient in a third-party country (not a Member State of the EU or EEA) or an international organisation. We refer to Point 9 and 10 of this data protection statement concerning the possibility of your data being accessed by third-party providers in the USA.
(4) You may request access from us to the stored data and you have the right to rectification of inaccurate data, to restriction of the processing and a right to erasure, insofar as there is no retention obligation opposing this. A right to erasure is not given if further processing is required for asserting, exercising or defending legal claims such as complying with an objection to advertising. With respect to the personal data affecting you, which you provided to us, for example in an input mask or a contact form, based on consent or to perform a contract existing between us, you have a right to data portability in a structured, conventional and machine-readable format.
(5) Insofar as the processing of your data is based on consent (legal basis is Art. 6 (1) 1 a) GDPR, you have the right to revoke the consent at any time without the legality of the processing carried out based on the consent up to the time of revocation being affected. Legal permissions remain unaffected by revocation of consent.
(6) We have appointed a data protection officer. The contact address is: Mr. Jörg Müller, hkp Deutschland GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Germany, datasecurity@hkp.com.
(7) You have a right to lodge a complaint with a data protection supervisory authority, for example with the Hesse Data Protection Officer, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, who is responsible for us.
Copyright © 2019 Board Remuneration