Obligation to provide information according to Art. 13 GDPR
Controller for data processing in accordance with Art. 13 (1) lit. a GDPR.
Company name according to Art. 17 (1) German Commercial Code (Handelsgesetzbuch, HGB) plus contact data of the controller:
Wilhelm Schäfer GmbH
Lise-Meitner-Straße 2
D-64646 Heppenheim
Telefon: +49 (0) 6 252 93 81-0
Faks: +49 (0) 6 252 93 81-19
E-mail : info@wschaefer.de
Managing Director: Franz Beckmann
Register of Companies: HRB 101848, Local court Darmstadt
VAT ID No. DE111668964
Contact details of the data protection officer according to Art. 13 (1) lit. b GDPR.
Helbig Datenschutz GmbH
Michaela Helbig
Bergstraße 11
91207 Lauf an der Pegnitz
Tel.: +49 (0) 9 12 37 02 75-10
E-Mail: michaela.helbig@helbig-datenschutz.de
Purpose and legal basis for data processing according to Art. 13 (1) lit. c GDPR
Personal data are processed for the purpose of contract performance or implementation of pre-contractual measures. Personal data include customer master data including the names of contact persons, contact history, quotations, orders, invoices, project data and other legal obligations of the controller.
The legal basis is defined in Art 6 GDPR. Other significant legal bases result from the German Commercial Code, tax legislation, the German law on limited liability companies (GmbH-Gesetz) and other legal requirements relevant for Wilhelm Schäfer GmbH. This also includes contractual regulations. The legal basis for the processing of newsletters is the consent of the data subjects.
Processing is to maintain the legitimate interest of the controller or a third party according to Art. 13 (1) lit. d GDPR.
We process your personal data beyond the extent required to fulfil our obligations under the contract where this is necessary to pursue our legitimate interests or the legitimate interests of third parties.
These interests include, but are not limited to:
- Sales management and controlling
- Assertion of legal claims and defence in legal disputes
- Guaranteeing of IT security and IT operationMeasures for the control and continual improvement of business
Categories of recipients of personal data (data transmission) according to Art. 13 (1) lit. e GDPR
Within Germany, the European Union and the European Economic Area:
Auditors, bailiffs and other creditors and other public agencies for the purpose of compliance with legal requirements and for requested confirmations, logistics companies, customers, suppliers and other bodies and business partners.
Third country, including adequacy decision according to Art. 13 (1) lit. f GDPR
Within the scope of international business relations, personal data are transferred according to Art. 6 (1) lit. f GDPR for performance of contracts or implementation of pre-contractual measures. No adequacy decision is required for such transfer.
Storage period according to Art. 13 (2) lit. a
The respective purposes follow from the legal requirements and relevant industry-specific regulations. Personal data will be erased once the purpose has been achieved.
Rights of data subjects according to Art. 13 (2) lit. b
You can exercise your rights at any time using the above contact details. If we process your personal data, you are a data subject as defined in the GDPR. In this case, you have the following rights against the controller.
Information about the rights of data subjects
Data subjects have the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed; where this is the case, the data subject has the right of access to the personal data and the individual information listed in Art. 15 GDPR.
Data subjects have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them and, where applicable, to have incomplete personal data completed (Art. 16 GDPR).
In the presence of one of the reasons listed in Art. 17 GDPR, such as if the personal data are no longer necessary in relation to the purposes pursued, data subjects have the right to demand from the controller the erasure of personal data concerning them without undue delay (right to be forgotten).
Data subjects have the right to obtain from the controller restriction of processing where one of the criteria listed in Art. 18 GDPR applies, e.g. where the data subject has objected to processing pending verification by the controller.
Data subjects have the right to object, on grounds relating to their particular situations, at any time to the processing of their personal data. In this case, the controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or unless processing is performed for the establishment, exercise or defence of legal claims (Art. 21 GDPR).
Rights of data subjects according to Art. 13 (2) lit. c GDPR
In as far as you have consented to the processing of personal data for specific purposes (e.g. the processing of images), the lawfulness of data processing is ensured on the basis of your consent.
You can withdraw your consent at any time. This also applies to the withdrawal of consent provided to us before 25 May 2018, i.e. before applicability of the GDPR.
Please note that such withdrawal will only affect processing in the future. It does not affect data processing that took place before the withdrawal of your consent.
Right to lodge a complaint with a supervisory authority Art. 13 (2) lit. d GDPR
Irrespective of any other remedies under administrative law or judicial appeals, all data subjects shall be entitled to lodge a complaint with a supervisory authority if they consider that the processing of their personal data is in violation of the GDPR (Art. 77 GDPR). Data subjects can lodge their complaints with a supervisory authority in the Member State of their place of residence, their workplace or the place of the alleged violation.
The competent supervisory authority in the German state of Hessen is:
The State Officer of Data Protection and Freedom of Information (Landesbeauftragte für den Datenschutz und die Informationsfreiheit)
Prof. Dr. Alexander Roßnagel
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Tel.: 0611-1408-0
Fax: 0611-1408-611
E-Mail: poststelle@datenschutz.hessen.de
Provision of personal data according to Art. 13 (2) lit. e GDPR.
When using our offers, you need to provide the personal data necessary for our business relations (contract) or pre-contractual measures or the personal data that we are legally required to collect. Without these data we will generally not be able to establish business relations.
Amendment of this data privacy statement
Change of purpose
We reserve the right to change this Privacy Statement in compliance with the regulations of data-protection law. The applicable current version can be found on our website at: https://www.wschaefer.de/en/privacy-statement/.
You can also request this Privacy Statement at any time using the above contact details. Should we plan to process your data for purposes other than those for which they were collected, we will inform you in advance and in compliance with the legal regulations.
As at: 16 May 2019
