Privacy statement and information on data processing
Compliance with the obligation to inform pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR)
_________________________
See also: Information on the processing of your personal data that we have obtained via our homepage
_________________________
Information on the processing of your personal data that we have obtained by means other than via our homepage
Such contact information includes, for example:
- contact details from your business card that you have given a member of staff of our company,
- contact details that we have obtained through contact with you by letter, telephone or email,
- contact details with your name that we have obtained from your company by virtue of an existing contractual relationship (e.g., from a sale, purchase, your superior or one of your colleagues),
- contact details with your name that we have obtained from your employer’s internet home page,
- other means of passing on contact details are possible, for example, just a simple note on a piece of paper during a meeting or trade fair or the list of participants in a seminar.
Identity of the responsible party (controller):
See imprint/masthead https://wus-online.de/Impressum
Contact details of data protection officer
Please refer to the data protection/privacy statement on our website
https://wus-online.de/Datenschutzerklärung
Intended purpose and legal basis of processing personal contact data:
- In the case of an existing contractual relationship: the implementation and execution of this contractual relationship. If there are already other contacts and your contact details are being supplemented, this is done to improve or optimise communication in the business relationship regarding the current contract.
- The existing contract or other business relationship is the basis for permission to process personal data that is necessary, appropriate and expedient for the performance of such contract/business relationship.
- If there is no contractual relationship: for the purposes of initiating and establishing a business relationship and possibly a contractual relationship.
- In the latter case, the authorisation basis is the legitimate interest of the responsible person/office (controller) for the initiation of new business relations. When weighing up the rights of the parties concerned (data subjects), it may be determined that the possible interests of the persons concerned in order to maintain the confidentiality of their contact data do not prevail, for if that were the case, then we assume that we would not have received the contact details from you or your employer.
Intended transfer of data and planned or possible receivers of personal contact information:
- In the case of existing and justified requirements, we will pass on contact data only to other areas within the corporate group that may claim a legitimate interest to contact you.
- The companies within the group that are eligible are Beuth GmbH and Wilhelm Ungeheuer Befestigungssysteme GmbH.
- Your contact data will not be passed on to countries outside the EU ("non-member states").
Exceptions:
Should exceptions to these statements be necessitated by legal or regulatory requirements, we would, as far as the legally permissible in each case, contact you before,passing on contact data to comply with a demand so made of us.
When we use address details that we have obtained ourselves for advertising/promotional purposes:
- We will use your personal contact details only if your name has been disclosed for contact purposes on the internet homepage or a promotional posting/another medium of your company.
- If your contact details/email address has previously been used for a promotional pitch.
- If your email address has been given on the internet homepage or in another of the aforementioned mediums for contact purposes, we will presume that we may contact you by email too, also for direct marketing/promotional purposes.
- In using an address from company presentations without any contact names, we will address the company without using a name, i.e., a s a “legal entity” with no personal reference.
Duration of recording/storing of personal contact details:
- In the case of an existing business relationship (contractual relationship or quasi-contract relationship), we will store your personal data for at least the duration of the existing contractual relationship or until your name as contact person in this matter has been replaced by your company with the name of another person, who then assumes your role.
- If, after the conclusion of the business relationship, documents such as offers, individual agreements for the execution of orders and invoices are pursuant to the German Commercial Code and the Tax Code to be kept for 6 or 10 years, then these retention periods for the complete documentation, even including any names that may be still be mentioned in them, are binding. After these retention periods, this data will be deleted and paper documents destroyed in compliance with data-protection regulations.
Contacts in the email directories of our staff:
- In addition to being stored in the internal electronic directories of the contacts of our business partners, your contact details can also be held in the email directories and similar personal directories of our employees. With the technology available today, these are not subject to any deletion monitoring and are not always sorted by company (and so cannot be deleted as a batch).
- We instruct our employees that they should also be aware of the deletion of a company's contacts in their personal directories when a business relationship has ceased.
- Because of the generally known uncertainty of this approach with the available technology for personal contact directories, we would also like to ask you for your assistance, that upon termination of the business relationship or termination of your responsibility as contact person for us to write to the existing contacts in our company and request the deletion of your contact data in all personal directories (email directories and similar on PCs and on smartphones).
Your rights as a data subject1:
- You have the right to know what information we store about you.
- In case of mistakes in your name or changes of address, you have the right to require these to be corrected.
- You have the right to object to your personal contact data being used for the purposes of advertising/promotional pitches/direct marketing by us or other firms in our corporate group.
- The right of objection does not apply to communication that is necessary as part of an existing business relationship and as long as you are a contact person for us in your company.
- You have the right to require the deletion or blocking of data if the business relationship no longer exists and there are no longer any legal retention obligations (as indicated above) or if your function has contact person for our business relationship has been taken over by another person in your company.
Revocability of consent:
If our use of your personal contact data for the purposes of promotional pitches/advertising Is predicated on the legal basis of your consent, you have the right to revoke this consent for all future such use. Such revocation has no effect on actions already set in motion, but only for future actions by all companies in our corporate group.
The right to lodge a complaint with a supervisory authority:
Should you, despite all our efforts to provide good information and confidential treatment of all your personal data, want to complain to the data protection supervisory authority, then you are perfectly entitled to do so, and you can contact your competent data protection supervisory authority directly. You will find the addresses of the state data protection supervisory authorities here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Obligation to provide personal contact details:
So long as you are designated by your employer as contact person for us, you are contractually obliged to notify us of your contact details and any change to this information. Failure to comply can result in the non-executability of the contractual services in the contractual relationship with your employer's company.
Automated decision making:
There is no automated decision making pursuant to Art. 22 GDPR or other profiling measures according to Art. 4 (4) GDPR.
1 Art. 4(1) GDPR: “personal data” means any information relating to an identified or identifiable natural person (“data subject”)