Data protection information

Data protection information for suppliers and service providers pursuant to Art.13, 14 and 21 of the General Data Protection Regulation GDPR

Data protection is of high priority for us. Below, please learn how we process your data and which rights you have.

1. Who is responsible for processing your data, and who can you contact?

ZWT Zisterer GmbH + Co.KG
Eschenwasen 14
78549 Spaichingen

Managing Director: Ms Bettina Bernhard

Email: datenschutz@zwt-zisterer.de

2. Purposes of data processing, and legal basis

Your personal data is processed pursuant to the regulations of the General Data Protection Regulation (GDPR), the German Data Protection Act BDSG and other relevant data privacy regulations. Processing and use of the individual data depends on the service which has been agreed or applied for. To see further details on the purposes of data processing, please refer to our contract documents, forms, declarations of consent and the other information made available to you, for example on our website.

2.1 Consent (Art. 6 sub-para. 1 lit. a DSGVO)

If you have given us your consent to processing your personal data, this consent is the legal basis for our processing of your data. You can revoke your consent at any time with effect for the future.

2.2 Performance of a contract (Art. 6 sub-para. 1 lit. b DSGVO)

We process your personal data to execute our contracts with you, in particular in the frame of the provision of our order handling and use of your services. Furthermore, your personal data is processed for the purpose of execution of measures and activities in the frame of pre-contractual relationships.

2.3 Compliance with legal obligations (Art. 6 sub-para. 1 c GDPR)

We process your personal data if this is required to comply with our legal obligations (e.g. trade and tax law). Furthermore, we process your data, if applicable, for compliance with control and reporting obligations under tax law and for archiving data for data protection and security purposes, and for the inspection by tax and other authorities. Furthermore, the disclosure of personal data may become necessary in the frame of statutory/court measures for purposes of taking evidence, criminal prosecution, or assertion of civil-law claims.

2.4 Legitimate interest pursued by us or third parties (Art. 6 sub-para. 1 f GDPR)

We can furthermore use your personal data, based on weighing of interests, to safeguard the legitimate interests pursued by us or third parties. We will do this for the following purposes:

  • Advertising or market research, unless you objected to this use of your data;
  • Procurement of information and data exchange with inquiry agencies, if the risks involved in concluding the contract without security are unacceptable to us;
  • The restricted storage of your data if, due to the special type of storage, deletion is not possible or would require disproportionate efforts;
  • The assertion of legal claims and defense in legal disputes which are not directly associated with the contractual relationship;
  • Securing and exercise of our domestic rights by respective measures (e.g. video surveillance).

3. Categories of personal data processed by us

The following data is processed:

  • Personal data (name, date of birth, place of birth, nationality, occupation/industry, and similar data)
  • Contact details (address, email address, phone number and similar data)
  • Information on the financial situation (credit rating data, i.e. data for assessing the economic risk)
  • Supplier history

Furthermore, we process personal data from public sources (e.g. Internet, media, press, commercial and association registers, register of residents).

If required for the provision of our services, we process data lawfully received from third parties (e.g. list brokers, information bureaus).

4. Who will receive your data?

Within our company, we transfer your personal data to those departments which require it for complying with our contractual and statutory obligations or for implementing our legitimate interest.

Furthermore, the following parties may receive your data:

  • processors assigned by us (Art. 28 GDPR), service providers for supporting activities, and other controllers in the sense of the GDPR, particularly in the following areas: IT services, logistics, courier services, printing services, external computer centers, support/maintenance of IT applications, archiving, document processing, accounting and controlling, data destruction, purchasing/procurement, customer management, letter shops, marketing, telecommunications, website management, tax consulting, public accountant services, banking institutes • public authorities and institutions in the presence of a legal or statutory obligation which commits us to inform about, report or disclose information, or if the disclosure of data is in the public interest;
  • agencies and institutions by reason of the legitimate interest of us or the third party (e.g. Disclosure to authorities, information bureaus, debt collection agencies, lawyers, courts, experts, and supervisory authorities;
  • other agencies to which we are allowed to transfer your data based on your permission.

5. Transfer of your data to a foreign country or an international organization

Your data will not be processed outside of the EU or the EEA.

6. How long do we store your data?

If necessary, we process your personal data for the duration of our business relationship including the phase-in and phase-out periods of a contract.

Also, we are subject to various record retention and documentation obligations based on the German Commercial Code (HGB) and the German Tax Code (AO). The periods specified there for retention and/or documentation amount to up to ten years beyond the end of the business relationship or of the pre-contractual legal relationship.

Ultimately, the period of retention is also governed by the limitation periods which may for example be three years pursuant to Sections 195 ff. of the German Civil Code (BGB) but in certain cases also up to thirty years.

7. Do we use automated individual decision-making (including profiling)?

We do not use purely automated decision-making processes pursuant to Art. 22 GDPR. Should we use these processes in isolated cases, we will inform you specifically if required by law.

8. Your data protection rights

You have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, and the right to data portability pursuant to Art. 20 GDPR. Furthermore, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Pursuant to Article 21 GDPR, you generally have the right to object to the processing of your personal data by us. This right to object, however, only applies in the presence of particular grounds relating to your personal situation, and our company’s rights may possibly be in conflict with your right to object. If you wish to assert one of these rights, please contact the data protection controller of our company (see 1.).

9. Scope of your obligation to disclose your data to us

You only need to provide that data required for the initiation and conduct of a business relationship or a pre-contractual relationship with us or which we are legally obliged to collect. As a rule, we will be unable to conclude a contract with you without this data. This also applies to data, if any, which we may require at a later stage in our business relationship. Should we ask you for data beyond this scope, we will specifically point out that disclosure of this data is voluntary.

10. Information on your right to object pursuant to Art. 21 GDPR

You have the right to object at any time to the processing of your data carried out based on Art. 6 sub-para. 1 f GDPR (data processing based on weighing of interests) or Art. 6 sub-para. 1 e GDPR (data processing in the public interest) if there are reasons for this arising from your particular situation. This also applies to profiling in the sense of Art. 4 no. 4 GDPR based on this regulation.

If you file an objection, we will stop processing your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

The objection can be sent informally to the address listed under point 1.

11. Your right to lodge a complaint with the responsible supervisory authority

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Königstrasse 10 a
70173 Stuttgart

Výrobní program