In order to comply with our statutory obligations relating to data protection, we would like to provide you with the information required pursuant to Article 13 of the European data protection-regulation (GDPR): Who is responsible for data processing? Responsible for processing your personal data is: HANNING & KAHL GmbH & Co KG
Rudolf-Diesel-Straße 6
33813 Oerlinghausen If you have any questions or wish to contact our data protection officer, Mr Wolfgang Winter is the person to contact: Wolfgang Winter
Bekscher Berg 16
33100 Paderborn
Tel. 05252 – 93 46 93
email@data protection -winter.de From whom does the company receive your data? We process personal data which we receive from you within the framework of our business relationship. Where necessary for provision of a service / contract performance with you, we also process personal data which we have legitimately received from third parties (e.g. the SCHUFA [German general credit protection agency], credit agencies) for example for execution of orders, for performance of contracts or on account of consent granted by you. In addition, we process personal data which we have legitimately gained from accessible sources (e.g. trade and association registries, press, media) and which we are allowed to process. Which of your personal data do we process? For what purposes? If we have received data from you, we will only process it for the purposes for which we have received or acquired it. Data may only be processed for other purposes if there are legal requirements to do so pursuant to Art. 6 para. 4 GDPR. We will of course heed possible information obligations of the type pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR. On which legal basis does this take place? Where there are no specific legal stipulations, the legal basis for the processing of personal data is Art. 6 GDPR where the following possibilities are listed:
- Consent (Art. 6 para. 1 lit. a) GDPR)
- Data processing for performance of contracts (Art. 6 para. 1 lit. b) GDPR
- Data processing on the basis of consideration of interests (Art. 6 para. 1 lit. f) GDPR)
- Data processing for compliance with a legal obligation (Art. 6 para. 1 lit. c) GDPR)
If personal data is processed based on consent from you, you have the right to withdraw consent from us at all times with future effect. If we process data on the basis of consideration of interests, you, as the person concerned, have the right to object to processing of personal data bearing in mind the stipulations of Art. 21 GDPR. How long is the data stored? We process the data as long as this is necessary for the respective purpose. Where statutory storage obligations exist – e.g. in tax law or in relation to health data – the personal data concerned is stored for the duration of the storage obligation. Following expiry of the storage obligation, we check whether there is a further necessity for processing and delete the data if no further necessity exists. You may of course request information on the data we have stored on your person at all times (see below) and you may request deletion of the data or restriction of processing if there no longer is a need for processing. Whom is the data disclosed to? Your personal data is only disclosed to third parties if this is necessary for performance of contracts with you, if disclosure based on consideration of interests as defined by Art. 6 para. 1 lit. f) GDPR is permissible, if we are legally obliged to disclosure or if you have granted consent to do so. Where necessary, external service providers shall be integrated as order processors in compliance with data protection regulations (Art. 28 GDPR). Where is the data processed? We exclusively process your personal data in the Federal Republic of Germany. The personal data which you provide is not transferred to a third country or an international organisation, nor is this planned. Your rights as “person concerned” You have the right to information about the personal data on your person which we process. If you submit a written request for information, we trust you appreciate that we shall require verification from you which proves that you are the person who you claim to be. Furthermore, you have the right to correction, deletion or to restriction of processing, to the extent that you are legally entitled to do so. You also have a right of objection to the processing within the scope of statutory requirements. The same applies to a right of data transfer. In particular, you have a right of objection pursuant to Art. 21 para. 1 and 2 GDPR to the processing of your data in connection with direct marketing when this takes place on the basis of consideration of interests. Right to complain You have the right to complain to a regulatory body about the processing of personal data by us. If you are of the opinion that the processing of your personal data does not comply with data protection legislation, we kindly ask you to contact our data protection officer.