1. Purpose of data collection, -processing or –use

The main purpose is collection, processing and use of data on behalf of the fulfillment of customer orders. The secondary purpose is the supplier support as well as the interest care. Specifically these include: customer administration and acquisition, appointment management, contract processing, service processing, invoicing, goods purchase and payment transactions.

2. Legal basis for processing

The legal basis for the processing of personal data of our customers is Article 6 (1) (b) GDPR according to which processing for the performance of a contract with the person concerned is permitted.

3. Recipients or categories of recipients to whom the data is communicated

Basically we do not disclose personal data of our customers to third parties unless the disclosure is mandatory due to legal regulations or order fulfillment. In this case those affected will be informed if they are not already aware of it. GDPR Customer information for data processing May 2018

4. Data transmission to third countries

A transfer of data to countries outside the EU or EEA (third countries) is not planned.

5. Retention period of personal data

Basically we delete data when the purpose for which the data was collected has been omitted, e.g. upon termination of a contractual relationship provided that no statutory retention requirements preclude deletion. If deletion is not possible, e.g. data stored in an electronic archive system will be locked for further processing.
The retention period or deletion periods of customer data depends on the data type. A detailed list of the data categories and types of data processed by us can be found in an electronic list of processing activities in accordance with Art. 30 GDPR which we gladly provide to interested parties upon request.
Data which we need to assert exercise or defense of legal claims, we will not delete acc. to Article 17 3 (e) GDPR.

6. Right to information, authorization, deletion and limitation of processing

You have the right to receive information about your personal data stored by us at any time. Likewise, you have the right to rectification, blocking or apart from the prescribed data storage for business transactions, deletion of your personal data.
For a data lock to be taken into account at all times, these data must be stored in a lock file for control purposes. You can also request the deletion of the data as long as there is no statutory storage obligation. As far as such an obligation exists we lock your data on request.

7. Consent

You may make changes or revoke your consent by written notice to us with an effect on the future. GDPR Customer information for data processing May 2018

8. Provision of personal data

To fulfill the contract the client or the person concerned is obliged to provide personal data to the extent necessary for the fulfillment of the contract. It is the responsibility of the client to provide the employee or the responsible office only with data necessary for fulfillment of the contract (minimum principle).

9. Right of appeal to the supervisory authority

You have the right to call you EU data protection supervisory authority and to learn there about your rights under the General Data Protection Regulation (GDPR).