Information obligations GDPR
Information sheet in accordance with Art. 13 of the General Data Protection Regulation
Principles
Personal data is all information relating to an identified or identifiable natural person, such as names, addresses, telephone numbers, e-mail addresses, contractual, booking or accounting data, which is an epression of a person's identity. We only process personal data if there is a legal basis for doing so.
Verantwortliche Stelle
The responsible party under the General Data Protection Regulation, other data protection laws valid in the member states of the European Union and other regulations relating to data protection is:
Glen Dimplex Deutschland GmbH
Management
Am Goldenen Feld 18
95326 Kulmbach
Data Protection Officer.
You can contact our data protection officer at
e-mail: datenschutz@glendimplex.de
Processing purposes and legal bases.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act, insofar as these are necessary for the establishment, execution and fulfilment of a contract and for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or execution of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 para. 1 b) GDPR.
If you give us your express consent to process personal data for specific purposes (e.g. transfer to third parties, evaluation for marketing purposes or advertising by e-mail), the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 a) GDPR. Any consent granted can be revoked at any time with effect for the future (see clause 9 of this data protection information). Where necessary and legally permissible, we process your data beyond the actual contractual purposes in order to fulfil legal obligations in accordance with Art. 6 para. 1 c) GDPR. In addition, processing may also be carried out to protect the legitimate interests of us or third parties and to defend and assert legal claims in accordance with Art. 6 para. 1 f) GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
Categories of personal data
We only process data that are connected with establishing the contract or the pre-contractual measures. This can be general data about your person or persons in your company (name, address, contact data, etc.) as well as any other data that you provide us with in connection with the establishment of the contract.
Sources of the data
We process personal data that we receive from you in the course of contacting you or establishing a contractual relationship or in the course of pre-contractual measures.
Recipient of the data
Within our company, we only pass on your personal data to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.
We may transfer your personal data to companies affiliated with us to the extent that this is permissible within the scope of the purposes and legal bases described above. Your personal data is processed on our behalf on the basis of commissioned processing contracts in accordance with Art. 28 GDPR. In these cases we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information.
Transfer to a third country
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organisation if this is necessary for the processing and thus the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent. In these cases, the recipients may include local agencies, airlines and hotels within the scope of ...
Duration of data storage
If necessary, we process and store your personal data for the duration of our business relationship or for the fulfilment of contractual purposes. This also includes the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code and the German Fiscal Code, among others. The periods of retention or documentation stipulated there are two to ten years. Finally, the duration of storage also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code, are usually three years, but in certain cases can be up to thirty years.
Rights of affected persons
Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restrict processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right of appeal to a data protection supervisory authority in accordance with Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right of revocation in case of consent and legitimate interests.
If you have consented to the processing of your personal data by means of a corresponding declaration, you can revoke this consent at any time for the future.
Insofar as the processing of your personal data is carried out in accordance with Art. 6 para. 1 f) GDPR in order to safeguard legitimate interests, you have the right, pursuant to Art. 21 GDPR, to object to the processing of such data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for processing worthy of protection. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims. In individual cases we process your personal data for the purpose of direct marketing. You have the right to object at any time to processing for the purpose of such advertising. If you object to processing for the purpose of direct marketing, we will not process your personal data further for these purposes. In order to protect your rights, you can contact us using the contact details given in clause 1.
Obligation to provide the data
The provision of personal data for the purpose of deciding on the conclusion of a contract, the fulfilment of the contract or the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the scope of contractual measures if you provide such personal data as is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.
Automated decision-making
As a matter of principle, we do not use a fully automated decision-making process in accordance with Art. 22 GDPR to establish, fulfil or implement the business relationship or for pre-contractual measures. Should we use these procedures in individual cases, we will inform you separately or obtain your consent, provided this is required by law.