Datenschutz

 

 

For customers, suppliers and those affected

With the following information we would like to give you an overview of how we process your personal data and your rights under data protection law. Which data is processed in detail and how it is used depends largely on the agreed services. Therefore, not all parts of this information will apply to you.

1. Who is responsible for data processing and who can I contact?

 

  • Responsible is:

Märkische Maschinenbau GmbH

represented by CEO Mario Görmer

Rudolf-Breitscheid-Str. 162
D-14482 Potsdam
Germany

 

  • The company's data protection officer is Mario Görmer

Tel. +49 (0) 3331 7046 505, Mail: dsb@mearkische-maschinenbau.com

2. Which sources and data do we use?

We process personal data that we receive from our customers, suppliers or other data subjects as part of our business relationship. In addition, in connection with our service provision activities, we process personal data that we obtain from publicly accessible sources or that are legitimately transmitted to us by other third parties.

Relevant personal data are personal details (name, address, email address, date and place of birth, nationality)

In addition, this can also include order data, data from the fulfillment of our contractual obligations, documentation data and other data comparable to the categories mentioned.

3. What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG)

1. To fulfill contractual obligations (Art. 6 Para. 1 b GDPR)

Data is processed to provide our services in the context of preparing offers, inquiries and fulfilling services for the customer. The purposes of data processing are primarily based on the specific offer or inquiry. In particular, data processing is carried out

  • to be able to identify our customers
  • to be able to make specific service offers
  • for correspondence with suppliers and customers
  • for order procurement and invoicing

2. As part of the balancing of interests (Art. 6 Para. 1 f GDPR)

If necessary, we process your data beyond the actual fulfillment of the contract to protect the legitimate interests of us or third parties. Examples:

  • Advertising as long as you have not objected to the use of your data
  • Asserting legal claims and defending yourself in legal disputes
  • Ensuring IT security and IT operations
  • Preventing and investigating criminal offenses
  • Measures for building and system security (e.g. access controls)
  • Measures to ensure house rules, measures for business management and further development of services and products, risk management in our company

3. Based on your consent (Art. 6 Para. 1 a GDPR)

If you have given us consent to process personal data for certain purposes, the legality of this processing is based on your consent. Consent can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. The revocation of consent only takes effect for the future and does not affect the legality of the data processed up to the time of revocation.

4. Due to legal requirements (Art. 6 Para. 1 c GDPR) or in the public interest (Art. 6 Para. 1 e GDPR)

In addition, as a company we are subject to various legal obligations, i.e. legal requirements (e.g. commercial laws, environmental regulations). The purposes of the processing include, among other things, the fulfillment of tax reporting obligations and the assessment and management of risks within our company.

4. Who get's my data?

Within our company, those departments that need your data to fulfill our contractual and legal obligations will have access to it.

Service providers and vicarious agents we employ may also receive data for these purposes. These are companies in the categories of IT services, logistics, telecommunications, debt collection, consulting, and sales and marketing.

We generally do not pass on information about our customers unless legal provisions require this and the customer has consented. Under these conditions, recipients of personal data can be, for example:

  • Public bodies and institutions,
  • service providers that we engage within the framework of order processing relationships.

 

5. Is data transferred to a third country or to an international organization?

Data will not be transferred to locations in countries outside the European Union (so-called third countries).

6. For how long is my data stored?

We process and store your personal data as long as this is necessary to fulfill our contractual and legal obligations, or as agreed with the customer (retention period at the end of the order - return)

The limited further processing of data is necessary for the following purposes:

  • Fulfillment of commercial and tax law retention obligations, which can arise, for example, from: Commercial Code (HGB), Tax Code (AO). The periods specified there for retention or documentation are usually six to ten years.
  • Preservation of evidence within the framework of the statutory limitation periods. According to Sections 195 ff of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

7. What data protection rights does the customer, supplier or data subject have?

You have the right:

  • to revoke your consent to us at any time in accordance with Art. 7 Paragraph 3 GDPR. This means that we may no longer continue the data processing based on this consent in the future;
  • to request information about your personal data processed by us in accordance with Art. 15 GDPR;
  • to request the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

to receive your personal data that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 GDPR or to request and use the data to transfer it to another responsible party.

8. Information about your right of objection under Article 21 GDPR

Right of objection in individual cases

You have the right to object at any time to the processing of personal data concerning you based on Article 6 paragraph 1 letter e GDPR (data processing on the basis of a balance of interests) for reasons arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of an objection

The objection can be made informally with the subject "Objection" stating your name, address and date of birth and should be addressed to:

Märkische Maschinenbau GmbH

Rudolf-Breitscheid-Str. 162
D-14482 Potsdam
Germany