Data protection information on processing

Information on the processing and processing of personal data acc. Art 13 GDPR in connection with the transparency requirement acc. Art. 12ff GDPR

Intended use
Our company processes and processes personal data for the purpose of entering into and fulfilling business relationships. All data categories for the fulfillment of pre-contractual and contractual obligations are affected.

Lawfulness of data processing
The collection, processing and use of personal data takes place within the scope of the legally permissible acc. Art. 5,6 and 9 GDPR. If personal data is collected from the data subject, the data subject is acc. Art 13 GDPR the right to transparent information. The same applies according to Art 14 GDPR if the data is not collected from the person concerned. Basically, only such information is processed and used that is necessary for operational tasks and that is directly related to the processing purpose. The special requirements for the collection, processing and use of special categories of personal data in accordance with Art. 9 GDPR and § 22 BDSG are observed. The processing and processing of sensitive data is according to GDPR only permitted under the principle of permission or upon presentation of a legal basis.

Disclosure of data to third parties
Personal data will only be passed on to third parties if this is necessary to fulfill the business purpose. Personal data will not be passed on to third parties in third countries with an unclear level of data protection (usually countries outside the EU) that are not involved in the business purpose, or only if the data subject has given their consent.

The rights of those affected
According to Art. 15 ff GDPR, data subjects have the right to information, correction, deletion, restriction and objection to the processing and processing of their data.

The right to withdraw
Affected have Art. 13 para. 2 point c GDPR the right to withdraw consent to the processing and processing of personal data for the future if the processing is based on Art. 6 para. 1 a or Art. 9 para. 2 a GDPR. This does not affect the lawfulness of processing based on consent before its withdrawal.
However, a revocation and the non-provision of the required data generally means that the purpose for which the data was or should be collected cannot be fulfilled. Written form is required to exercise rights. Please contact us by email at datenschutz@heliatek.com.

Deletion of personal data
Personal data will be deleted if the purpose for storage no longer applies and no legal norm (e.g. regarding the legal retention period) prescribes the retention of the data. The requirements of Art. 17 GDPR in connection with § 35 BDSG apply. If the deletion is not possible due to legal, contractual or commercial or tax law reasons, the processing of the data can be restricted at the request of the person concerned. Written form is required to exercise the right.

The right of data subjects to data portability
Our company has the right to data portability according to Art. 20 GDPR safe. Everyone concerned has the right to receive a copy of their pb-data in a standard machine-readable file format.

Right of appeal
Every data subject has the right to lodge a complaint with the supervisory authority of the country in accordance with Art. 77 GDPR. The State Data Protection Officer can be reached at e-mail: saechsdsb@slt.sachsen.de.

Responsible in the sense of the GDPR and the BDSG
Heliatek GmbH in Dresden

Data protection officer of the company

Hermann J. Janz, Janz Consulting Dresden
jc@jcdatenschutz.de