Information on the processing and processing of personal data acc. Art 13 GDPR in connection with the transparency requirement acc. Art. 12ff GDPR
Our company processes personal data for the purpose of establishing and fulfilling business relationships in accordance with orders. All categories of data for the fulfillment of pre-contractual and contractual obligations are affected. Personal data is only passed on to third parties if this is necessary for the fulfillment of the business purpose. A transfer of personal data to third parties, including in third countries with an unclear level of data protection (usually countries outside the EU), which are not involved in the business purpose, does not take place or only takes place if the consent of the person concerned has been obtained.
Lawfulness of data processing
The collection, processing and use of personal data takes place within the scope of the legally permissible acc. Art. 5,6 and 9 GDPR. If personal data is collected from the data subject, the data subject is acc. Art 13 GDPR the right to transparent information. The same applies according to Art 14 GDPR if the data is not collected from the person concerned. Basically, only such information is processed and used that is necessary for operational tasks and that is directly related to the processing purpose. The special requirements for the collection, processing and use of special categories of personal data in accordance with Art. 9 GDPR and § 22 BDSG are observed. The processing and processing of sensitive data is according to GDPR only permitted under the principle of permission or upon presentation of a legal basis.
Disclosure of data to third parties
Personal data will only be passed on to third parties if this is necessary to fulfill the business purpose. Personal data will not be passed on to third parties in third countries with an unclear level of data protection (usually countries outside the EU) that are not involved in the business purpose, or only if the data subject has given their consent.
The rights of those affected
According to Art. 15 ff GDPR, data subjects have the right to information, correction, deletion, restriction and objection to the processing and processing of their data.
The right to withdraw
Affected have Art. 13 para. 2 point c GDPR the right to withdraw consent to the processing and processing of personal data for the future if the processing is based on Art. 6 para. 1 a or Art. 9 para. 2 a GDPR. This does not affect the lawfulness of processing based on consent before its withdrawal.
However, a revocation and the non-provision of the required data generally means that the purpose for which the data was or should be collected cannot be fulfilled. Written form is required to exercise rights. Please contact us by email at firstname.lastname@example.org.
Deletion of personal data
Personal data will be deleted if the purpose for storage no longer applies and no legal norm (e.g. regarding the legal retention period) prescribes the retention of the data. The requirements of Art. 17 GDPR in connection with § 35 BDSG apply. If the deletion is not possible due to legal, contractual or commercial or tax law reasons, the processing of the data can be restricted at the request of the person concerned. Written form is required to exercise the right.
The right of data subjects to data portability
Our company has the right to data portability according to Art. 20 GDPR safe. Everyone concerned has the right to receive a copy of their pb-data in a standard machine-readable file format.
Right of appeal
Every data subject has the right to lodge a complaint with the supervisory authority of the country in accordance with Art. 77 GDPR. The State Data Protection Officer can be reached at e-mail: email@example.com.
Responsible in the sense of the GDPR and the BDSG
Heliatek GmbH in Dresden
Data protection officer of the company
Hermann J. Janz, Janz Consulting Dresden