Data protection information in accordance with Art. 13 GDPR

Principles of data processing

As part of this business relationship, personal information about you is processed by the data controller and stored for the time necessary to fulfill the stated purposes and legal obligations.
In the following, we will inform you about which data we collect, the way in which it is processed and your rights in this context, in particular with regard to the General Data Protection Regulation (GDPR).

Who is responsible for the data processing?

In terms of data protection law, the entity responsible (“data controller”) is (depending on the contracting party):

rose plastic AG
Rupolzer Str. 53
88138 Hergensweiler
Germany

You will find more information about our company, including its authorized representatives and additional contact details, in the Legal Notices (Imprint) section of our website:
https://www.rose-plastic.de

What personal data about you do we process? And for what purpose?

We only process personal data that is necessary to fulfill the stated purposes and legal obligations. This may include the following types of data, if applicable:

Contact information such as salutation, first name, last name, address, email address, phone numbers
Other information such as access data, IP address or payment data

If we have received data from you, we will only process it for the purposes for which we received or collected it, e.g.,

to fulfill and execute the contract
for correspondence with you
to fulfill lawful and legal obligations
to protect legitimate interests
for the processing of any reciprocal transactions

Data processing for other purposes may only be considered if the legal requirements are met to the extent required pursuant to Article 6 (4) GDPR. In such cases, we will, of course, observe any information requirements pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

What is the legal basis for the processing?

In principle, the legal basis for the processing of personal data – to the extent that there are no additional specific legal provisions – is provided by Art. 6 GDPR. In particular, this provides for the following scope:

Consent (Art. 6 (1) (a) GDPR)
Data processing for the fulfillment of contracts (Art. 6 (1) (b) GDPR): Data processing is in particular required in order to ensure the completeness and accuracy of the data, its digitization and for the purpose of executing the contract.
Data processing on the basis of a balance of interests (Art. 6 (1) (f) GDPR): The data processing is required in particular to ensure informed decisions can be made and optimized by the parties in your interest, and to enable the data controller to guarantee consistent and high quality advice for customers.
Data processing for the fulfillment of a legal obligation (Art. 6 (1) (c) GDPR): The data processing is required in particular to ensure the completeness and correctness of tax data in accordance with the tax code, trading regulations and the Commercial Code (Handelsgesetzbuch).
If personal data is processed on the basis of your consent, you have the right to revoke your consent vis-à-vis our company at any time with permanent effect. If we process data on the basis of a balance of interests, as the data subject you have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.

For how long is the data stored?

We process the data for as long as it is required for the respective purpose. To the extent that statutory storage obligations exist – e.g., under commercial law or tax law – the personal data in question is stored for the duration of the retention obligation (10 years). After expiry of the retention obligation, we check whether any further processing is necessary. If the data is no longer required, it is deleted. In exceptional cases, the general retention period for personal data may be up to 30 years if it is required for the purpose of asserting, exercising or defending against legal claims.

Naturally, you are entitled at any time to request information about the personal data that we have stored concerning you. Where no requirement to retain the data exists, you are entitled to request its deletion or to restrict its processing (see below).

With whom do we share your data?

We will only disclose your personal data to third parties as necessary for the execution of the contract with you, or if the disclosure is permitted on the basis of a balance of interests within the meaning of Art. 6 (1) (f) GDPR, or where we are legally obliged to disclose the data or you have granted your consent to the disclosure.

Our company regularly reviews your credit history during the conclusion of contracts and also in specific cases in which a legitimate interest exists. For this purpose, we work together with Creditreform, from whom we receive the required data. For this purpose, we transmit your name and contact information to Creditreform. Further information about data processing at Creditreform can be found in the detailed information sheet “Creditreform-Information” in accordance with Art. 14 GDPR or at www.creditreform.de/EU-DSGVO.

Transmission of personal data to a third country

We do not intend to transfer your personal data to a third country or an international organization, unless this becomes necessary for the execution of our contract with you. Where applicable,
we will inform you about this topic separately to the extent prescribed by law.

Your rights as the “data subject”:

Pursuant to Art. 15 GDPR, you have the right to information about your personal data that we process. In particular, you are entitled to obtain information about the purposes of the processing, the categories of the recipients to whom your data is disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to appeal, the source of your data (if it was not collected by the data controller) as well as the existence of – and where applicable meaningful and detailed information about – any automated decision-making processes including profiling.
Pursuant to Art. 16 GDPR, you have the right to demand the immediate rectification and/or completion of incorrect personal data concerning you held by the data controller.
Pursuant to Art. 17 GDPR, you have the right to request the deletion of personal data concerning you that is held by the data controller, except where the processing is necessary in order to exercise the right to freedom of expression and information, or to fulfill a legal obligation, or for reasons of public interest, or for the assertion and exercise of or defense against legal claims
Pursuant to Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data to the extent that the latter’s accuracy is disputed by you and/or the processing is unlawful but you do not require its deletion and/or the data controller no longer needs the data, however you require the data in its current form to assert, exercise or defend against legal claims and/or you have objected to the processing in accordance with Art. 21 GDPR.
Pursuant to Art. 20 GDPR, you have the right to obtain personal data you have submitted to the data controller in a structured, common and machine-readable format or to request its transmission to another data controller.
Pursuant to Art. 7 (3) GDPR, you have the right at any time to revoke any consent you have previously granted to the data controller. As a result of this revocation, the data controller may no longer continue any data processing that was based solely on the aforementioned consent.
Pursuant to Art. 77 GDPR, you have the right to appeal to a supervisory authority. As a rule, you can contact the supervisory authority with responsibility for your usual place of residence or work or our company’s registered office.

In the case of a request for information that is not made in writing, we ask for your understanding that we may subsequently require you to provide proof of your identity.

Right of objection: In particular, pursuant to Art. 21 (1) and (2) GDPR, you have the right to object to the processing of your data in connection with direct advertising, where this is carried out on the basis of a balance of interests.

Our Data Protection Officer

We have appointed a Data Protection Officer for our company. His contact details are as follows:
Thomas Hug
IDKOM Networks GmbH
Unterwanger Str. 3
87439 Kempten
Germany
Phone: +49 (831) 59090-0
Email: datenschutz@idkom.de

Right of appeal

You have the right to submit complaints about our processing of your personal data to a data protection supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27
91522 Ansbach
Phone: +49 (981) 531300
Fax: +49 (981) 53981300
Email: poststelle@lda.bayern.da
Internet: www.lda.bayern.de