Information on the use or handling of your data and your rights under the EU General Data Protection Regulation.
With this information, we inform you about the processing of your personal data and the rights to which you are entitled under data protection. Which data is processed in detail and in what way it is used depends largely on the services provided and agreed.
Responsible for data processing and who can I contact:
Responsible for data processing:
PAN-DUR GmbH
Max-Planck-Straße 1
97944 Boxberg
You can contact our data protection officer at:
What do we process your data for (purposes of processing) and on what legal basis do we do this?
We process personal data in compliance with the EU General Data Protection Regulation (GDPR) and all other relevant laws:
- To fulfil contractual obligations (Article 6 Abs. 1b) DS-GVO)
The processing of personal data (Article 4 Nr. 2 DS-GVO) takes place e.B. for the processing of orders, quotations and pre-contractual measures, provision of services, invoicing and delivery of goods.
The purposes of the processing are primarily based on the service to be provided by us.
- As part of the balancing of interests (Article 6 Abs. 1f) DS-GVO)
If necessary, we also process your data in order to safeguard our legitimate interests or those of third parties. This can be the case, for example, with:
- ensuring IT security and IT operations, including testing
- for the prevention and investigation of criminal offences
- for statistical purposes
- on creditworthiness assessments at credit agencies
- Based on your consent (Article 6 Abs 1a) DS-GVO, Article 9 Abs 2a) i. V. m. Article 7 DS-GVO)
Insofar as we have your consent to the processing of personal data for certain purposes (e.B. advertising), the lawfulness of this processing is given on the basis of your consent. Once consent has been given, it can be revoked at any time. Please note that the revocation is effective for the future. Processing carried out before this revocation is unaffected by this.
Insofar as we have your consent to the processing of personal data for certain purposes (e.B. advertising), the lawfulness of this processing is given on the basis of your consent. Once consent has been given, it can be revoked at any time. Please note that the revocation is effective for the future. Processing carried out before this revocation is unaffected by this.
- Processing based on legal requirements (Article 6 Abs. 1c) DS-GVO)
It may happen that we process your personal data to comply with legal obligations. This includes, for example.B retention periods under commercial and tax law and, if necessary, information to authorities.
To whom is the data passed on (categories of recipients):
Data processing within the company:
We have bundled certain data processing operations in our company. These are centrally perceived by specialized divisions. Your data may be processed, for example, for telephone customer service, invoice processing or postal processing.
External contractors and service providers (processors):
We sometimes use external contractors and service providers to carry out our tasks and to fulfill the contract. These can include, for example, document shredders, print service providers, logistics and IT service providers.
Other recipients:
In addition, data may go to recipients to whom we are obliged to disclose it due to legal obligations (for example: law enforcement authorities and courts).
Duration of data storage:
If necessary, we process and store your personal data for the duration of our business relationship. This also includes the initiation and processing of a
Contract/Order. In addition, we are subject to various retention obligations, which result from the Commercial Code, among other things. Finally, the storage period also results after the statutory limitation periods, which can usually be 3 years but also up to 30 years.
Data transfer to third countries:
A data transfer to third countries (countries outside the EU and the European Economic Area EEA) only takes place insofar as this is necessary for the execution of a contract/order/business relationship, including the initiation and only in compliance with the data protection requirements prescribed for this purpose.
Affected Rights:
You can request information about the data stored about you via the contact details provided above. (Article 15 DS-GVO). In addition, under certain conditions, you can request the correction or deletion of your data (Article 16 und 17 DS-GVO). You have the right to request the restriction of the processing of your personal data (Article 18 DS-GVO). In addition, you have the right to have the data provided by you published in a structured, commonly used machine-readable format (Article 20 DS-GVO).
Is there an obligation to provide data?
In the context of a business initiation or business relationship with us, you generally only have to provide the data that we need to establish, carry out or terminate this relationship. Without providing the necessary data, we may have to refuse the establishment of a business relationship or may not be able to carry it out or even have to terminate it.
Right of appeal:
You have the option of contacting the above-mentioned data protection officer or a data protection supervisory authority with a complaint.
Right of objection to direct marketing:
You have the right to object to the processing of your personal data for direct marketing purposes.
If we process your data to safeguard legitimate interests, you can object to this processing if your particular situation gives rise to reasons that speak against the data processing.