Data protection information for customers and business partners

Our handling of your data and your rights
Information according to Art. 13 and 21 of the General Data Protection Regulation (DSGVO)

Dear customer
dear customer
valued business partner,
In the following, we inform you about the processing of your personal data by our company and the claims and rights to which you are entitled according to the data protection regulations. Which data is processed in detail and how it is used depends largely on the services you have requested or agreed with us.

1. Who is responsible for data processing and whom can you contact?

The responsible party is:
Zollner Objekttextil GmbH
Veldener Str. 4
D-84137 Vilsbiburg
Telephone : +(49) 8741 306-0
E-mail address : info@zollner.org

Reachability of the external data protection officer:
Anita Baumeister
Michael-Sallinger-Weg 5
84307 Eggenfelden
Telephone :+(49) 176 / 74435536
E-mail address : info@datenschutz-baumeister.de

2. What sources and data do we use?

We process personal data that we receive from you in the course of our business relationship. Relevant personal data are personal details (name, address and other contact details). In addition, this may also include order data (e.g. bank details), data from the fulfilment of our contractual obligations (e.g. orders, contracts, offers, sales data), documentation data (e.g. e-mail correspondence), register data and other comparable data. 3.

3. What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG):

3.1 To fulfil contractual obligations (Art. 6 para. 1b DSGVO).

Personal data (Art. 4 No. 2 DSGVO) is processed for the performance and implementation of our contracts with you and the execution of your orders, as well as all activities necessary with the operation and administration of our company. Further details on the purpose of the data processing can be found in the respective contract documents and terms and conditions.

3.2 Within the framework of the balancing of interests (Art. 6 para. 1f DSGVO)

Where necessary, we process your data beyond the actual performance of the contract in order to protect the legitimate interests of us or third parties. Examples:
- Assertion of legal claims and defence in legal disputes;
- Measures for business management and further development of services.
- Measures to safeguard our property

3.3 Based on your consent (Art. 6 para. 1a DSGVO)

Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. (This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018). Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

3.4 Due to legal requirements (Art. 6 para. 1c DSGVO)

In addition, as a company we are subject to various legal obligations, i.e. statutory requirements (e.g. retention obligations in accordance with AO and HGB).

4. Who receives your data?

Within the company, those departments receive your data that need it to fulfil our contractual and legal obligations. Processors appointed by us (Art. 28 DSGVO) may also receive data for these purposes. Processors are companies in the categories of IT services, logistics, printing services, telecommunications, advice and consulting as well as sales and marketing.
With regard to the transfer of data to recipients outside the company, it should first be noted that we only pass on information about you if this is required by law or if you have given your consent. Under these conditions, recipients of personal data may be, for example:
- Public bodies and institutions (e.g. tax authorities) if there is a legal or official obligation.
- Credit and financial services institutions or comparable institutions to which we transfer personal data in order to carry out the business relationship with you. Further data recipients may be those bodies for which you have given us your consent to transfer data.

5. How long will your data be stored?

As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB), among other things. The retention and documentation periods specified there are two to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which can be up to thirty years, for example according to §§ 195 ff. of the German Civil Code (BGB), whereby the regular limitation period is three years. 6.

6. Will data be transferred to a third country or to an international organisation?

There are no plans to transfer data to third countries (countries outside the European Economic Area - EEA).

7. What data protection rights do you have?

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO). 8.

8. Is there an obligation for you to provide data?

Within the scope of our business relationship, you only have to provide the personal data that is required for the establishment and implementation of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or we will no longer be able to execute an existing contract and may have to terminate it. If you do not provide us with the necessary information, we will not be able to enter into the business relationship you have requested.

9. To what extent is there automated decision-making in individual cases (including profiling)?

We do not use any automated processing including profiling to reach a decision on the establishment and implementation of the business relationship (Article 22 of the GDPR).