Data Protection Regulation of C.Kreul GmbH & Co. KG
You have reached this page via a link because you want to learn about our handling of (your) personal data.
To fulfill our obligations under Articles 13 and 14 of the General Data Protection Regulation (GDPR), we are pleased to provide you with the following information on data protection: Data Controller under the GDPR
1) The data controller within the meaning of the General Data Protection Regulation is:
C. Kreul GmbH & Co. KG
Carl-Kreul-Straße 2
D-91352 Hallerndorf
Germany
2) Data Protection Officer under the GDPR
We have appointed a data protection officer in our company.
ITs Hein GmbH
Andreas Hein
Kulmbacher Straße 27b
95460 Bad Berneck im Fichtelgebirge
For any questions regarding data protection, please contact: Email: datenschutz@c-kreul.de
We explicitly point out that when using this email address, the contents will not be exclusively known to our data protection officer. Therefore, if you wish to exchange confidential information, we kindly ask you to initially contact our data protection officer directly via this email address.
3) What data about you do we process? And for what purposes?
In the course of your contact with us, we store and process the personal data resulting from it for the purpose of processing your request. Personal data resulting from this context may include: first name, last name, email address, IP address. If we have received data from you, we will generally only process it for the purposes for which we have received or collected it. Data processing for other purposes is only considered if the necessary legal requirements under Art. 6 (4) GDPR are met. Any information obligations under Art. 13 (3) GDPR and Art. 14 (4) GDPR will, of course, be observed in this case.
4) Legal basis for the processing of personal data
The legal basis for the processing of personal data is generally – unless there are still specific legal provisions – Art. 6 - GDPR. The following options are particularly considered: The processing of your personal data is based on the legal basis of Art. 6 (1) lit. b) - GDPR, if your request is related to the fulfillment of contracts or is necessary for the implementation of measures prior to entering into a contract. In other cases, the processing is based on our legitimate interest according to Art. 6 (1) lit. f) – GDPR. We have an interest in processing the inquiries addressed to us effectively. If we have obtained your consent for the processing of your personal data in accordance with Art. 6 (1) lit. a) - GDPR, we will store your data until the purpose for which the storage was necessary ceases to apply or until you revoke your consent. You can revoke any consent you have given at any time, with effect for the future. However, the lawfulness of the processing until the revocation remains unaffected.
5) Recipients of personal data
In the context of the contact, your personal data will only be forwarded within our company to the responsible employees and to the responsible persons of the respective department for the purpose of processing your request. Disclosure of your personal data to third parties generally only takes place if this is necessary for the performance of the contract with you, the disclosure is permissible based on a balancing of interests pursuant to Art. 6 (1) lit. f) - GDPR, we are legally obliged to disclose the data, or you have given your consent in this regard. For the process, our company uses the services of specialized software providers. Your personal data will therefore be processed on our behalf by the software providers based on data processing agreements in accordance with Art. 28 GDPR. Our company ensures compliance with the provisions of the GDPR in this regard.
6) Transfer of personal data to a third country
Your personal data is processed exclusively in data centers in Germany/the European Union.
7) Duration of storage of personal data
We process the data for as long as is necessary for the respective purpose. If legal retention obligations exist – e.g. under commercial or tax law – the relevant personal data will be stored for the duration of the retention obligation. After the retention obligation has expired, it will be examined whether further processing is necessary. If there is no longer a need for processing, the data will be deleted. In principle, we carry out a review of data towards the end of a calendar year with regard to the necessity of further processing. Due to the volume of data, this review is carried out with regard to specific types of data or purposes of processing. Of course, you can request information about the data stored about you by us at any time (see below) and, if there is no longer a requirement, request deletion of the data or restriction of processing.
8) Your rights as a data subject
With regard to your personal data, you have the following rights vis-à-vis our company: According to Art. 15 GDPR, a right to information about the data processed by you, According to Art. 16 GDPR, a right to correction of your incorrect data, According to Art. 17 GDPR, a right to deletion of your data, According to Art. 18 GDPR, a right to restriction of processing of your data, and According to Art. 20 GDPR, a right to data portability. If reasons arise from your particular situation against the processing of your personal data carried out by our company to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) GDPR, you can exercise your right to object pursuant to Art. 21 GDPR and object to the data processing. Furthermore, you have the right to revoke the consents granted to our company in accordance with Art. 7 (3) GDPR. You can exercise your right of revocation at any time with effect for the future. This means that the processing carried out by our company until the revocation remains lawful. Furthermore, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority in the member state of your residence, place of work, or the place where the potential infringement took place, if you believe that the processing of your personal data violates the provisions of the General Data Protection Regulation (GDPR).
9) Data Provision
As part of the processing of your requests, the provision of personal data is neither legally nor contractually prescribed. However, certain personal data is necessary for the performance of pre-contractual measures and possibly for the execution of a resulting contract. Without providing certain personal data, it may not be possible to conclude a contractual relationship.
10) Automated Decision Making
The decisions made for the purpose of contract initiation are not based on automated processing, so that no automated individual decision-making takes place in our company within the meaning of Art. 22 GDPR
11) Server Data
For technical reasons, especially to ensure a secure and stable internet presence, data is transmitted to us or to our web space provider by your internet browser. These so-called server log files include, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our internet presence (referrer URL), the website(s) of our internet presence that you visit, the date and time of each access, as well as the IP address of the internet connection from which the use of our internet presence takes place. These data collected are temporarily stored, but not together with other data from you. This storage is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving, stabilizing, functioning, and securing our internet presence. The data will be deleted no later than seven days after, unless further storage is necessary for evidential purposes. Otherwise, the data is partially or completely excluded from deletion until the incident is finally clarified.
