You have been directed to this page via a link, because you wish to be informed about how we handle your personal data. In fulfilment of our obligations to provide information pursuant to Article 12 et seqq. of the General Data Protection Regulation (GDPR), our information relating to data privacy is provided below:

Who is responsible for data processing?
The controller pursuant to data privacy legislation is
C.Kreul GmbH & Co. KG
Carl-Kreul-Strasse 2
91352 Hallerndorf, Germany
You can find further information on our company, information on the persons with authority to represent the company and also additional ways in which to contact us on our website: Imprint

Which of your data is processed by us? And for what purposes?
If we have received data from you, we will in principle only process it for the purposes for which we have received or collected them.
Data will be processed for other purposes only if the relevant legal requirements pursuant to Article 6 (4) GDPR are met. We shall in such case naturally comply with any obligations to provide information pursuant to Article 13 (3) GDPR and Article 14 (4) GDPR.

What is the legal basis for this?
Unless other specific legal provisions apply, the legal basis for the processing of personal data is, in principle, Article 6 GDPR. In this context, the following grounds are in particular possible:

• Consent (Article 6 (1) lit. a) GDPR)
• Data processing for the performance of contracts (Article 6 (1) lit. b) GDPR)
• Data processing based on a balancing of interests (Article 6 (1) lit. f) GDPR)
• Data processing for compliance with a legal obligation (Article 6 (1) lit. c) GDPR)

If personal data is processed on the basis of a consent which you have granted, you shall at any time have the right to revoke the consent given to us, with effect for the future.
If we process data on the basis of a balancing of interests, you as the data subject shall have the right – taking into account the requirements of Article 21 GDPR – to object to the processing of the personal data.

For how long will the data be stored?
We will process the data for as long as is necessary for the respective purpose.
Where statutory retention obligations exist (e.g. under commercial or fiscal law), the personal data in question will be stored for the duration of the retention obligation. After the retention obligation expires, we will examine whether there is a further need for processing. If no further requirement exists, the data will be deleted.
In principle, we will review data towards the end of a calendar year to ascertain whether further processing is necessary. Due to the volume of data involved, this review will be undertaken based on specific data types or processing purposes.
You can of course demand information at any time (see below) about your personal data which is stored by us, and if no requirement exists, you may demand the deletion of the data or the restriction of its processing.

To which recipients is the data forwarded?
In principle, your personal data will only be forwarded to third parties if this is necessary in order to perform the contract with you, if forwarding is permitted on the basis of a balancing of interests pursuant to Article 6 (1) lit f) GDPR, if we are legally obliged to forward the data, or if you have granted consent in this regard.

Where is the data processed?
Your personal data will only be processed by us in computer centres in the Federal Republic of Germany.

Your rights as the “data subject”
You have the right to be informed about your personal data which we have processed.
If you make a request for information which is not submitted in writing, please understand that we may demand evidence from you which proves that you are the person you are claiming to be.
In addition, you have the right to have your data rectified or deleted, or to have its processing restricted, where you are legally entitled to such right.
You also have a right to object to the processing within the framework of the statutory provisions. The same applies to the right to data portability.

In particular, you have a right to object, pursuant to Article 21 (1) and (2) GDPR, to the processing of your data in connection with direct advertising, if this based on a balancing of interests.
Our Data Protection Officer
We have appointed a Data Protection Officer in our company. You can contact the Data Protection Officer as follows:
ITs Hein GmbH
– Data Protection Officer –
Kulmbacher Str. 27b
95460 Bad Berneck
Email: datenschutz@c-kreul.de

Right to complain
You have the right to complain to a data privacy supervisory authority about the processing of personal data by us.

Status
August 2018