General Data Collection

1. Information Obligations pursuant to Article 13 of the EU General Data Protection Regulation (GDPR): General Data Collection

1.1 Who is responsible for data processing?

The controller responsible for data processing within the meaning of data protection law is:

Nachreiner GmbH
Egert 6
72336 Balingen
Germany
Tel.: +49 7433 90977-0
E-mail: datenschutz@nachreiner-werkzeuge.de

Contact details of the Data Protection Officer:

Steffen Wacker
E-mail: datenschutz@nachreiner-werkzeuge.de

1.2 What personal data do we process, and for what purposes?

If we have received personal data from you, we will generally process this data only for the purposes for which we received or collected it.

Data processing for other purposes will only be considered if the relevant legal requirements pursuant to Article 6(4) GDPR are met. In such cases, we will of course comply with any information obligations pursuant to Article 13(3) GDPR and Article 14(4) GDPR.

1.3 What is the legal basis for data processing?

Unless specific legal provisions apply, the legal basis for the processing of personal data is generally Article 6 GDPR. In particular, the following legal bases may apply:

Consent (Article 6(1)(a) GDPR)
Data processing for the performance of contracts (Article 6(1)(b) GDPR)
Data processing based on a balancing of interests (Article 6(1)(f) GDPR)
Data processing for compliance with a legal obligation (Article 6(1)(c) GDPR)

If personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future.

If we process data on the basis of a balancing of interests, you, as the data subject, have the right to object to the processing of your personal data in accordance with the requirements of Article 21 GDPR.

1.4 How long is the data stored?

We process personal data for as long as this is necessary for the respective purpose.

Where statutory retention obligations exist – for example under commercial or tax law – the relevant personal data will be stored for the duration of the applicable retention period. After the retention period has expired, we will assess whether further processing is necessary. If there is no longer a need for processing, the data will be deleted.

As a general rule, towards the end of each calendar year we review data to determine whether further processing is still necessary. Due to the volume of data, this review is carried out with regard to specific types of data or processing purposes.

Of course, you may request information about the personal data concerning you that we have stored at any time (see below) and, if there is no longer a legal or factual necessity for its processing, request the deletion of the data or restriction of its processing.

1.5 To which recipients is the data disclosed?

As a general rule, your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, if the disclosure is permitted on the basis of a balancing of interests pursuant to Article 6(1)(f) GDPR, if we are legally obliged to disclose the data, or if you have given your consent to such disclosure.

1.6 Where is the data processed?

Your personal data is processed exclusively in data centres located in the Federal Republic of Germany.

1.7 Your rights as a data subject

You have the right to obtain information about the personal data concerning you that we process.

If you submit a request for information that is not made in writing, we ask for your understanding that we may require appropriate proof of identity to verify that you are the person you claim to be.

You also have the right to request the correction or deletion of your personal data, or the restriction of its processing, insofar as you are legally entitled to do so.

Furthermore, you have the right to object to the processing of your personal data within the scope of the applicable statutory provisions. You also have the right to data portability within the framework of applicable data protection law.

In particular, pursuant to Article 21(1) and (2) GDPR, you have the right to object to the processing of your personal data in connection with direct marketing if such processing is based on a balancing of interests.

1.8 Where can you lodge a complaint?

You have the option of lodging a complaint with the Data Protection Officer named above or with a data protection supervisory authority.

The data protection supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg

Postfach 10 29 32
70025 Stuttgart
Germany

Königstraße 10a
70173 Stuttgart
Germany

Tel.: +49 711 / 61 55 41-0
Fax: +49 711 / 61 55 41-15
E-mail: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de