Customers / service providers - information obligations according to Art. 13 GDPR

Information about the collection and processing of your personal data

Diligence and transparency are the basis for a trusting co-operation. We therefore inform you about how we process your data and how you can exercise the rights to which you are entitled under the General Data Protection Regulation. Which personal data we process and for what purpose depends on the respective contractual relationship.

1. Who is responsible for data processing?

Responsible for the company is:
ZIEGRA Eismaschinen GmbH
Sattlerstrasse 5 - D 30916 Isernhagen
Phone: +49 (0)511 90244 0
Email: ice(at)ziegra.com
Website: www.ziegra.com

CEO: Johannes von Rohr

2. How can you contact our data protection officer?

You can reach our data protection officer at:

Uwe Koch
Business address:
UKAL occupational safety 
Im Schwalenkamp 24 D - 31020 Salzhemmendorf
Phone: +49 5153 963047
E-Mail: info(at)gukal.de
Website: www.gukal.de

3. What personal data of yours do we collect?

If you have an enquiry, request a proposal from us or sign a contract with us, we process your personal data.

In addition, we also process your personal data to fulfil legal obligations, to protect a legitimate interest or on the basis of your consent. Depending on the legal basis, the following categories of personal data are involved:

- Name, Surname
- Address
- Communication data - private and/or business (phone, e-mail address, mobile phone number)
- Invoice data/sales data
- Payment data/account informations
- Pictures

4. What are the sources of the data?

We process personal data that we receive from our customers, service providers and suppliers.

5. For what purposes do we process your data and on what legal basis?

We process your personal data in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as other relevant laws.

5.1. Based on consent given by you (Art. 6 para 1 a GDPR)

If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, this consent forms the legal basis for the processing of this data.
In the following cases, we process your personal data based on consent given by you:
- Publication of a customer reference

5.2. For the fulfilment of a contract (Art. 6 para. 1 b GDPR)

ZIEGRA Eismaschinen GmbH collects, processes and uses your personal data to establish, execute, amend or terminate the contract concluded between the respective company and you, as well as to customise the content of the offer. These are service contracts for company activities that are carried out in accordance with a previously prepared offer. The contract is based on the order of confirmation signed by the client. Within this contractual relationship, we will process your data to carry out the following activities:

Examples: contract-related contact, contract management, ongoing customer support, fulfilment of warranty claims, receivables management.

 Further information on the purposes of data processing can be found in the respective contract documents. 

5.3. To fulfil legal obligations (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1 e GDPR)

As a company, we are subject to various legal obligations. In order to fulfil these obligations, it may be necessary to process your personal data.

These are
- Control and reporting obligations
- Creditworthiness and identity checks
- Prevention/defence against criminal acts

5.4. On the basis of a legitimate interest (Art. 6 para. 1 f GDPR)

In certain cases, we process your data to protect our legitimate interests or those of third parties
- to determine creditworthiness or default risks
- ensuring IT security and IT operations

 

6. To whom will the data be passed on?

In order to fulfil our contractual and legal obligations, your personal data will be disclosed to various public or internal bodies and external service providers.
External service providers
- IT service providers (e.g. maintenance service providers, hosting service providers, software service providers)                                                                                          
- Service providers for file and data destruction
- Subcontractors 
- Suppliers
- Service providers
- Auditors
- Offices and authorities associated with the execution of the order
- Computer centre for payroll accounting

Public bodies:
In addition, we may be obliged to transfer your personal data to other recipients, such as to authorities for the fulfilment of statutory reporting obligations:
- Tax authorities
- Customs authorities 
- Social security organisations

If you have any further questions about the individual recipients, please contact us at ice@ziegra.com 

7. Is your data transmitted to countries outside the European Union (so-called third countries)?

Your personal data will not be transferred to third countries.

8. How long will your data be stored?

We store your personal data for as long as is necessary to fulfil our legal and contractual obligations.
If storage of the data is no longer required for the fulfilment of contractual or legal obligations, your data will be deleted unless further processing is required for the following purposes:
- Fulfilment of retention obligations under commercial and tax law. These include retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO).
- Preservation of evidence within the framework of statutory limitation periods. According to the limitation provisions of the German Civil Code (BGB), these limitation periods can be up to 30 years in some cases; the regular limitation period is three years.
- Claims for compensation or damages.

9. What rights do you have in connection with the processing of your data?

Every affected person has the right to information in accordance with Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability under Art. 20 GDPR. With regard to the right of access and the right to erasure, the restrictions under Sections 34 and 35 BDSG apply.

9.1. Right to objection

You can object to the use of your data for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.

What rights do you have in the event of data processing based on your legitimate or public interest?

Pursuant to Article 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) or Article 6(1)(f) GDPR (data processing to protect a legitimate interest). This also applies to profiling based on this provision.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

9.2. Revocation of consent

You can revoke your consent to the processing of your personal data at any time. Please note that the cancellation is only effective for the future

9.3. Right to information

You can request information about whether we have stored personal data about you. If you wish, we will tell you what data is involved, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.

9.4. Further rights

You also have the right to have incorrect data corrected or to have your data deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You can also request that we provide all personal data that you have provided to us in a structured, commonly used and machine-readable format either to you or to a person or company of your choice.
 

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). The supervisory authority responsible for us is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstrasse 5 D - 30159 Hannover
Phone: +49 511 120 4500
Telefax: +49 511 120 4599
E-Mail: poststelle@lfd.niedersachsen.de

9.5. Exercising your rights

To exercise your rights, you can contact the controller or the data protection officer using the contact details provided above.
We will process your enquiry immediately and in accordance with the legal requirements and inform you of the measures we have taken.
 

10. Is there an obligation to provide your personal data?

In order to enter into an employment relationship (business relationship), you must provide us with the personal data that is required to fulfil the contractual relationship or that we are required to collect by law. If you do not provide us with this data, it will not be possible for us to fulfil and process the contractual relationship.

11. Does automated decision-making or profiling take place?

No automated decision-making or profiling takes place with your data.

12. Changes to this information

If the purpose or the manner of processing of your personal data changes significantly, we will update this information and inform you of the changes in good time.
 

Status: 09/12/2024