With the following data protection notices, we would like to give you an overview of the collection and processing of your personal data with us in the company. We would also like to explain to you for which purposes we collect which data and what rights you are entitled to in this context.
1. Who is responsible for data processing and who is my contact person for data protection concerns?
The responsible person within the meaning of the EU General Data Protection Regulation (hereinafter “GDPR”), the Federal Data Protection Act, other data protection laws in force in the Member States of the European Union and other provisions with a data protection character is:
Gerauer Str. 18
60528 Frankfurt am Main
Tel.: +49 69 – 50 50 25 0-181
CEO: Matthias Rüth
2. What data do we collect and process and from what sources do we obtain it?
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, data on the legitimacy of your person (e.B. identity or passport data) as well as data from the fulfilment of our contractual obligations (e..B bank data), is always carried out in accordance with the GDPR and in accordance with the German data protection regulations applicable to PS-KLASSIK GmbH.
We receive this data from you or from sales partners or intermediaries cooperating with us in the course of our business relationship and its initiation. In addition, if necessary in the context of our service, we may process data that we have legitimately obtained from publicly available sources (e.B.g. debtor directories, trade and association registers, land registers, etc.).
3. For what purpose and on what legal basis do we process your data?
Art. 6 Para. 1 lit. a GDPR serves as the legal basis for our company for processing operations where we obtain consent for a specific processing purpose. This applies in particular to the transfer of personal data between us and our sales partners and intermediaries. Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, in the case of processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing shall be based on Article 6(). 1 lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing shall be based on Art. 1 lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or any other natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information were then passed on to a doctor, hospital or other third party. Should. In that way, the processing would be based on Article 6(0). 1 lit. d GDPR. Ultimately, processing operations can also be used under Article 6(0). 1 lit. f GDPR. This legal basis is the basis for processing operations which are not covered by any of the above legal bases where the processing is necessary to safeguard the legitimate interest of our company or a third party, provided that the interests of the fundamental rights and freedoms of the person concerned. An example of this can be advertising by our company.
4. Who gets access to your data?
Within our company, those employees who need it to fulfill our contractual and legal obligations will have access to your data.
We will only share your personal information with third parties outside our company if:
- You have expressly consented to this (Art. 6 sec. 1 lit. a GDPR),
- this is permitted by law and in accordance with Article 6(0). 1 lit. b GDPR is necessary for the establishment or settlement of contractual relationships with you,
- in the event that for the transfer under Article 6(0) of the 1 lit. c GDPR has a legal obligation and
- the transfer in accordance with Article 6(0) 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data.
Under these conditions, data will be passed on in particular to sales partners and intermediaries, banks, authorities and courts that cooperate with us.
Under these conditions, it is also possible to pass on to recipients in third countries, i.e. to countries outside the European Union and the European Economic Area, but only within the framework of contractual relations.
In addition, we occasionally use service partners who have been commissioned by us to process personal data in accordance with our instructions as part of an order processing contract.
5. How long will your data be stored?
In principle, the processing and storage of your data will only take place as long as this is necessary for the purpose for which it was collected, in particular for the fulfilment of our contractual obligations as well as any additional statutory retention periods e.B. from the Commercial Code or the Tax Code. These are usually six or ten years. In addition, data for the assertion and enforcement of legal claims may be stored within the framework of the statutory limitation periods, e.B. for the preservation of evidence.
After the relevant period has expired, the relevant data will be routinely deleted.
6. What are your data protection rights?
Each data subject has a right of access (Art. 15 GDPR), the right to rectification (Art.16 GDPR), the right to restrict processing (Article 18 GDPR), a right to erasure (Article 17 GDPR), a right of objection (Art. 21 GDPR) and a right to data portability (Art.20 GDPR).
If the data processing is based on a consent, you can revoke this consent at any time with effect for the future. The data processing carried out up to the time of revocation remains lawful. For example, you can send a revocation by e-mail to email@example.com or to the postal address above.
You also have the right to complain to the competent supervisory authority (Art. 77 GDPR).
Right to object
If your personal data is based on legitimate interests in accordance with Article 6 sec. 1 lit. f GDPR are processed, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are reasons for doing so, which arise from your particular situation or if the opposition is directed against direct marketing. In the latter case, you have a general right of objection, which we implement without specifying a specific situation. If you wish to exercise your right of objection, please send an e-mail to firstname.lastname@example.org.
7. Am I obliged to provide my data?
In the context of contractual relations, you only need to provide the personal data necessary for the establishment, execution and termination of the contractual relationship or which we are legally obliged to collect (e.B. due to tax regulations). Without this data, we will usually have to refuse to enter into contractual relations.
8. Automated decision-making, including profiling
There is no automated decision-making, including profiling.
9. Use of the Matomo statistical software