Data protection declaration
Information for business partners (and interested parties) according to Section 13 GDPR
We are a GMH Gruppe company and operate mainly in the European Economic Area (EEA). However, we also have branches outside the European Economic Area. Together we process personal data of our contact persons, such as surname, first name, telephone numbers, etc., in order to be able to contact you.
A business relationship or business initiation is not possible without processing the personal data of the contact person. We use your data in the area of business to business (B2B).
1. Person responsible for data processing
We appoint the company named in the legal notice with its contact data as responsible entity according to Art. 4 para. 7 EU-General Data Protection Regulation (GDPR) (see our Legal notice).
2. Data protection officer
You can reach our data protection officer at the postal address:
GMH Systems GmbH,
Neue Hüttenstraße 2,
49124 Georgsmarienhütte,
E-Mail: datenschutz.systems@gmh-gruppe.de
3. Purpose of data processing, data categories and legal basis
We store the personal data provided by you in the context of our business relationship and / or a business initiation (interested party), in particular for the fulfillment of existing contracts and / or for the implementation of pre-contractual measures.
3.1 Inquiry, quotation and order
These are the company data provided to us for the purpose of an inquiry, offer preparation and order (clarification of queries / inquiries, appointment coordination, invoicing, customer advice / customer service and other legal obligations of the person responsible), including the contact details of the respective contact persons. We generally collect this data when contact is made by telephone, business cards received / provided (interested party or potential customer / service provider / supplier) and / or e-mail received.
The legal basis for data collection is the processing of personal data for the fulfillment of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit.b) GDPR.
3.2 Statistics and optimization of our sales and shipping processes
In order to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR, the contact data is also used for statistical purposes and to optimize our sales and shipping processes. This personal data may be stored in a customer database (customer relationship management – CRM) to provide an overview of customer support, to improve our products and to maintain our contractual relationship.
3.3 Legal regulations
Due to various legal regulations, the companies of GMH Gruppe are subject to further obligations, such as those arising from the German Commercial Code or the German Tax Act. These are, in particular, the control and reporting obligations under tax law, the performance of compliance screenings (comparison of the “EU terror lists” (European anti-terror regulations 2580/2001 and 881/2002) and the prevention of fraud and money laundering) – the legal basis for data collection for the fulfillment of legal obligations is Art. 6 para. 1 lit. c) GDPR.
3.4 Information on events or trade fairs/ customer satisfaction survey
The contact details of the contact persons are also used to provide information about products, events or trade fairs and to conduct a customer satisfaction survey (on a voluntary basis). The use for these purposes is based on our legitimate interests in direct marketing measures in accordance with Art. 6 para. 1 lit. f) GDPR or, if consent is required, by means of a declaration of consent on the basis of Art. 6 para. 1 lit. a) GDPR. You have the right to withdraw your consent at any time with effect for the future without giving reasons.
4. Data transfer
Personal data may also be processed by affiliated companies of GMH Gruppe. Within the respective responsible body of GMH Gruppe, only those bodies receive your data that are entrusted with the fulfillment of existing contracts, the execution of pre-contractual business relationships and / or the protection of our legitimate interests. These are in particular the employees who are entrusted with the preparation and execution of the request for quotation, order processing (sales, shipping, finance and accounting), purchasing and customer service.
Further access to the data is possible by service providers employed by us and acting on our behalf (so-called processors, Art. 28 GDPR) for the care and maintenance of our systems, for error analyses and corrections and to ensure IT security. These accesses are regulated by contracts for order processing in accordance with the GDPR.
5. Data transfer to third countries
Due to our business relationships and branches outside the European Economic Area, your personal data may be transferred to third countries. Such processing takes place exclusively to fulfill contractual and business obligations and to maintain your business relationship with us.
6. Storage of the data
If there is no legal retention period and / or storage is no longer required, the data will be deleted. This is the case
a) if you do not place an order and do not wish to receive any further offers, information or contacts and / or
b) after termination and full completion of the contract and no legal obligation to retain data prevents deletion.
The obligatory period for storage of personal data may extend from three (3) to thirty (30) years.
7. Your rights as a data subject
According to the EU General Data Protection Regulation, you have the following rights:
- If your personal data is processed, you have the right to receive information about the personal data stored about you (Art. 15 GDPR).
- If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
- If the legal requirements are met, you can request the deletion or restriction of the processing and object to the processing (Art. 17, 18 and 21 GDPR).
- If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
In addition, there is a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). If a data subject considers that the processing of personal data relating to him or her infringes the GDPR, he or she has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement.
8. Information about your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para. 1 lit. f) GDPR (data processing on the basis of a balancing of interests). The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.