Information according to Articles 13, 14, and 21 General Data Protection Regulation (GDPR)
We hereby inform you about the processing of your personal data by Uhlhorn GmbH & Co. KG and the claims and rights to which you are entitled according to data protection regulations.
Contents
- Who is responsible for data processing and who can I contact?
- What data is collected, why and how long is it stored?
- Who receives your data?
- What rights do you have when it comes to the processing of your data?
Who is responsible for data processing and who can I contact?
The person responsible within the meaning of the General Data Protection Regulation is:
Uhlhorn GmbH & Co. KG
Sulinger Str. 1
D - 27239 Twistringen
Email: info[at]uhlhorn.de
Imprint: https://www.uhlhorn.de/legal-notice.html
(hereinafter also “Uhlhorn GmbH & Co. KG” or “we”)
If you have any questions about this data protection information or the protection of your data by Uhlhorn GmbH & Co. KG you can contact our data protection officer at any time:
Email: datenschutz[at]uhlhorn.de
2. What data is collected, why and how long is it stored?
Contract performance
Personal data is only collected if you provide it to us yourself. No personal data is collected beyond. Any processing of your personal data that goes beyond the scope of what is permitted by law will only take place on the basis of your express consent.
The duration of data storage depends on the legal retention requirements and is usually 10 years.
Application process
Personal data through application information is collected to carry out application procedures.
Application data will generally be deleted within four months of notification of the decision unless consent has been given for longer data storage as part of inclusion in the applicant pool.
Customer data/prospect data
The personal data provided for the execution of the contract (including offers, orders, sales and invoicing, quality management) is collected. We also process your data - where permitted - for the purpose of direct advertising, in particular for sending our advertising, such as product information or event information. Data processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR and in the interest of informing you about new products, events and services. Each customer has their own right to object to this processing, the practice of which will result in the termination of processing for direct advertising purposes. If data is stored exclusively for direct advertising, it will be deleted after an objection has been made. Any additional data is collected based on your express consent to processing.
The duration of data storage depends on the legal retention requirements and is usually 10 years.
Employee data
The personal data provided for the purpose of executing the contract as part of the employment relationship is collected. If necessary, additional data for processing is collected based on your express consent.
The duration of data storage depends on the legal retention requirements and is usually 10 years.
Supplier data
The personal data provided for the performance of the contract (including inquiries, purchases, quality management) are collected. If necessary, additional data for processing is collected based on your express consent.
The duration of data storage depends on the legal retention requirements and is usually 10 years.
3. Who receives your data?
- Public authorities where required by law, including tax authorities and social security institutions.
- External service providers or other contractors, e.g., for data processing and hosting, for shipping, transportation and logistics, service providers for printing and mailing information, accounting, payment processing, payroll accounting, travel expense accounting, insurance services.
- Other external bodies, if the person concerned has given their consent or a transfer is permissible for reasons of overriding interest.
Transfers to third country: Processors outside the European Union are used (here: United States of America); Standard contractual clauses/contract data processing agreements or other lawful agreements for the processing of personal data have been concluded with the service provider.
4. What rights do you have when it comes to the processing of your data?
You have the right to access the personal data we hold about you. In case you request information which is not expressed in writing, we ask for your understanding that we may then require evidence to prove that you are the person you say you are.
You also have the right to rectify or erase your personal data or to restrict the processing to the extent that you are legally entitled to do so.
You also have the right to object to processing within the scope of the law. This applies as well to the right to data portability. In particular, you have the right to object to the processing of your data for the purpose of direct marketing as per Article 21 Paragraphs 1 and 2 GDPR if this is based on a balancing of interests. The objection can be made informally and should preferably be addressed to:
Uhlhorn GmbH & Co. KG
Sulinger Str. 1
D - 27239 Twistringen
Email: datenschutz[at]uhlhorn.de
You also have the right to lodge a complaint with a data protection supervisory authority in connection with the processing of your personal data:
The state representative for data protection in Lower Saxony
Prinzenstrasse 5
30159 Hanover
Telephone: 0511 120-450
Email: poststelle@lfd.niedersachsen.de
Status: March 2023