Information duties acc. to art. 13 GDPR

We her­eby wish to inform you com­pre­hen­si­vely about the pro­ces­sing of your data in our com­pany and the data pro­tec­tion claims and rights to which you are entit­led within the mea­ning of Art. 13 of the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­tion (GDPR).

1. Who is responsible for data processing and whom can you contact?

Ratis­bona Ham­mer GmbH
Yorck­straße 22
93049 Regens­burg
Phone: +49 941 69877841
info@ratisbona-hammer.com

The com­pany data pro­tec­tion offi­cer is
Nico Becker
Pro­jekt 29 GmbH & Co. KG
Osten­gasse 14
93047 Regens­burg
Phone:  +49 941 298693–0
n.becker@projekt29.de

2. Which data are processed and from which sources do these data originate?

We pro­cess the data which we have recei­ved from you within the frame­work of con­tract initia­tion or pro­ces­sing, on the basis of cons­ents or within the frame­work of your appli­ca­tion to us or within the frame­work of your staff.

Per­so­nal data includes per­so­nal data:
Your master/contact data, for exam­ple first and last name, address, cont­act data (e‑mail address, tele­phone num­ber, fax), bank data for cus­to­mers.

For appli­cants and employees, this includes, for exam­ple, first and last name, address, cont­act data (e‑mail address, tele­phone num­ber, fax), date of birth, data from cur­ri­cu­lum vitae and job refe­ren­ces, bank data, reli­gious affi­lia­tion, photographs.

For busi­ness part­ners, this includes, for exam­ple, the name of their legal repre­sen­ta­tive, com­pany, com­mer­cial regis­ter num­ber, VAT num­ber, com­pany num­ber, address, cont­act per­son cont­act data (e‑mail address, tele­phone num­ber, fax), bank details.

In addi­tion, we also pro­cess the fol­lo­wing other per­so­nal data:

  • Infor­ma­tion on the type and con­tent of con­tract data, order data, sales and docu­ment data, cus­to­mer and sup­plier history and con­sul­ting documents,
  • adver­ti­sing and sales data,
  • infor­ma­tion from your elec­tro­nic dealings with us (e.g. IP address, log-in data),
  • other data that we have recei­ved from you within the frame­work of our busi­ness rela­ti­onship (e.g. in dis­cus­sions with customers),
  • we gene­rate this data our­sel­ves from mas­ter data, cont­act data and other data, e.g. by means of cus­to­mer demand and cus­to­mer poten­tial analyses,
  • the docu­men­ta­tion of your decla­ra­tion of con­sent for the receipt of e.g. newsletters,
  • pho­to­gra­phy in the con­text of events.

3. For what purposes and on what legal basis are the data processed?

We pro­cess your data in accordance with the pro­vi­si­ons of the Data Pro­tec­tion Basic Regu­la­tion (GDPR) and the Fede­ral Data Pro­tec­tion Act 2018, as amended:

a) to ful­fil (pre-)contractual obli­ga­ti­ons (Art. 6 para. 1lit.b GDPR):
The pro­ces­sing of your data takes place for the con­tract win­ding up on-line or in one of our bran­ches, for the con­tract win­ding up of your cowor­kers in our enter­prise. The data will be pro­ces­sed in par­ti­cu­lar during the initia­tion of busi­ness tran­sac­tions and the exe­cu­tion of con­tracts with you.

b) to ful­fil legal obli­ga­ti­ons (Art. 6 para. 1 lit.c GDPR):
A pro­ces­sing of your data is neces­sary for the pur­pose of the ful­film­ent of dif­fe­rent legal obli­ga­ti­ons, e.g. from the com­mer­cial code or the tax code.

c) to safe­guard legi­ti­mate inte­rests (Art. 6 para. 1 lit.f GDPR):
On the basis of a weig­hing of inte­rests, data pro­ces­sing may take place bey­ond the actual ful­film­ent of the con­tract in order to safe­guard the legi­ti­mate inte­rests of us or third par­ties. Data pro­ces­sing to safe­guard legi­ti­mate inte­rests is car­ried out in the fol­lo­wing cases, for example:

    • adver­ti­sing or mar­ke­ting (see No. 4),
    • mea­su­res for busi­ness manage­ment and the fur­ther deve­lo­p­ment of ser­vices and products;
    • manage a group-wide cus­to­mer data­base to improve cus­to­mer service
    • in the con­text of legal proceedings
    • sen­ding of non-pro­mo­ting infor­ma­tion and press releases.

d) within the scope of your con­sent (Art. 6 para. 1lit.a GDPR):
If you have given us your con­sent to pro­cess your data, e.g. to send you our news­let­ter, to publish photos.

4. Processing of personal data for advertising purposes 

You may at any time object to the use of your per­so­nal data for adver­ti­sing pur­po­ses in whole or for indi­vi­dual mea­su­res wit­hout incur­ring any costs other than the trans­mis­sion costs accor­ding to the basic tariffs.

In Ger­many we are entit­led under the legal requi­re­ments of § 7 Abs.3 UWG (law against unfair com­pe­ti­tion) to use the email address you pro­vi­ded when con­clu­ding the con­tract for direct adver­ti­sing for our own simi­lar goods or ser­vices. You will receive these pro­duct recom­men­da­ti­ons from us regard­less of whe­ther you have sub­scri­bed to a news­let­ter or not.

If you do not wish to receive such recom­men­da­ti­ons by e‑mail from us, you can object to the use of your address for this pur­pose at any time wit­hout incur­ring any costs other than the trans­mis­sion costs accor­ding to the basic tariffs. A text mes­sage is suf­fi­ci­ent for this pur­pose. Of course, every e‑mail always con­ta­ins a unsub­scribe link.

5. Who receives my data? 

You may at any time object to the use of your per­so­nal data for adver­ti­sing pur­po­ses in whole or for indi­vi­dual mea­su­res wit­hout incur­ring any costs other than the trans­mis­sion costs accor­ding to the basic tariffs.

In Ger­many we are entit­led under the legal requi­re­ments of § 7 Abs.3 UWG (law against unfair com­pe­ti­tion) to use the email address you pro­vi­ded when con­clu­ding the con­tract for direct adver­ti­sing for our own simi­lar goods or ser­vices. You will receive these pro­duct recom­men­da­ti­ons from us regard­less of whe­ther you have sub­scri­bed to a news­let­ter or not.

If you do not wish to receive such recom­men­da­ti­ons by e‑mail from us, you can object to the use of your address for this pur­pose at any time wit­hout incur­ring any costs other than the trans­mis­sion costs accor­ding to the basic tariffs. A text mes­sage is suf­fi­ci­ent for this pur­pose. Of course, every e‑mail always con­ta­ins a unsub­scribe link.

6. How long will my data be stored?

We pro­cess your data until the ter­mi­na­tion of the busi­ness rela­ti­onship or until the expiry of the appli­ca­ble sta­tu­tory reten­tion peri­ods (e.g. from natio­nal com­mer­cial Laws, tax laws etc.); fur­ther­more until the ter­mi­na­tion of any legal dis­pu­tes in which the data is requi­red as evidence.

7. IS PERSONAL DATA TRANSFERRED TO A THIRD COUNTRY?

In prin­ci­ple, we do not trans­fer any data to a third coun­try. A trans­fer will only take place on a case-by-case basis on the basis of an ade­quacy decis­ion of the Euro­pean Com­mis­sion, stan­dard con­trac­tual clau­ses, appro­priate safe­guards or your express consent.

8. What data protection rights do I have?

You have the right at any time to infor­ma­tion, cor­rec­tion, dele­tion or rest­ric­tion of the pro­ces­sing of your stored data, a right of objec­tion to the pro­ces­sing as well as a right to data trans­fer and a right of com­plaint in accordance with the requi­re­ments of data pro­tec­tion law.

Right of infor­ma­tion
You can request infor­ma­tion from us as to whe­ther and to what ext­ent we pro­cess your data.

Right of rec­ti­fi­ca­tion
If we pro­cess your data that is incom­plete or inac­cu­rate, you may request that we cor­rect or com­plete it at any time.

Right to dele­tion
You can demand that we delete your data if we pro­cess it unlawfully or if the pro­ces­sing dis­pro­por­tio­na­tely inter­fe­res with your legi­ti­mate pro­tec­tion inte­rests. Please note that there may be reasons that pre­vent an imme­diate dele­tion, e.g. in the case of legally regu­la­ted sto­rage obligations.

Irre­spec­tive of the exer­cise of your right to dele­tion, we will delete your data imme­dia­tely and com­ple­tely, inso­far as there is no legal or sta­tu­tory obli­ga­tion to retain data in this respect.

Right to limit the pro­ces­sing
You can ask us to rest­rict the pro­ces­sing of your data if

  • you dis­pute the accu­racy of the data for a period of time that allows us to verify the accu­racy of the data,
  • the pro­ces­sing of the data is unlawful, but you refuse to delete it and ins­tead request a rest­ric­tion on the use of the data,
  • we no lon­ger need the data for the inten­ded pur­pose, but you still need this data to assert or defend legal claims, or
  • you have objec­ted to the pro­ces­sing of the data.

Right to data trans­fera­bi­lity
You may request that we pro­vide you with the infor­ma­tion you have pro­vi­ded to us in a struc­tu­red, com­mon and machine-rea­da­ble for­mat and that you may pro­vide that infor­ma­tion to ano­ther respon­si­ble per­son wit­hout our inter­fe­rence, pro­vi­ded that

  • we pro­cess this data on the basis of a con­sent given and revo­ca­ble by you or for the ful­film­ent of a con­tract bet­ween us, and
  • this pro­ces­sing is car­ried out using auto­ma­ted procedures.

If tech­ni­cally fea­si­ble, you may request us to trans­fer your data directly to ano­ther respon­si­ble person.

Right of objec­tion
If we pro­cess your data for legi­ti­mate reasons, you may object to such pro­ces­sing at any time; this would also apply to pro­fil­ing based on these pro­vi­si­ons. We will then no lon­ger pro­cess your data unless we can prove com­pel­ling grounds for pro­ces­sing worthy of pro­tec­tion which out­weigh your inte­rests, rights and free­doms or the pro­ces­sing ser­ves the asser­tion, exer­cise or defence of legal claims. You can object to the pro­ces­sing of your data for the pur­pose of direct mar­ke­ting at any time wit­hout giving reasons.

Right of appeal
If you are of the opi­nion that we vio­late Ger­man or Euro­pean data pro­tec­tion law when pro­ces­sing your data, we ask you to cont­act us in order to cla­rify any ques­ti­ons you may have. Of course, you also have the right to cont­act the super­vi­sory aut­ho­rity respon­si­ble for you, the respec­tive state office for data pro­tec­tion supervision.

If you wish to assert any of the afo­re­men­tio­ned rights against us, please cont­act our data pro­tec­tion offi­cer. In case of doubt, we may request addi­tio­nal infor­ma­tion to con­firm your identity.

9. Am I obligated to provide data?

The pro­ces­sing of your data is neces­sary to con­clude or ful­fil your con­tract with us. If you do not pro­vide us with this data, we will gene­rally have to refuse to enter into the con­tract or will no lon­ger be able to per­form an exis­ting con­tract and will the­r­e­fore have to ter­mi­nate it. Howe­ver, you are not obli­ged to give your con­sent to data pro­ces­sing with regard to data which is not rele­vant for the ful­film­ent of the con­tract or which is not requi­red by law.