1. Name and contact data of the person responsible for data processing and of the operational data protection officer
These data privacy instructions apply to data processing activities by:
Person/entity responsible for data processing: deister electronic GmbH
Managing director: Anatoli Stobbe, graduate engineer
Hermann-Bahlsen-Str. 11, 30890 Barsinghausen, Germany
Phone: +49 5105 51601
Fax: +49 5105 516217
The company data protection officer of deister electronic GmbH is Mr Michael Geisthardt. You may contact him at the address: G&G Datentechnik GmbH, Neue Str. 26a, 30989 Gehrden, Germany, FAO Mr Michael Geisthardt, or by email at: email@example.com.
2. Collection and storage of personal data as well as kind and purpose of data processing and its use
If you conclude a contract with us, it is possible that we will collect some or all of the following information:
- title, first name, surname,
- a valid email address,
- telephone number / mobile phone number,
- company and company address,
- job title/function,
- your interests in our products/solutions,
- information about your business model,
- company data, such as number of employees, annual sales turnover, year of foundation.
These data are collected
- to be able to identify you as our contractual partner/client,
- to be able to manage the products that you use, and to keep our products and your user profile technically functional,
- for correspondence with you,
- for invoicing,
- for processing any possible liability claims.
The data processing is implemented because of your query, and is necessary pursuant to Art. 6 (1), sentence 1, point b General Data Protection Regulation (henceforth referred to as “GDPR”) for the above-mentioned purposes for the appropriate processing of the contractual relationship and for both parties to fulfil their obligations on the basis of this contract.
The personal data we collected for concluding the contract are stored as long as they are necessary for processing the contractual relationship and are then erased, unless we are subject to a legal obligation to store the data longer pursuant to Art. 6 (1), sentence 1, point c GDPR or if you have approved a longer storage pursuant to Art. 6 (1), sentence 1, point a GDPR.
3. Forwarding to third parties
Your personal data will not be transmitted to third parties except for the purposes mentioned hereafter.
Insofar as it is necessary for processing a contract with you pursuant to Art. 6 (1) sentence 1, point b GDPR, your personal data will be forwarded to specific third parties. This in particular includes forwarding to deister’s partners, who have been voluntarily commissioned by the companies that use our products (in the following only called “client companies”). In such cases, it may be possible that our system is not directly managed by deister but by deister’s respective partner on behalf of the client company.
In this case, deister’s respective partner may have knowledge of your utilisation data as well as the type of software and/ or apps you use. The knowledge of our partner regarding the users – belonging to the client company – of deister products and the type of deister products used as well as the types of usage is necessary for proper management by the partner and for the way our deister products function (particularly software, apps and online portals) and constitutes a legitimate interest for us. The forwarded data may only be used by the third party exclusively for the above-mentioned purposes.
The use of our products and every type of transmission of data within the framework of your use of our products takes place voluntarily. If you do not use our products, the above-mentioned forwarding of data does not take place.
Furthermore, forwarding to third parties only takes place in agreement with you.
4. Rights of persons concerned
You have the following rights:
- Pursuant to Art. 7 (3) GDPR, you are entitled to revoke your provided consent in a notification transmitted to us at any time. The consequence thereof will be that we will not be allowed in the future to continue the data processing activities, which were conducted on the basis of that consent,
- pursuant to Art. 15 GDPR, you are entitled to demand information on your personal data processed by us. In particular, you are entitled to demand information from us on the purposes of data processing, the categories of personal data, the categories of recipients to which your data have been disclosed or are disclosed, the scheduled storage period, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data unless they have been collected from us, and on the existence of an automated decision-making process including profiling and, where applicable, meaningful information on the details of such processes;
- pursuant to Art. 16 GDPR, you are entitled to demand the rectification of any incorrect personal data stored by us or the completion of any incomplete personal data stored by us – in relation to you as a person – without delay;
- pursuant to Art. 17 GDPR, you are entitled to demand the erasure of any of your personal data stored by us as far as the data processing is not required to exercise the right of free speech and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, you are entitled to demand the restriction of processing of your personal data as far as you dispute the correctness of the data, as far as the processing of the data is unlawful, but you reject its erasure, and as far as we no longer require the data, but you require them to assert, exercise or defend legal claims, or if you have objected to the data processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, you are entitled to demand from us that you receive the personal data, which you have made available to us, in a structured, well-established and machine-readable format, or you may demand transmission of the data to another responsible person/entity, and
- to submit a complaint to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you may submit your complaint to the supervisory authority in charge of your usual place of domicile or place of work or our lawyers’ office.
5. Right to object
Where your personal data is processed on the grounds of legitimate interests pursuant to Art. 6 (1), sentence 1, point f of the GDPR, you are entitled pursuant to Art. 21 of the GDPR to raise an objection against the processing of your personal data, provided reasons are in place for such an objection that result from your particular situation.
If you wish to make use of your right to complain, an email to firstname.lastname@example.org be sufficient.