General Information on Data Processing at Zerhusen Kartonagen GmbH

You have come to this page via a link because you want to find out how we handle (your) personal data. The General Data Protection Regulation (GDPR) stipulates that the controller must inform you as the data subject about how your personal data is processed and what rights you have in this regard. In order to fulfill our information obligations in accordance with Art. 12 of the GDPR, we are pleased to present our information on data protection below:

—

Who is responsible for data processing?

The responsible party as defined by data protection regulations shall be:

ZERHUSEN Kartonagen GmbH
Roland Zerhusen
Industriestraße 9
49401 Damme
Germany

Telephone: +49 (0) 54 91-96 88 0
E-Mail: info@zerhusen.de

You will find further information about our company, details of the authorized representatives and other contact options in the legal notice on our website: You will find further information about our company, details of the authorized representatives and other contact options in the legal notice on our website: https://www.zerhusen.de/impressum

—

Which of your data will be processed and to what degree?

If we have received data from you, we will only process it for the purposes for which we received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements according to Art. 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations according to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.

—

What is the legal basis for this?

The legal basis for the processing of personal data is generally - unless there are specific legal provisions - Art. 6 GDPR. The following options in particular come into consideration:

• Consent (Art. 6 para. 1 sub-para. a) GDPR)

• Data processing for the performance of contracts (Art. 6 para. 1 sub-para. b) GDPR)

• Data processing on the basis of a balancing of interests (Art. 6 para. 1 sub-para. f) GDPR)

• Data processing for the fulfillment of a legal obligation (Art. 6 para. 1 sub-para. c) GDPR)

If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with immediate effect.

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account in accordance with the requirements of Art. 21 GDPR.

—

How long will the data be saved?

We process the data for as long as this is necessary for the respective purpose.

Where statutory retention obligations apply - e.g., under commercial law or tax law - the relevant personal data will be stored for the duration of the statutory retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted.

At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing.

Of course, you can request information about the data we have stored about you at any time (see below) and, if it is not necessary, request that the data be deleted, or processing be restricted.

—

To whom is the data forwarded?

Within our company, only those internal departments or organizational units receive your data that need it to fulfil our contractual and legal obligations or in the context of processing and implementing our legitimate interests.

Where necessary, we also pass on personal data to service providers who assist us. These are commissioned processors in accordance with Art. 28 GDPR (e.g., data carrier disposal or file destruction by service providers). This processing by a processor is carried out on the basis of a contract in accordance with Art. 28 para. 3 GDPR. Processors are recipients as defined by Art. 4 No. 9 GDPR.

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data, or if you have given your consent in this respect.

—

Where will the data be processed?

Your personal data is processed by us exclusively in data centers in the Federal Republic of Germany.

—

Your rights as an "affected person."

You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

Furthermore, you have a right to have your data corrected or deleted or to restrict processing, insofar as you are legally entitled to do so.

You also have the right to object to processing within the scope of the statutory provisions. The same applies to the right to data portability.

In particular, you have the right to object to the processing of your data in connection with direct advertising in accordance with Art. 21 (1) and (2) GDPR if this is based on a weighing of interests.

—

Our data protection representative

We have appointed a data protection officer in our company. You can reach him under the following contact options:

Sebastian von der Au
EDV-Unternehmensberatung Floß GmbH
Hopfengarten 10
33775 Versmold
Germany

E-Mail: info@floss-consult.de

—

Right to appeal

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

Stand: 17.10.2018