Information on the processing of personal data pursuant to Article 13 of the GDPR in conjunction with the transparency requirement pursuant to Article 12 et seq. of the GDPR
Intended Use
Our company processes personal data for the purpose of establishing and fulfilling business relationships in accordance with specific orders. This applies to all categories of data necessary for fulfilling pre-contractual and contractual obligations.
Lawfulness of Data Processing
The collection, processing, and use of personal data are carried out within the limits permitted by law in accordance with Articles 5, 6, and 9 of the GDPR. If personal data is collected directly from the data subject, the data subject is entitled to transparent information in accordance with Article 13 of the GDPR. The same applies, pursuant to Article 14 of the GDPR, if the data is not collected from the data subject. As a general rule, only information that is necessary for the performance of operational tasks and is directly related to the purpose of processing is processed and used. In doing so, the specific requirements for the collection, processing, and use of special categories of personal data pursuant to Article 9 of the GDPR and Section 22 of the BDSG are observed. Pursuant to the GDPR, the processing of sensitive data is permitted exclusively under the principle of prior authorization or when there is a legal basis for such processing.
Disclosure of Data to Third Parties
Personal data will only be disclosed to third parties if this is necessary to fulfill the business purpose. Personal data will not be disclosed to third parties—including those in third countries with unclear data protection standards (generally countries outside the EU)—who are not involved in the business purpose, unless the data subject has given consent.
The Rights of Data Subjects
Pursuant to Article 15 et seq. of the GDPR, data subjects have the right to access, rectify, erase, restrict, and object to the processing of their data.
The Right of Data Subjects to Withdraw Consent
Data subjects have the right, pursuant to Article 13(2)(c) of the GDPR, to withdraw their consent to the processing of personal data with future effect, provided that the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. The lawfulness of the processing carried out on the basis of consent up until the time of withdrawal remains unaffected.
However, revoking consent or failing to provide the required data generally means that the purpose for which the data was or would need to be collected cannot be fulfilled. You must exercise your rights in writing. To do so, please contact us by email at info@federn-weigel.de
Deletion of Personal Data
Personal data is deleted when the purpose for which it was stored no longer applies and no legal provision (e.g., regarding a statutory retention period) requires the data to be retained. The provisions of Article 17 of the GDPR, in conjunction with Section 35 of the BDSG, apply.If deletion is not possible for legal, contractual, commercial, or tax-related reasons, the processing of the data may be restricted at the request of the data subject. Written notice is required to exercise this right.
The Right of Data Subjects to Data Portability
The company ensures the right to data portability in accordance with Article 20 of the GDPR. Every data subject has the right to receive a copy of their pb data in a commonly used machine-readable file format.
Data Controller as defined by the GDPR and the BDSG
Alfred Weigel Federnfabrik GmbH & Co. KG,
Annaberger Straße 138,
09120 Chemnitz
Company Data Protection Officer
Janz Consulting, Email: jc@jcdatenschutz.de
Right to File a Complaint
Pursuant to Article 77 of the GDPR, every data subject has the right to lodge a complaint with the state supervisory authority.
The State Data Protection Commissioner of the Free State of Saxony can be reached by email at: saechsdsb@slt.sachsen.de.