Data processing principles at Gerresheim serviert GmbH & Co. KG

You have come to this page via a link because you want to find out how we handle (your) personal data. To fulfill our information obligations under Art. 12 et seq. of the General Data Protection Regulation (GDPR), we are happy to provide you with our data protection information below:

Who is responsible for data processing?

The controller within the meaning of data protection law is

Gerresheim Serviert GmbH & Co. KG
Australiastr. 52B
20457 Hamburg

You can find more information about our company, details of the authorized representatives and further contact options in the imprint of our website: https://www.gerresheim-serviert.de/kontakt/impressum/

Which of your data do we process? And for what purposes?

If we have received data from you, we will only process it for the purposes for which we have received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements in accordance with Art. 6 (4) GDPR are met. In this case, we will, of course, comply with any information obligations under Art. 13 (3) GDPR and Art. 14 (4) GDPR.

We still value formal forms of address such as “Ms/Mr” in letters and emails. If you no longer wish to receive this form of address, please let us know.

What is the legal basis for this?

The legal basis for the processing of personal data is generally – insofar as there are no specific legal provisions – Art. 6 GDPR. In particular, the following options come into consideration here:

Consent (Art. 6 (1) (a) GDPR)

Data processing for the performance of contracts (Art. 6 (1) (b) GDPR)

Data processing based on a balance of interests (Art. 6 (1) (f) GDPR)

Data processing for compliance with a legal obligation (Art. 6 (1) (c) GDPR)

If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with effect for the future.

If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

How long is the data stored?

We process the data for as long as is necessary for the respective purpose.

Insofar as statutory retention obligations exist – e.g. in commercial or tax law – the personal data concerned will be stored for the duration of the retention obligation. After the retention obligation has expired, we will check whether there is any further need for processing. If there is no longer any need, the data will be deleted.

In principle, we check data towards the end of a calendar year with regard to the requirement for further processing. Due to the amount of data, this check is carried out with regard to specific types of data or purposes of processing.

Of course, you can request information about the data we have stored about you at any time (see below) and, if it is no longer required, request that it be deleted or its processing restricted.

To which recipients will the data be forwarded?

Your personal data will only be forwarded to third parties if this is necessary for the execution of the contract with you, if the forwarding is permissible on the basis of a weighing of interests within the meaning of Art. 6 (1) point f GDPR, if we are legally obliged to forward the data or if you have given your consent to this.

Where will the data be processed?

We process your personal data exclusively in data centers in the Federal Republic of Germany.

Your rights as a data subject

You have the right to request information about the personal data we have processed about you.

If a request for information is not made in writing, we ask for your understanding that we may then require you to provide proof that you are the person you claim to be.

Furthermore, you have the right to rectification or erasure of personal data or restriction of processing to the extent permitted by law.

You also have the right to object to the processing within the scope of the legal requirements. There is also a right to data portability within the scope of data protection regulations.

In particular, you have the right to object to the processing of your data in connection with direct marketing, if this is carried out on the basis of a weighing of interests, in accordance with Art. 21 (1) and (2) GDPR.

We do not use any processing based on automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Our data protection officer

We have appointed a data protection officer in our company. You can contact her using the following options:

INNAVIS Treuhand GmbH & Co. KG
Gutenbergstraße 1
26632 Ihlow Riepe
Mario Barthel
barthel@innavis.de

Right of appeal

You have the right to complain to a data protection supervisory authority about our processing of personal data.