Duty to inform
Data protection information when contacting us
|
Responsibilities |
DKM & KKB GmbH |
|
Contact details of the data protection officer |
DKM & KKB GmbH |
|
Description |
With the following information, we would like to inform you as a customer, business partner, applicant, supplier or interested party, or as a contact person for a business partner, supplier or interested party, about the processing of your personal data. |
|
Purpose of data processing |
Your personal data is processed to the extent necessary for the initiation or execution of a contract, including the establishment of an employment relationship, as well as for the execution of other business relationships (including correspondence, processing purchase orders, deliveries or payments) or to prepare or respond to requests for quotations, to determine the terms of the contractual relationship and with regard to product development activities, or to protect the legitimate interests of our company. In the case of a job application, processing is carried out solely for the purpose of assessing your suitability, qualifications and professional performance with regard to the position for which you are applying. |
|
Legal basis |
The legal basis, insofar as the processing takes place for the purpose of initiating or executing a contract, is Art. 6 (1) (b) GDPR (in the case of job applications, additionally Art. 88 GDPR). If this is not the case, your personal data will be processed to safeguard the legitimate interests of our company in accordance with Art. 6 (1) (f) or to fulfil legal obligations in accordance with Art. 6 (1) (c). We also process your personal data for specific purposes (e.g. for longer storage) if you have given us your consent to data processing within the meaning of Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR. |
|
Categories of personal data |
We process personal data that we receive from you in the course of our business relationship and in the context of orders placed by you, your customers, suppliers or interested parties. In addition, we process personal data that we obtain from public directories and official announcements and other generally accessible sources in a permissible manner or that is made available to us by contractual partners. In addition to personal details and master data (name, address, associated company, function and contact details), relevant personal data for the processing of business relationships includes data on current and previous orders, payment and billing data, usage data and logs, as well as advertising and sales data and information comparable to the categories mentioned. As part of the application process, we process personal data such as:
|
|
Storage period |
The personal data collected by us within the framework of the contract will be stored for the duration of the business relationship and then deleted, unless we
If your application is successful, your personal data will be stored in your personnel file and used for the purpose of implementing and terminating the employment relationship. If we are currently unable to offer you employment, we will process your data in accordance with Article 6(1)(f) of the GDPR for up to six months after sending the rejection letter in order to defend ourselves against any legal claims. If you consent to the storage of your data beyond the prescribed period, the duration may be longer (max. two years). As soon as the storage of the data is no longer necessary for the aforementioned storage purposes, your data will be deleted immediately. |
|
Automated decision-making and profiling |
As a responsible company, we refrain from automated decision-making or profiling. |
|
Recipients of personal data outside the company/authority |
Within our company, those departments that need your data to fulfil our contractual and legal obligations and legitimate interests will have access to it. Processors employed by us (Art. 28 GDPR) may also receive data for these purposes. These processors are companies in the categories of IT services, logistics, printing services, telecommunications, marketing and accounting. Companies in the categories of legal and tax consulting, debt collection and auditing may also receive data for these purposes. We only pass on your data to third parties for their own use if and to the extent that consent has been given or contractual and/or legal regulations provide for this. Third parties in the above sense are public bodies/authorities and private companies. In addition, to the extent permitted by law, we may transfer your personal data to authorities (e.g. social security institutions, tax authorities or law enforcement agencies) and courts in the United Kingdom and abroad in order to comply with legal obligations or in the interests of the company. Within the framework of the contractual relationship or the application process, your personal data will also be processed with Microsoft 365. |
|
Intention to transfer to a third country or international organisation |
There is no intention to transfer personal data to a third country or international organisation. |
|
Right to information |
You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be. You also have the following additional rights, which you can exercise against us and/or our service providers:
|
|
Right to lodge a complaint with a supervisory authority |
You also have the right to lodge a complaint with a supervisory authority if you believe or suspect that the processing of your personal data violates data protection regulations.
|