With the following information we would like to give you an overview of how we handle your data that we collect from you in connection with the use of our services. We would also like to inform you about your data protection rights. Which data is processed in detail and how it is used depends on the services used.
1. Responsible, Art. 4 ITEM 7 GDPR
The person responsible for the processing of your data within the meaning of Art. 4 Clause 7 of the General Data Protection Regulation (GDPR) is company
Walter Messner GmbH
Barsbütteler Weg 6
2. What are “personal data”?
Personal data is information about you that allows conclusions to be drawn about your identity, e.g. your name, your address or your telephone number. Information that does not allow any conclusions to be drawn about a specific or identifiable person is not included.
3. Scope of data collection, processing and use
- In our company
We collect data in connection with the initiation, conclusion and fulfillment of contracts that we conclude with you. These are stored by us and used to answer inquiries, fulfill contracts and to fulfill our legal obligations.
- On our website
When you contact us by e-mail or using a contact form, we will save the data you provide (your e-mail address, possibly your name and your telephone number) in order to answer your questions. We delete the data that arises in this context after the storage is no longer required, or we restrict the processing if there are statutory retention requirements we only use the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Browser type
- Browser version
- operating system used
- Host name of the accessing computer
- Time of the server request
Our website does not use so-called cookies. These serve to make an offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
- Google Analytics
Our website does not use Google Analytics. This is a web analysis service provided by Google Inc. (“Google”). The legal basis for the use of Google Analytics is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.
4. Purpose of processing and legal basis
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
- To fulfill contractual obligations (Art. 6 Para. 1 b) GDPR)
The processing of data takes place for the provision of our contractual services or for the implementation of pre-contractual measures, which take place on request. The purpose of the measure depends primarily on the specific product. Further details on the purpose of data processing can therefore be found in the relevant contract documents and terms and conditions.
- To fulfill legal obligations (Art. 6 Para. 1 c) GDPR)
In the context of legal documentation and retention obligations (e.g. according to the tax code), we are obliged to keep business documents and to present them in the context of audits.
- As part of the balancing of interests (Art. 6 Para. 1 f) GDPR)
In addition to using it to actually fulfill the contract, it may be necessary to process your data to safeguard our or third parties’ legitimate interests, e.g. ensuring the IT security of our system, asserting legal claims and defending against legal disputes, advertising, insofar as you are using your Data have not contradicted.
- Based on your consent (Art. 6 Para. 1 a) GDPR)
We need your consent for certain purposes. Processing will only take place if you have given your express consent. You can withdraw your consent at any time. The revocation does not affect the legality of the processing prior to receipt of the revocation. Processing on behalf (Art. 6, 28 GDPR) We process data on behalf of our customers on the basis of written contracts for order processing.
5. Recipients of the data
- As far as this is necessary in the context of order processing and similar processes, we transmit personal data of the customer to our shipping service providers with whom shipping contracts are to be concluded.
- Data will be sent to public bodies insofar as we are obliged to do so due to a legal regulation or official measure.
6. Transmission of data to a third country
In principle, we do not transmit any data to recipients based outside the EU and the EEA. As far as this is necessary in individual cases, a transmission takes place only with your express consent or as far as this is required or permitted by law.
7. Duration of storage
In principle, we store your data for as long as the storage is necessary for the fulfillment of contractual and legal obligations. If the data is no longer required for this, it is regularly deleted. There is no deletion,
- as far as commercial and tax retention obligations conflict,
- Data to prove claims from the contractual relationship must be retained within the regular limitation period (3 years, § 195 BGB). If a deletion according to the previous sentence does not take place, the data will be blocked. We check the necessity at annual intervals.
8. Backing up your data
We take all appropriate technical and organizational measures to ensure the protection of your data.
9. Your privacy rights
As a “data subject” you have the right to
- Information according to Art. 15 GDPR
- to correction according to Art. 16 GDPR
- for deletion according to Art. 17 GDPR
- to restriction of processing according to Art. 18 GDPR to objection from Art. 21 GDPR and the right on data portability from Art. 20 GDPR. The restrictions according to Sections 34 and 35 BDSG (new) apply to the right
- to information and the right to erasure.
You also have the right to complain to the responsible data protection authority (Art. 77 GDPR in conjunction with Section 19 BDSG (new)).
10. Obligation to provide data
You are not legally obliged to provide us with data. If you get in contact with us, we need your contact details (e.g. name and email address) in order to be able to answer you. If you want to conclude contracts with us, it is necessary that you provide us with the data that is required for the provision of our services. Which data this is in the individual case depends on the respective product or service which you commission from us. Without this data, it is not possible to use our services and it is not possible to conclude a contract with you.
11. Automated decision making and profiling
Automated decision-making and / or profiling within the meaning of Art. 22 Paragraph 1 and 4 GDPR do not take place.
12. Data protection officer
If you have any questions or comments on the subject of data protection, send us an email to email@example.com
We reserve the right to adjust the regulations of our data protection declaration from time to time. You can request older versions of the data protection declaration from us via the above email address.
Oststeinbek, July 4th, 2018