2.1. Extent of processing of personal data
If you contact us as a customer or prospective customer, we collect personal data. This happens when you are interested in our products, register for our checklists or newsletters, contact us by e-mail or telephone or if you are using our products and services as part of existing business relationships. In this context, we process personal data, first and last name, address, e-mail address, telephone number. In addition, we process contract data (e.g. subject matter, term, customer category) and payment data (e.g. bank details, payment history) of our customers, prospects and business partners for the provision of contractual services and for the purpose of service and customer care. In addition, we do not process personally identifiable information for marketing and advertising purposes.
2.2. Legal basis for the processing of personal data
If processing of personal data is based on the consent of the data subject, Art. 6 para. 1 lit. a US General Data Protection Regulation (GDPR) as legal basis. If personal data is processed in order to fulfill a contract with the data subject, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations to be carried out required, Art. 6 para. 1 lit. d GDPR as legal basis. We use data to protect the legitimate interests of our company or a third party and are the interests, fundamental rights and fundamental freedoms of the person.
2.3. Collaboration with processors and third parties
If, in the course of our processing, we disclose data to, convey to, or provide access to the data to other persons and companies (processors or third parties), this is done only on the basis of a legal license (e.g., transmission to payment service providers required for performance of the contract pursuant to Art. 6 (1) (b) GDPR), a consent, a legal obligation or based on our legitimate interests (e.g. the use of agents, web hosts). If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.
2.4. Transfers to third countries
If we process data in a third country (i.e. outside the United States of America) or in the context of the use of third party services, this will only be done if it is necessary to fulfill our (pre) contractual obligations, based on a consent a legal obligation or based on our legitimate interests. Data are processed under the reservation of legal or contractual permissions only if the conditions of Art. 44 et seq. GDPR are met: Thus, data is only processed if, for example: There are, for example, specific guarantees, such as official recognition of a level of data protection that complies with the US (e.g. "privacy shield") or compliance with officially recognized contractual obligations (so-called standard contractual clauses).
2.5. Data erasure and storage duration
As soon as the purpose of the storage is omitted, the personal data of a data subject are deleted or their processing is restricted ("blocked"). If United States of America or national regulations, laws or other regulations that we are subject require a longer period of storage, personal data will be stored for longer in accordance with this legislation than the original purpose required.
2.6. Data deletion on revocation
All data collected until cancellation will be deleted immediately - unless otherwise required by law.
