Data protection information for customers, interested parties and suppliers

In accordance with the provisions of the GDPR, we inform you about the processing of your personal data by the controller

CREFORM Technik GmbH

Wolfsburger Str. 10

34225 Baunatal

Phone: 0561 475967 0

E-Mail: info@creform.de

Our data protection officer is:

gds – Gesellschaft für Datenschutz Mittelhessen mbH Auf der Appeling 8 35043 Marburg-Cappel E-Mail: datenschutz@gdsm.de Phone: 06421 804 1310

Type of data categories and origin of the data

If we are in business contact with you, we process the information that we need in connection with the initiation or fulfillment of a contract. This may be general data about you or people in your company (name, address, contact details, etc.). We receive your data, for example, when you contact us, through master data entry forms, correspondence, telephone or verbal information, business cards. If we do not collect your data directly from you, we only process personal information from publicly accessible sources.

Purposes and legal bases of data processing Duration of data storage:

We process your personal data in accordance with the applicable legal provisions insofar as this is necessary for the establishment, execution and fulfillment of a contract and for the implementation of pre-contractual measures. If the provision of personal data is necessary for the initiation or execution of a contractual relationship or in the context of the execution of pre-contractual measures, processing is lawful pursuant to Art. 6 para. 1 lit. b GDPR. If you have given us your express consent to process personal data for specific purposes (e.g. disclosure to third parties, evaluation for marketing purposes, advertising), the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. If necessary and legally permissible, we also process your data beyond the actual contractual purposes to fulfill our own legal obligations in accordance with Art. 6 para. 1 lit. c GDPR. In addition, processing may be carried out to protect the legitimate interests of us or third parties in accordance with Art. 6 para. 1 lit. f GDPR. If this is required by law, we will inform you separately in this case, stating the legitimate interest.

Duration of data storage

We process and store your personal data – where necessary – for the duration of our business relationship or for the fulfillment of contractual purposes. This also includes the initiation and execution of a contract. In addition, we must retain data due to legal obligations: we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). As a rule, the periods prescribed therein are two to ten years. The storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.

Data transfer and transfer to a third country

In certain cases, we must disclose your personal data to third parties, for example to our bank if you receive a reimbursement or to the post office if we communicate with you by letter. If we use service providers who process your data on our behalf in accordance with our instructions, we have concluded a corresponding contract for commissioned data processing. Our administrators and processors have the technically necessary ability to access data processed by IT. They are strictly bound by our instructions and may not process the data for their own purposes. Your data is processed by us or on our behalf exclusively in Germany. A transfer to a third country is not intended.

Automated decision making

In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish, fulfill or implement the business relationship or for pre-contractual measures. In the event that we use these procedures in individual cases in the future, we will inform you of this separately or obtain your consent if this is required by law.

As the data subject, you have the following rights if the legal requirements are met:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure or restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right of revocation (Art. 7 para. 3 GDPR)
  • Right to lodge a complaint with the supervisory authority (Art. 77 GDPR),

If the data subject is of the opinion that the processing of personal data concerning him or her violates the GDPR, there is the possibility of lodging a complaint with a supervisory authority. The contact details of the supervisory authority responsible for the federal state of Hesse are as follows The Hessian Commissioner for Data Protection and Freedom of Information P.O. Box 3163 65021 Wiesbaden