Notification Obligations

We hereby wish to provide you with comprehensive information about the processing of your data in our company and the data protection rights to which you are entitled under Article 13 of the European General Data Protection Regulation (EU GDPR).

The responsible data controller is

DEMA Präzisionsteile GmbH
Breitenloher Weg 4
91166 Georgensgmünd
Germany
E-mail: fromm(at)projekt29.de
Tel.: +49 (0) 9172-6945-0

The company's Data Protection Officer is

Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany
E-mail: c.volkmer(at)projekt29.de
Tel.: +49 (0) 941-2986930

We process the data that we have received from you in connection with the initiation or execution of a contract, on the basis of your consent, in connection with a job application you have submitted or on the basis of your status as our employee.

Personal data includes:

Your master/contact data, for customers this includes e.g. first and last name, address, contact details (e-mail address, telephone number, fax), bank details.

For applicants and employees, this includes, for example, first and last name, address, contact details (e-mail address, telephone number, fax), date of birth, details from curriculum vitae and job references, bank details, religious affiliation, photos.

For business partners, this includes, for example, the name of their legal representatives, company name, commercial register number, VAT number, company number, address, details of contact person (e-mail address, telephone number, fax), bank details.

In the case of visitors to our company, this includes name and signature.

In addition, we also process the following personal data:

• Information on the nature and content of contract data, order data, sales and invoice data, customer and supplier history as well as consulting documents,
• Advertising and sales data, Information from your electronic dealings with us (e.g. IP address, log-in data),
• Other data which we have received from you in connection with our business relationship (e.g. in customer meetings),
• Data that we generate ourselves from master/contact data and other data, such as through customer requirement analyses and customer potential analyses,
• Documentation of your declaration of consent for the receipt of e.g. newsletters,
• Photographs taken at events.

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act 2018, as last amended:

• To comply with (pre-)contractual obligations (Article 6 (1)(b) GDPR):
  In respect of the performance of contracts, your data is processed online or in one of our branches; in respect of the contracts relating to your employment, your data is processed in our company. Data is processed, in particular, prior to entering into business relationships and in the performance of contracts with you.

• To comply with legal obligations (Article 6 (1)(c) GDPR):
  It is necessary to process your data for the purpose of fulfilling various legal obligations, such as those obligations arising under the German Commercial Code or the German Fiscal Code

• To pursue legitimate interests (Article 6 (1)(f) GDPR):
  On the basis of a balance of interests, data may be processed beyond the actual performance of the contract to protect our legitimate interests, or those of third parties. Data may be processed to pursue legitimate interests in the following cases, for example:

• Based on your consent (Article 6 (1)(a) GDPR):
  Where you have given us your consent to process your data, e.g. to send you our newsletter, to publish photos etc. 

You have the right to object at any time to the use of your personal data for marketing purposes, either as a whole or for individual campaigns, without incurring any costs other than the transmission costs as charged at basic rates.

Under the statutory requirements of Section 7 (3) of the German Act Against Unfair Competition, we are entitled to use the e-mail address you provided when you entered into the contract in order to advertise directly our own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter.

If you do not wish to receive such recommendations from us by email, you can object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs as charged at basic rates. A message in text form will suffice. Every e-mail, of course, always contains an unsubscribe link.

Where we use a service provider to process orders, the protection of your data still remains our responsibility. All processors are contractually obliged to treat your data confidentially and to process it only within the scope of the provision of services. The processors we engage are provided with your data where they need it to perform their respective services. These include IT service providers that we need to operate and protect our IT system, as well as advertising and mailing list providers for our own advertising campaigns.

Where there is a statutory obligation, or in connection with legal proceedings, public authorities and courts as well as external auditors could be recipients of your data.

In addition, your data may be forwarded to insurance companies, banks, credit agencies and service providers prior to entering into contracts and executing contracts.

We process your data until the end of the business relationship or until expiry of the applicable legal retention periods (e.g. under the German Commercial Code, the German Fiscal Code or German Working Hours Act); in addition, we may store your data until the conclusion of any legal disputes for which the data is required as evidence.

As a general rule, we do not transfer any data to third countries. Data will only be transmitted in individual cases on the basis of an adequacy decision by the European Commission, standard contractual clauses, suitable guarantees or your express consent.

You have the right of access to information, rectification, erasure or restriction of the processing of your stored data at any time. You also have the right of objection to the processing, the right to data portability and the right to lodge complaints in accordance with the requirements of data protection law.

Right of access to information:
You have the right to request information from us as to whether and to what extent we process your data.

Right to rectification:
If the data concerning you that we process is incomplete or incorrect, you have the right to request at any time that we rectify or complete it.

Right to erasure:
You have the right to request that we erase your data where we process it unlawfully or if the processing encroaches disproportionately on your legitimate interests. Please note that there may be reasons that preclude immediate erasure, e.g. in the case of statutory retention obligations.

Irrespective of whether you exercise your right to erasure, we will erase your data immediately and in full, unless there is a contractual or statutory obligation to retain it.

Right to restriction of processing:
You have the right to request that we restrict the processing of your data where

• you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data;
• the processing is unlawful, but you oppose the erasure of the personal data and instead request the restriction of its use;
• we no longer need the personal data for the intended purpose, but you still require it for the establishment, exercise or defence of legal claims;
• you have objected to processing of the data.

Right to data portability
You have the right to request from us the data concerning you which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without hindrance from us, where

• we process this data on the basis of revocable consent given by you or to fulfil a contract between you and us, and
• the processing is carried out by automated means.

Where technically possible, you can ask us to transfer your data directly to another controller.

Right to object:
Where we process your data for legitimate reasons, you have the right to object to this data processing at any time; this would also apply to any profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or such processing is used for the establishment, exercise or defence of legal claims. You have the right to object at any time to the processing of your data for the purpose of direct advertising without giving reasons. 

Right to lodge a complaint:
If you believe that the processing of your data violates German or European data protection law, please contact us to clarify any questions. Naturally, you also have the right to contact the relevant supervisory authority, i.e. the regional office with responsibility for data protection.

If you wish to exercise any of the above rights against us, please contact our Data Protection Officer.  In cases of doubt, we may request additional information to confirm your identity.

The processing of your data is necessary in order to conclude or fulfil the contract that you have entered into with us. If you do not provide us with this data, we will have to refuse to enter into the contract or will no longer be able to perform an existing contract and will therefore have to terminate it. However, you are not obliged to give your consent to the processing of data that is not relevant or not legally required for the fulfilment of the contract.