Data Protection Informations

For interested parties and new customers and other affected parties

With the following information we would like to give you an overview of the processing of your personal data by us and your rights under data protection law (DS-GVO/ BDSG). Which data is processed in detail and how it is used depends largely on the services requested or agreed. Therefore not all parts of this information will apply to you. Who is responsible for data processing and who can I contact?

The responsible body is the:

Plantamedium GmbH
Everswinkelerstraße 7
48231 Warendorf
Germany
Tel. 02581- 92790- 0
info@plantamedium.de

You can reach our operational data protection officer under:

Plantamedium GmbH
Everswinkelerstraße 7
48231 Warendorf
Datenschutz@plantamedium.de

1. What sources and data do we use?

We process personal data that we receive from our customers or other affected parties within the scope of our business relationship. In addition, we process – to the extent necessary for the provision of our services – personal data which we obtain from publicly accessible sources (e.g. trade and association registers, press, Internet) or which is transmitted to us by other companies of our group members or by other third parties (e.g. a credit reference agency).

Relevant personal data are personal data (name, address and other contact data, date and place of birth as well as nationality), identification data (e.g. identity card data). In addition, this can also include order data (e.g. payment order), data from the fulfilment of our contractual obligations (e.g. turnover data in payment transactions), information about your financial situation (e.g. creditworthiness data), as well as other data comparable with the aforementioned categories.

2. What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU Basic Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG).

a. for the performance of contractual obligations (Art. 6 para. 1 b DSGVO)

The processing of data is carried out to provide our production and services within the framework of the execution of our contracts with our customers or to carry out pre-contractual measures, which are carried out on request. The purposes of the data processing depend primarily on the concrete product or the concrete service. For further details on data processing purposes, please refer to the relevant contractual documents and terms and conditions.

b. as part of the balancing of interests (Art. 6 para. 1 f DSGVO)

If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties:

•     Measures for business management and further development of services and products,
•     Advertising unless you have objected to the use of your data,
•     Assertion of legal claims and defence in legal disputes,
•     Ensuring the IT security and IT operations of our company,
•     Prevention and investigation of criminal offences,
•     Video surveillance for the protection of the house right, for the collection of evidence with robberies
•     Measures for building and plant security (e.g. access controls),
•     Measures to secure the householder’s title,
•     Risk management in the company

c. on the basis of your consent (Art. 6 para. 1 a DSGVO)

If you have given us permission to process personal data for specific purposes (e.g. newsletter dispatch, etc.), the legality of this processing on the basis of your consent is given. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. The revocation of a consent only takes effect for the future and does not affect the legality of the data processed until the revocation.

3. Who gets my data?

Within the company, those departments that need your data to fulfil our contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes. These are companies in the categories IT services, logistics, printing services, telecommunications, consulting as well as sales and marketing.

4. Is data transferred to a third country or to an international organisation?

A data transfer to places in states outside the European Union (so-called third states) takes place, insofar as:

• it is necessary for the execution of your orders (e.g. payment orders),
• it is required by law (e.g. tax reporting obligations) or
• you have given us your consent.

Furthermore, a transfer to offices in third countries is planned in the following cases:

• If this is necessary in individual cases, your personal data may be transferred to an IT service provider in the USA or another third country in order to ensure the IT operation of the
• company in compliance with the European level of data protection.
• Personal data of interested parties in our products and services can also be processed in the USA within the framework of a CRM system with their consent.
• With the consent of the person concerned or on the basis of legal regulations to combat money laundering, terrorist financing and other criminal acts as well as within the framework of a weighing of interests, in individual cases personal data (e.g. legitimation data) are transmitted in compliance with the data protection level of the European Union.

5. How long will my data be stored?

We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. It should be noted that our business relationship is a continuing obligation, which is intended to last for years.

If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their – temporary – further processing is necessary for the following purposes:

• Fulfilment of commercial and tax retention obligations, which may result, for example, from: Commercial Code (HGB), Tax Code (AO), Money Laundering Act (GwG). The time limits specified there for storage and documentation are usually two to ten years.
• Preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 ff of the German Civil Code (BGB) these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

6. What data protection rights do I have?

Every data subject has the right of access under Article 15 DSGVO, the right of rectification under Article 16 DSGVO, the right of cancellation under Article 17 DSGVO, the right of limitation of processing under Article 18 DSGVO, the right to object under Article 21 DSGVO and the right to data transfer under Article 20 DSGVO. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with § 19 BDSG).

7. Is there an obligation for me to provide data?

As part of our business relationship, you must provide the personal information necessary to establish, conduct and terminate a business relationship and to fulfill the obligations associated therewith.
contractual obligations or to whose collection we are legally obliged. Without this data, we will generally not be in a position to conclude a contract with you, to execute it and to terminate it.

Information about your right of objection according to Article 21 (Data Protection Basic Regulation) DSGVO

1. Right of objection in individual cases

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Article 6 (1e) DSGVO (data processing in the public interest) and Article 6 (1f) DSGVO (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) DSGVO.

2. Right to object to the processing of data for direct marketing purposes

In individual cases, we process your personal data in order to operate direct advertising. You have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.

If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes.

Plantamedium GmbH
Ivonne Buchholz
Everswinkeler Str. 7
48231 Warendorf
Germany
Or by e-mail to: info@plantamedium.de.