Information on data protection regarding our processing of personal data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Dear customer, dear contractual partner,
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services. In order to ensure that you are fully informed about the processing of your personal data in the context of the fulfilment of a contract or the implementation of pre-contractual measures, please take note of the following information.
1. RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW
PAGES MEDIA PRODUCTIONS GmbH
Bülowstr. 22
81679 Munich
Germany
E-mail: info@pagesmedia.de
Represented by: Tom Niedermayr
2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
Jörg Hermann, external data protection officer
jmh datenschutzberatung
Freibadstr. 30
81543 Munich
Germany
E-mail: info@jmh-datenschutz.de
3. PURPOSES AND LEGAL BASES OF PROCESSING
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as amended:
For the fulfilment of (pre-)contractual obligations (Art. 6 para. 1 lit. b GDPR)
Your data is processed for contract processing online or in one of our branches, for contract processing for your employees in our company. The data is processed in particular when initiating business and when executing contracts with you.
For the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR)
The processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g. from the German Commercial Code or the German Fiscal Code.
For the protection of legitimate interests (Art. 6 para. 1 lit.f GDPR)
Based on a balancing of interests, data processing may take place beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties. Data processing to protect legitimate interests takes place in the following cases, for example:
- Advertising or marketing: Under the legal requirements of Section 7 (3) UWG, we are authorised to use the email address you provided when concluding the contract for direct advertising for our own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. You can object to the use of your personal data for advertising purposes as a whole or for individual measures at any time.
- Measures for business management and further development of services and products
- In the context of legal prosecution
Within the scope of your consent (Art. 6 para. 1 lit. a GDPR)
If you have given us your consent to process your data, e.g. to send you our newsletter, etc., we will process your data accordingly.
4. CATEGORIES OF PERSONAL DATA
We only process data that is related to the establishment of the contract or pre-contractual measures.
For customers, this includes, for example, first name and surname, address, contact details (email address, telephone number, fax), bank details, image and video recordings.
For business partners, this includes, for example, the name of their legal representative, company, commercial register number, VAT number, company number, address, contact details (e-mail address, telephone number, fax), bank details.
5. SOURCES OF THE DATA
We process personal data that we receive from you in the context of establishing contact or establishing a contractual relationship or in the context of pre-contractual measures.
6. TRANSMISSION OF YOUR PERSONAL IMFORMATION
We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
Your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet service providers and providers of customer management systems and software. These include Adobe Inc. with the application frame.io and our CRM system Teamleader. Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information.
7. TRANSFER TO A THIRD COUNTRY
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organisation if this is necessary for the processing and thus fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent.
8. DURATION OF DATA STORAGE
Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfilment of contractual purposes. This also includes the initiation and fulfilment of a contract.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods stipulated there are two to ten years.
Finally, the storage period is also based on the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
9. YOUR RIGHTS
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements.
Right of objection
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to processing for the purpose of such advertising. This also applies to profiling insofar as it is associated with this direct advertising. If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.
To safeguard your rights, you can contact us using the contact details provided in section 1.
10. NECESSITY OF THE PROVISION OF PERSONAL DATA
The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.