Data protection

1. Introduction

The protection of your personal data is important to us. In this privacy policy, we inform you about the processing of personal data of business partners, in particular customers, suppliers, service providers and other partner companies, in accordance with the General Data Protection Regulation (GDPR).

2. responsible party

The data protection officer for Dietzel Hydraulik GmbH Leedenstraße 10 04262 Löbichau

is:

Sandro Swoboda
Adhoc Datenschutz GmbH
Im Bresselsholze 12
07819 Triptis
Phone: + 49 (0) 365 527 862 32
Email: sandro.swoboda@adhoc-datenschutz.de

Data protection coordinator is:

Roman Winkler
Phone: + 49 (0) 36602 140 553
Email: roman.winkler@dietzel-hydraulik.de

3. Purposes and legal bases of processing

We process the personal data of our business partners for the following purposes

• for the preparation, execution and processing of contractual relationships (e.g. preparation of quotations, order processing, invoicing)
• for communication in the context of the business relationship
• to fulfill legal obligations (e.g. commercial and tax regulations)
• to safeguard legitimate interests, e.g. to maintain business contacts or to enforce legal claims

The legal bases are:

• Art. 6 para. 1 lit. b GDPR (contract and pre-contractual measures)
• Art. 6 para. 1 lit. c GDPR (legal obligation)
• Art. 6 para. 1 lit. f GDPR (legitimate interest)

4. categories of data processed

Processed in particular:

• Contact data (name, business telephone number, e-mail address, position in the company)
• Communication data
• Contract data (e.g. orders, invoices, delivery data)
• Payment and billing data4
• Data on company affiliation

5. recipients of the data

Personal data may be processed internally by the relevant specialist departments. External recipients may be

• Service providers within the scope of order processing (e.g. IT service providers)
• Authorities and public bodies in the event of legal obligations
• Banks, tax consultants and lawyers
• Logistics or shipping service providers

Data will only be passed on if this is necessary to fulfill the contract, to protect our interests or due to legal obligations.

6. data transfer to third countries

Data will only be transferred to countries outside the EU/EEA if this is necessary to fulfill the contract, is required by law or if you have given us your consent. In these cases, we ensure that an appropriate level of data protection is guaranteed.

7. Storage period

Personal data will be stored for the duration of the business relationship and beyond in accordance with the statutory retention periods (e.g. § 257 HGB, § 147 AO - up to 10 years).

8. Rights of the data subjects

You have the right

• to information in accordance with Art. 15 GDPR
• to rectification of inaccurate data (Art. 16 GDPR)
• to erasure ("right to be forgotten", Art. 17 GDPR), provided there are no statutory retention obligations to the contrary
• to restriction of processing (Art. 18 GDPR)
• to object to the processing (Art. 21 GDPR), insofar as it is based on legitimate interests
• to data portability (Art. 20 GDPR)

To assert your rights, please contact us using the contact details above.

You also have the right to lodge a complaint with the competent data protection supervisory authority

Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
P.O. Box 900455
99107 Erfurt
Email: poststelle@datenschutz.thueringen.de
Phone: +49 (361) 57-3112900
Website: https://www.tlfdi.de

9. consent management

In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored.

The processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. Art. 6 para. 1 lit. c GDPR is therefore used as the legal basis for processing.

Cookiebot

We use the Cookiebot service on our website. The provider of the service is Usercentrics A/S, Havnegade 39 1058 Copenhagen, Denmark.

Further information can be found in the provider's data protection information at the following URL: https: //www.cookiebot.com/de/privacy-policy/.

10. obligation to provide data

The provision of personal data is necessary for the initiation, execution and processing of business relationships. Without this data, we may not be able to fulfill the contract.

11. Automated decision-making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.

12. changes to the privacy policy

We reserve the right to amend this privacy policy if necessary, in particular in the event of changes to legal regulations or our internal processes.