Information of the Persons Concerned (prospective customers / customers / suppliers / partners / external service providers / employees of the client / partners / freelancers / agents according to Art. 13/14 GDPR)

With the following information, we would like to give you an overview of the processing of your personal data by our companies and your rights based on the provisions of the GDPR.
If you have any questions or need further information, write to the address of EKR Elektro-Kontakt Radebeul GmbH or to: info@ekr-radebeul.de. 

1. Name of the Responsible Companies

EKR Elektro-Kontakt Radebeul GmbH
Gartenstraße 44
D - 01445 Radebeul
Tel.: +49 (0) 351 83 97 99 97
Fax.: +49 (0) 351 830 30 05
E-Mail: info@ekr-radebeul.de

Amtsgericht: Dresden

Handelsregisternummer: HRB-Nr. 1164

2. Management
Dirk Porstendörfer / Markus Kraus, Tel.: +49 (0) 351 83 97 99 97, E-Mail: info@ekr-radebeul.de

3. Contact on Data Protection Questions
We want to point out, that do not have to declare a Data Protection Officer due tot he legal regulations. In data protection questions you can ask Mr. Stephan Weiss, Phone: +49 (0) 821 65085177, E-Mail: DS-WalterKraus@ub-weiss.com

4. Purpose of Data Collection, Processing or Use
EKR Elektro-Kontakt Radebeul GmbH is your specialist for current straps, earth straps, electromechanical spare parts and brush holders. We are focused on the design and manufacture of our products. As part of the Kraus Group, we operate internationally.

We process data for the following purposes:

• Processing of customer orders, information about order and delivery data
• Execution of development and production orders
• Carry out service and logistics services
• Recording of contract and contact data for order processing or order initiation
• Accounting, accounting, dunning and other internal procedures
• Organization and execution of purchasing and procurement
• Sales, marketing and correspondence with you for our business purposes
• Systematic maintenance of customers, suppliers and prospects
• Checking deliveries or goods according to international sanction lists or other legal recommendations
• If necessary, Settlement of liability claims and the assertion of any claims 

We process the before mentioned personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

a. For fulfillment of contract and pre-contractual measures (Article 6 para.1 s.1 lit. b GDPR)
The processing of personal data takes place for the provision of services in the context of the execution of our contracts with our customers or for the implementation of pre-contractual measures. Further details on the purpose of data processing can be found in the respective contract documents.

b. Due to legal obligations (Article 6 para.1 s.1 lit. c GDPR) or in the public interest (Article 6 para.1 s.1 lit. e GDPR)

c. On the basis of your consent (Article 6 para.1 s.1 lit. a GDPR)
Insofar as you have given us consent to the processing of personal data for specific purposes (eg, disclosure of data within the group / group or contacting advertisers), the legality of this processing is based on your consent.

d. in the context of balancing of interests (Article 6 para.1 s.1 lit. f GDPR)
The processing is in accordance with the legitimate interests of the person responsible or a third party gem. Art. 6 para. 1 p. 1 lit. f GDPR is required and no interests or fundamental rights and freedoms of the data subject prevail (for example for advertising of own products and / or services).

5. Affected Group of People
Prospects, customers and / or employees of customers, suppliers, prospects, partners, intermediaries, ext. Service providers and freelancers

6. Data or Data Categories
We process personal data that we receive from you in your role as representative / authorized representative of the legal entity.

Contact details (name, title, first name, telephone, fax, mobile phone, internet address, e-mail, position, company, company address, number of employees, sector, type of customer, telephone (company), fax (company), contact history and correspondence, data for offers and Initial business contact)

Billing data (order data, payment data (account information, bank, IBAN, BIC, name of the account holder, payment history (e.g., creditworthiness), data to fulfill the contractual obligations)

Data from orders / orders / contracts (address, contact details, contract contents)

7. Source of Personal Data
The personal data, which the responsible person receives from you within the scope of the respective contractual relationship, contact forms and questionnaires as well as through Exhibition Visits (direct survey), will be processed by her. 

In addition, the responsible person processes personally identifiable information that she has legitimately been able to obtain from publicly available sources (company directories, commercial registers, Internet, press, social networks, notices, events and trade fairs or personal talks and recommendations).

8. Recipients or Categories of Recipients
Internal bodies involved in the execution of the respective business processes, such as purchasing, sales, marketing, sales, administration, order processing, accounting and bookkeeping. Public sector bodies, such as social security and tax authorities, where priority legal interest exists.

External contractors (Data Processors in the purpose of fulfilling the above-mentioned tasks) (Article 4 in conjunction with Art. 28 GDPR).

In addition, we will only share your personal information if

• You have given us an express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, or
• according to Art. 6 para. 1 sentence 1 lit. c GDPR has a legal obligation to disclose, e.g. in the context of law enforcement or
• disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required for the purpose of asserting or defending legal claims or the exercise of rights, and it can not be assumed that the disclosure conflicts with an overriding, legitimate interest of the data subject.

9. Rule deadlines for the Deletion of the Data
The legislature has issued various retention periods and obligations. If the legal retention periods have expired, we will delete the respective personal data, as long as the personal data are not required to fulfill the contract or to initiate a contract, or if we no longer have a legitimate interest in the storage, or if you wish to make further storage according to Art. 6 para 1 p. a GDPR have consented.

Storage period of personal data:

• 10 years (UStG) (deletion after 10 years, storage period according to § 14 UStG.
• 10 years storage period acc. § 147 AO for tax-relevant documents.
• In the context of legal statute of limitations gem. §195ff BGB (evidence etc. can be up to 30 years, regular limitation period is 3 years).
• 6 years after contract end acc. the commercial law duty of retention from § 257 paragraph 4 HGB
• In addition, other legal obligations may exist for retention/storage of your data.

10. Planned data transfer to third countries outside the EU:
A transfer to third countries does not take place and is not planned.

11. Rights of the Person concerned:

- Right to confirmation
You have the right to ask us for confirmation of your personal data being processed.

- Right to information Art. 15 GDPR
You have the right at any time to receive free information from us about the personal data stored about you as well as a copy of this data.

- Right to rectification Art. 16 GDPR
You have the right to demand the correction of incorrect personal data concerning you. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

- Right of Deletion Art. 17 GDPR
You have the right to demand that the personal data concerning you be deleted without delay, provided that one of the reasons provided by law not applies and the processing is not required.

- Right to Limitate processing Art. 18 GDPR
You have the right to demand that we restrict processing if one of the legal requirements is met.

- Right to information Art. 19 GDPR
You have the right to notify all recipients who have been disclosed personal data of any rectification or deletion of personal data or a restriction of processing under Articles 16, 17 (1) and 18, unless this proves impossible or is associated with a disproportionate effort.

- Right of Data transferability Art. 20 GDPR
You have the right to receive personally identifiable information provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance by us, who has been provided with the personal data, provided that the processing is based on the consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR is based and processed by automated means, unless the processing is necessary for the performance of a task in the public interest or in the exercise of official authority which has been entrusted to us.

In addition, when exercising your right to data portability under Article 20 (1) of the GDPR, you have the right to obtain that your personal data are transmitted directly from one controller to another, where technically feasible and if not so the rights and freedoms of others are affected.

If you would like to exercise your rights, please contact the responsible person named above.

12. Right of Opposition
For reasons that arise from your particular situation, you have the right at any time against the processing of personal data relating to you, which pursuant to Art. 6 para. 1 p. 1 lit. e (data processing in the public interest) or Art. 6 para. 1 p. 1 f (data processing on the basis of a balance of interests) GDPR takes an objection. Please send an email to our data protection officer.

13. Right of Appeal
You have the right to complain to the Sächsischen Datenschutzbeauftragten, Devrientstr. 1 in 01067 Dresden (https://www.saechsdsb.de) about our processing of personal data.

14. Obligation to provide personal data
Within the framework of the respective contractual relationship, you must provide those personal data that are required for the conclusion of the respective contractual relationship and the fulfillment of the associated contractual obligations or for the collection of which the responsible person is obliged. Without this data, the contractual relationship can not be completed or fulfilled.

If it is contact information for sales reasons, you are not committed to the provision.

15. Automatic decision making and profiling
There is no automated decision-making or profiling.