Duty to provide information pursuant to Art. 13 GDPR.

The pro­tec­tion of your per­so­nal data is of par­ti­cu­lar con­cern to us. We the­r­e­fo­re pro­cess your per­so­nal data („data“ for short) exclu­si­ve­ly on the basis of the sta­tu­to­ry pro­vi­si­ons. With this pri­va­cy poli­cy, we wish to inform you com­pre­hen­si­ve­ly about the pro­ces­sing of your data in our com­pa­ny and the data pro­tec­tion claims and rights to which you are entit­led within the mea­ning of Art. 13 of the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­ti­on (EU GDPR).

1. who is responsible for data processing and who can you contact?

Respon­si­ble for:

FUCHS Euro­po­les GFK GmbH

Euro­po­les-Stra­ße 1 – 92318 Neu­markt
Pho­ne: +49 9181 896–0
E‑mail: gfk@fuchs-soehne.de
VAT ID: DE 815 812 202
Com­mer­cial regis­ter: Nurem­berg Local Court HRB 36259
Mana­ging Direc­tor: Con­rad Fuchs
Respon­si­ble for con­tent accor­ding to § 55 para. 2 RStV: Con­rad Fuchs

The com­pa­ny data pro­tec­tion offi­cer is:

Mr. Tho­mas Wan­ju­ra
Pro­jekt 29 GmbH & Co. KG
Osten­gas­se 14
93047 Regens­burg
anfrage@projekt29.de
Tel.: +49 (0) 941 2986930

2. which data is processed and from which sources does this data originate?

We pro­cess the data that we have recei­ved from you in the con­text of con­tract initia­ti­on or pro­ces­sing, on the basis of con­sent or in the con­text of your appli­ca­ti­on to us or in the con­text of your employ­ment with us.

Per­so­nal data includes the fol­lo­wing

Your master/contact data, for cus­to­mers this includes e.g. first name and sur­na­me, address, cont­act details (e‑mail address, tele­pho­ne num­ber, fax), bank details.

For appli­cants and employees, this includes, for exam­p­le, first and last name, address, cont­act details (e‑mail address, tele­pho­ne num­ber, fax), date of birth, data from CV and refe­ren­ces, bank details, reli­gious affi­lia­ti­on, pho­to­graphs.

For busi­ness part­ners, this includes, for exam­p­le, the name of their legal repre­sen­ta­ti­ve, com­pa­ny, com­mer­cial regis­ter num­ber, VAT num­ber, com­pa­ny num­ber, address, cont­act details (e‑mail address, tele­pho­ne num­ber, fax), bank details.

For visi­tors to our com­pa­ny, this includes name and signa­tu­re.

For jour­na­lists, this includes first and last name, e‑mail address, fax num­ber.

For com­pe­ti­ti­on par­ti­ci­pan­ts, this includes first and last name, e‑mail address.

In addi­ti­on, we also pro­cess the fol­lo­wing other per­so­nal data:

  • Infor­ma­ti­on on the type and con­tent of con­tract data, order data, sales and docu­ment data, cus­to­mer and sup­pli­er histo­ry and con­sul­ting docu­ments,
  • Adver­ti­sing and sales data,
  • Infor­ma­ti­on from your elec­tro­nic com­mu­ni­ca­ti­on with us (e.g. IP address, log-in data),
  • other data that we have recei­ved from you in the cour­se of our busi­ness rela­ti­onship (e.g. in dis­cus­sions with cus­to­mers),
  • Data that we gene­ra­te our­sel­ves from mas­ter / cont­act data and other data, e.g. by means of cus­to­mer demand and cus­to­mer poten­ti­al ana­ly­ses,
  • the docu­men­ta­ti­on of your decla­ra­ti­on of con­sent for the receipt of e.g. news­let­ters.
  • Pho­to­graphs taken as part of events.

3. for what purposes and on what legal basis is the data processed?

We pro­cess your data in accordance with the pro­vi­si­ons of the Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR) and the Fede­ral Data Pro­tec­tion Act 2018 as amen­ded:

  • for the ful­fill­ment of (pre-)contractual obli­ga­ti­ons (Art. 6 para. 1 lit. b GDPR): The pro­ces­sing of your data is car­ri­ed out for con­tract pro­ces­sing online or in one of our bran­ches, for the con­tract pro­ces­sing of your employee in our com­pa­ny. The data is pro­ces­sed in par­ti­cu­lar when initia­ting busi­ness and when exe­cu­ting con­tracts with you.
  • for the ful­fill­ment of legal obli­ga­ti­ons (Art. 6 para. 1 lit.c GDPR): Pro­ces­sing of your data is neces­sa­ry for the pur­po­se of ful­fil­ling various legal obli­ga­ti­ons, e.g. from the Ger­man Com­mer­cial Code or the Ger­man Fis­cal Code.
  • for the pro­tec­tion of legi­ti­ma­te inte­rests (Art. 6 para. 1 lit.f GDPR): Based on a balan­cing of inte­rests, data pro­ces­sing may take place bey­ond the actu­al ful­fill­ment of the con­tract to safe­guard legi­ti­ma­te inte­rests of us or third par­ties. Data pro­ces­sing to safe­guard legi­ti­ma­te inte­rests takes place, for exam­p­le, in the fol­lo­wing cases
    • Adver­ti­sing or mar­ke­ting (see no. 4),
    • Mea­su­res for busi­ness manage­ment and fur­ther deve­lo­p­ment of ser­vices and pro­ducts;
    • Main­tai­ning a group-wide cus­to­mer data­ba­se to impro­ve cus­to­mer ser­vice
    • in the con­text of legal pro­se­cu­ti­on
    • Sen­ding of non-sales-pro­mo­ting infor­ma­ti­on and press releases.
  • within the scope of your con­sent (Art. 6 para. 1 lit. a GDPR): If you have given us your con­sent to pro­cess your data, e.g. to send you our news­let­ter, publish pho­tos, com­pe­ti­ti­ons, etc.

4. processing of personal data for advertising purposes

You can object to the use of your per­so­nal data for adver­ti­sing pur­po­ses at any time, eit­her as a who­le or for indi­vi­du­al mea­su­res, wit­hout incur­ring any cos­ts other than the trans­mis­si­on cos­ts accor­ding to the basic rates.

Under the legal requi­re­ments of Sec­tion 7 (3) UWG, we are entit­led to use the e‑mail address you pro­vi­ded when con­clu­ding the con­tract for direct adver­ti­sing for our own simi­lar goods or ser­vices. You will recei­ve the­se pro­duct recom­men­da­ti­ons from us regard­less of whe­ther you have sub­scri­bed to a news­let­ter.

If you do not wish to recei­ve such recom­men­da­ti­ons from us by e‑mail, you can object to the use of your address for this pur­po­se at any time wit­hout incur­ring any cos­ts other than the trans­mis­si­on cos­ts accor­ding to the basic rates. A mes­sa­ge in text form is suf­fi­ci­ent for this. Of cour­se, every e‑mail always con­ta­ins an unsub­scri­be link.

5 Who receives my data?

If we use a ser­vice pro­vi­der in the sen­se of com­mis­sio­ned pro­ces­sing, we nevert­hel­ess remain respon­si­ble for the pro­tec­tion of your data. All pro­ces­sors are con­trac­tual­ly obli­ged to tre­at your data con­fi­den­ti­al­ly and to pro­cess it only within the scope of pro­vi­ding the ser­vice. The pro­ces­sors com­mis­sio­ned by us will recei­ve your data if they requi­re the data to per­form their respec­ti­ve ser­vices. The­se are, for exam­p­le, IT ser­vice pro­vi­ders that we requi­re for the ope­ra­ti­on and secu­ri­ty of our IT sys­tem as well as adver­ti­sing and address publishers for our own adver­ti­sing cam­paigns.

Your data is pro­ces­sed in our cus­to­mer data­ba­se. The cus­to­mer data­ba­se sup­ports the enhance­ment of the data qua­li­ty of the exis­ting cus­to­mer data (dupli­ca­te cle­an­sing, moved/deceased indi­ca­tor, address cor­rec­tion) and enables the enrich­ment with data from public sources.

This data is made available to the Group com­pa­nies if neces­sa­ry for con­tract pro­ces­sing. Cus­to­mer data is stored sepa­ra­te­ly for each com­pa­ny, with our parent com­pa­ny acting as a ser­vice pro­vi­der for the indi­vi­du­al par­ti­ci­pa­ting com­pa­nies.

In the event of a legal obli­ga­ti­on and in the con­text of legal pro­se­cu­ti­on, aut­ho­ri­ties and courts as well as exter­nal audi­tors may be reci­pi­ents of your data.

In addi­ti­on, insu­rance com­pa­nies, banks, cre­dit agen­ci­es and ser­vice pro­vi­ders may be reci­pi­ents of your data for the pur­po­se of con­tract initia­ti­on and ful­fill­ment.

6. how long will my data be stored?

We pro­cess your data until the end of the busi­ness rela­ti­onship or until the expiry of the appli­ca­ble sta­tu­to­ry reten­ti­on peri­ods (e.g. from the Ger­man Com­mer­cial Code, the Ger­man Fis­cal Code or the Working Hours Act); in addi­ti­on, until the end of any legal dis­pu­tes in which the data is requi­red as evi­dence.

7. is personal data transferred to a third country?

In prin­ci­ple, we do not trans­fer any data to a third coun­try. In indi­vi­du­al cases, data will only be trans­fer­red on the basis of an ade­quacy decis­i­on by the Euro­pean Com­mis­si­on, stan­dard con­trac­tu­al clau­ses, sui­ta­ble gua­ran­tees or your express con­sent.

8 What data protection rights do I have?

You have the right to infor­ma­ti­on, cor­rec­tion, dele­ti­on or rest­ric­tion of the pro­ces­sing of your stored data, a right to object to the pro­ces­sing as well as a right to data por­ta­bi­li­ty and to lodge a com­plaint in accordance with the requi­re­ments of data pro­tec­tion law.

Right to infor­ma­ti­on:

You can request infor­ma­ti­on from us as to whe­ther and to what ext­ent we pro­cess your data.

Right to rec­ti­fi­ca­ti­on:

If we pro­cess your data that is incom­ple­te or incor­rect, you can request that we cor­rect or com­ple­te it at any time.

Right to era­su­re:

You can demand that we era­se your data if we pro­cess it unlawful­ly or if the pro­ces­sing dis­pro­por­tio­na­te­ly inter­fe­res with your legi­ti­ma­te pro­tec­tion inte­rests. Plea­se note that the­re may be reasons that pre­vent imme­dia­te era­su­re, e.g. in the case of sta­tu­to­ry reten­ti­on obli­ga­ti­ons.

Irre­spec­ti­ve of the exer­cise of your right to era­su­re, we will era­se your data imme­dia­te­ly and com­ple­te­ly, pro­vi­ded that the­re is no legal or sta­tu­to­ry reten­ti­on obli­ga­ti­on to the con­tra­ry.

Right to rest­ric­tion of pro­ces­sing:

You can request that we rest­rict the pro­ces­sing of your data if

  • you con­test the accu­ra­cy of the data, for a peri­od enab­ling us to veri­fy the accu­ra­cy of the data.
  • the pro­ces­sing of the data is unlawful, but you refu­se to have it era­sed and ins­tead request that the use of the data be rest­ric­ted,
  • we no lon­ger need the data for the inten­ded pur­po­se, but you still need this data to assert or defend legal claims, or
  • you have objec­ted to the pro­ces­sing of the data.

Right to data por­ta­bi­li­ty:

You may request that we pro­vi­de you with the data you have pro­vi­ded to us in a struc­tu­red, com­mon­ly used and machi­ne-rea­da­ble for­mat and that you may trans­mit this data to ano­ther con­trol­ler wit­hout hin­drance from us, pro­vi­ded that

  • we pro­cess this data on the basis of a revo­ca­ble con­sent given by you or for the per­for­mance of a con­tract bet­ween us, and
  • this pro­ces­sing is car­ri­ed out by auto­ma­ted means.

If tech­ni­cal­ly fea­si­ble, you can request that we trans­fer your data direct­ly to ano­ther con­trol­ler.

Right of objec­tion:

If we pro­cess your data for legi­ti­ma­te inte­rests, you can object to this data pro­ces­sing at any time; this would also app­ly to pro­fil­ing based on the­se pro­vi­si­ons. We will then no lon­ger pro­cess your data unless we can demons­tra­te com­pel­ling legi­ti­ma­te grounds for the pro­ces­sing which over­ri­de your inte­rests, rights and free­doms or the pro­ces­sing ser­ves the estab­lish­ment, exer­cise or defen­se of legal claims. You can object to the pro­ces­sing of your data for the pur­po­se of direct adver­ti­sing at any time wit­hout giving reasons.

Right of appeal:

If you are of the opi­ni­on that we are vio­la­ting Ger­man or Euro­pean data pro­tec­tion law when pro­ces­sing your data, plea­se cont­act us so that we can cla­ri­fy any ques­ti­ons you may have. Of cour­se, you also have the right to cont­act the super­vi­so­ry aut­ho­ri­ty respon­si­ble for you, the respec­ti­ve sta­te office for data pro­tec­tion super­vi­si­on.

If you wish to assert one of the­se rights against us, plea­se cont­act our data pro­tec­tion offi­cer. In case of doubt, we may request addi­tio­nal infor­ma­ti­on to con­firm your iden­ti­ty.

9. am I obliged to provide data?

The pro­ces­sing of your data is neces­sa­ry for the con­clu­si­on or ful­fill­ment of the con­tract you have ente­red into with us. If you do not pro­vi­de us with this data, we will gene­ral­ly have to refu­se to con­clude the con­tract or will no lon­ger be able to per­form an exis­ting con­tract and will the­r­e­fo­re have to ter­mi­na­te it. Howe­ver, you are not obli­ged to give your con­sent to data pro­ces­sing with regard to data that is not rele­vant or legal­ly requi­red for the ful­fill­ment of the con­tract.

Sta­tus Octo­ber 2024