Data Privacy Notice
This data privacy notice informs you how we process your personal data and about your rights.
1. Who is responsible for data protection?
RONDO FOOD GmbH & Co. KG, Magdeburger Str. 65, 47800 Krefeld, represented by the Management Dirk Wellen, Thilo Kühne and Josef Bosch, Telephone + 49 2151 4412-0, Email firstname.lastname@example.org
2. How do you contact our Data Protection Officer?
Helge Gräfen, +49 2151 4412-0, email@example.com
3. Which data do we process and how do we collect your data?
We only process personal data that we receive relating to our initial business contact (e.g. enquiry, initial consultation, telephone or email contact, offers) or relating to our business relationship with you. In this context the following data are processed: master data (e.g. name, address and contact data, bank details), tax data (tax number) or data from correspondence (e.g. written correspondence with you, minutes of consultations, facts relating to current projects or enquiries).
4. Why do we process your data (intended purpose of processing personal data) and on what legal basis?
a) Onthebasisofyourconsenttotheprocessingofyourpersonaldata(Art.6Paragraph1Letter a GDPR)
If and to what extent you have given your consent to the processing of your personal data, your consent is the legal basis for the processing of that data. This applies to e.g. the receipt of electronic customer information. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent, which you granted us before the application of the GDPR, i.e. before the 25 May 2018.
b) Compliance with contractual obligations (Art. 6 Paragraph 1 Letter b GDPR)
Your data is processed for the initiation or implementation of our contracts with you, that means for example for the provision of our services (e.g. maintenance and support, sale of products via the shop etc.). The specific purposes for which the data is processed is determined by the respective service and product descriptions and the corresponding contractual documents.
c) In the context of consideration of interests (Art. 6 Paragraph 1 Letter f GDPR)
Furthermore, your data can be used on the basis of consideration of interests, in order to ensure the protection of our legitimate interests or those of third parties. This occurs e.g. for the purpose of the continuing development of our services or systems and products, to ensure IT security and IT operations, for advertising, market and opinion research, to assert legal claims and for defence purposes in legal disputes, for the prevention and resolution of criminal offences and for risk management and fraud prevention.
d) On the basis of legal requirements (Art. 6 Paragraph 1 Letter c GDPR)
We are governed by various legal obligations which involve data processing. These include for example tax laws and statutory accounting, compliance with the requests and requirements of national or foreign regulatory or law enforcement authorities and compliance with tax monitoring and reporting obligations.
5. To whom do we pass on your data?
Any disclosure of your data only occurs within our organisation and only to those departments, which need this data in order to comply with contractual and legal obligations or in order to complete their respective tasks (e.g. Customer Service, IT, Sales and Marketing). Over and above that and without exception, external entities only receive your data if we have bound those entities by contract to their obligations as processors of that data (Art. 28 GDPR) and if they ensure that they will only process your data in accordance with our instructions. This includes for example service providers in the fields of customer services, billing, IT and logistics. We only pass on your data to persons or entities, who have issued us their consent for the transmission of data.
6. Transmission of data to third countries?
Your data will only be processed within the European Union and states within the European Economic Area (EEA). If otherwise, we will always inform you prior to any such transmission, including the right to object to any such data transmission at any time.
7. For what length of time do we save your data?
We only save your personal data for as long as is necessary in order to provide the relevant contractual services. This includes the duration of the actual business relationship and data processing in the context of the initiation and handling of contracts. In addition, we are governed by various retention and documentation obligations, including obligations stipulated in the German Commercial Code and fiscal requirements (German Tax Law). The time periods for retention and documentation are five to ten years. Ultimately, the duration for the retention of data is subject to the statutory periods of limitation, which are for example, in accordance with §§ 195ff. of the German Civil Code, as a general rule, three years and in certain cases up to 30 years.
8. Is there an obligation for the provision of personal data?
It is only necessary for you to provide personal data within the scope of our business relationship which are relevant for recording, carrying out and terminating the business relationship. Failing this, conclusion of a contract or execution of a contract is not possible.
9. To what extent is there an automated decision-making process in individual cases?
In order to establish and execute the business relationship, we do not use any automated decision-making process in accordance with Art. 22 GDPR. If we implement such a procedure in individual cases, we will inform you separately.
10. To what extent do we use your data for profiling?
We process your data in part using an automated procedure in order to evaluate certain personal criteria (so-called “profiling” in accordance with Art. 4 No. 4 GDPR). Profiling is implemented for example in order to establish your potential interest in our products and services. This evaluation is carried out for example using a statistical procedure incorporating current customer data and data from the past. We use the results in order to be able to address you in accordance with your specific requirements.
11. Which data protection rights do you have?
In accordance with the relevant statutory requirements, you have the right to request confirmation, as to whether we process your personal data and the right to information (Art. 15 GDPR, § 34 German Federal Data Protection Act) at any time. In addition, you have the right to the rectification (Art. 16 GDPR) and deletion of data (Art. 17 GDPR, § 35 German Federal Data Protection Act) and to restrict the processing of data (Art. 18 GDPR) and the right to raise objections against the processing of personal data (Art. 21 GDPR), and also to request revocation of consent to the processing of data or data transmission (Art. 20 GDPR). Furthermore, in the event of any breach of data protection, you have the right to file a complaint with a regulatory body (Art. 77 GDPR § 19 German Federal Data Protection Act).
12. Separate notice regarding your right of objection
1. Right of objection in individual cases
You have the right, for reasons which result from your specific situation, to file an objection against the processing of relevant personal data at any time, which is undertaken on the basis of Art. 6 Paragraph 1 Letter f GDPR (data processing on the basis of consideration of interests). This also applies to profiling based on this clause according to Art. 4 No. 4 GDPR which can for example take place for the purpose of customer consultation and customer service and for sales purposes. If you file an objection, your personal data will no longer be processed, unless RONDO has compelling legitimate grounds to do so in which your interests, rights and liberties outweigh, or processing serves the enforcement, execution or defence of legal entitlement.
2. Right of objection against the processing of data for the purposes of direct advertising
RONDO is also permitted to process your data, within the framework of the statutory stipulations, for direct advertising. You have the right to file an objection against the processing of relevant personal data for the purpose of such advertising at any time, without any costs apart from transmission costs at the base rate. This also applies to profiling insofar as it is in connection with such direct advertising. If you object to the processing of data for the purpose of direct advertising, your personal data will no longer be processed for this purpose. The objection can be made informally. You will find the contact details under point 1.