Data protection information for customers and prospects of Mikrotron GmbH

(Status: December 2020)

 

according to Art. 13, 14, 21 of the General Data Protection Regulation (GDPR)

 

In the following we will inform you how and on what basis we process your perinsonal data and what rights you are entitled to.

 

1. Who is responsible for data processing?

Mikrotron GmbH(hereinafter referred to as the Company)

Represented by Mr. Walter Denk and Mr. Peter Dix, Landshuter Str. 20-22, 85716 Unterschleissheim

Phone: +49-89-726342-00

e-mail: info[at]mikrotron.de

 

You can reach our data protection officer at

e-mail: datenschutz[at]mikrotron.de

 

2. Processing purposes and legal basis

Your personal data will be processed in accordance with the provisions of the Basic Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and other relevant data protection regulations.


We process your data, in part also personal data, for the initiation, implementation and processing of contractual relationships, for the preparation of offers and invoicing as well as for contacting and information within the scope of customer service.

2.1 Consent (Art. 6 para. 1 lit. a DSGVO)

If you have given us your explicit consent to process personal data in certain cases, the respective consent is the legal basis for the processing mentioned there. You can revoke your consent at any time with effect for the future.


2.2 Execution of pre-contractual measures and fulfilment of contractual obligations (Art. 6 para. 1 lit. b DSGVO)

We process your personal data to carry out measures and activities within the scope of pre-contractual relations, in particular for contract negotiations. In addition, your personal data is processed for the purpose of implementing our contracts with you, in particular within the scope of our order processing and the use of your services.


2.3 Fulfillment of legal obligations (Art. 6 para. 1 lit. c DSGVO)

We process your personal data to the extent that this is legally required to fulfil commercial and tax law obligations to keep records or otherwise on the basis of legal norms. (e.g. according to the Money Laundering Act).


2.4 Safeguarding the legitimate interests of us or a third party (Art. 6 para. 1 lit. f DSGVO)

We may also process your personal data on the basis of a balancing of interests in order to safeguard the legitimate interests of us or a third party. This is done for the following purposes:

 

  • for comparison with European and international anti-terrorism lists, if this goes beyond the legal obligations;
  • for the further development of services and products and existing systems and processes;
  • for obtaining information and exchanging data with credit agencies, if this exceeds our economic risk;
  • for the disclosure of personal data within the scope of due diligence (catalog of obligations), e.g. in the event of the sale of a company;
  • for the enrichment of our data through the research and use of publicly accessible data;
  • for statistical evaluations or for market analyses;
  • for benchmarking;
  • for internal and external investigations and/or security checks;
  • for securing and exercising our domiciliary rights through appropriate measures (e.g. video surveillance);
  • for the enforcement of our rights and defense of unjustified claims in the event of a legal dispute with you.


3. Categories of personal data processed by us

The following categories of data are processed:

  • Personal data (e.g. name, nationality, profession/industry),
  • Contact details (e.g. address, e-mail address, telephone number),
  • Bank details (e.g. account number),
  • Control data (e.g. VAT ID number)
  • Information about your financial situation (e.g. credit rating data),
  • Register data and other data from public sources (e.g. Internet, media, press, commercial and association registers, register of residents, debtor registers, land registers).


4. Who receives your data?

Within our company, we pass on your personal data to those areas that require this data to fulfil contractual and legal obligations or to implement our legitimate interest.


In addition, the following departments may receive your data:

  • contract processors employed by us (Art. 28 DSGVO) and service providers for supporting activities, e.g. in the areas of IT services, logistics and printing services, archiving, document processing, data destruction, purchasing/procurement, media technology, tax and auditing, courier services;
  • public bodies and institutions if there is a legal or official obligation under which we are obliged to disclose data;
  • public bodies and institutions on the basis of our legitimate interest or the legitimate interest of the third party for the purposes mentioned in section 3.4 (e.g. to authorities, credit agencies, debt collection, lawyers, courts, experts)

 

5. Transfer of your data to a recipient in a third country or to an international organization

A data transfer to places outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) or to an international organization is currently not intended.

If necessary, it will only be made after separate information about the existence of an adequacy decision by the EU Commission on the level of data protection and only if it is necessary for the implementation or termination of the contract with you, if it is required by law (e.g. reporting obligations under tax law), if it is in the scope of a legitimate interest of us or a third party or if you have given us your consent.

The processing of your data in a third country may also be carried out in connection with the involvement of service providers in the context of order processing.

In the absence of a decision by the EU Commission on an adequate level of data protection in the country concerned, we will ensure, in accordance with Art. 46, 47 DSGVO, that your personal data, rights and freedoms are adequately protected and guaranteed at the recipient's premises by means of binding internal data protection regulations, corresponding contracts or other legally provided guarantees, unless there is a legal exception to the observance of an adequate level of protection in accordance with Art. 49 DSGVO.

 

6. Wie lange speichern wir Ihre Daten?

If necessary, we will process your personal data for the duration of our contractual relationship with you.


In addition, we are subject to various storage and documentation obligations, which result, among other things, from the legal framework. The periods of retention or documentation specified there are up to ten years after the end of the contract.


Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are usually three years, but in certain cases can be up to thirty years.

 

7.To what extent is there automated decision making in individual cases (including profiling)?

We do not use purely automated decision-making procedures in accordance with Article 22 DSGVO. Should we use these procedures in individual cases, we will inform you separately.


8. Scope of your obligations to provide us with your data

You need only provide us with the data required for the establishment and execution of a contractual relationship with us, which we are legally obliged to collect or entitled to collect in order to protect legitimate interests. You are not obliged to provide personal data. Without the provision of such data, however, the execution of the contract would not be properly possible, which could ultimately result in the refusal to conclude or the termination of a contract. If we request additional data from you, you will be informed separately of the voluntary nature of the information.


9. Rights of data subjects

You have the right:

  • to request information about your personal data processed by us according to art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the same;
  • in accordance with Art. 16 DSGVO, to immediately demand the correction of incorrect or incomplete personal data stored by us;
  • pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO;
  • in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
  • in accordance with Art. 7 para. 3 DSGVO, to revoke your consent to us at any time. As a result, we may no longer continue to process the data which was based on this consent in the future.


If you wish to assert one of these rights, please contact us or, if applicable, our data protection officer.

 

Information about your right of objection according to Art. 21 DSGVO

You have the right to object to the processing of personal data concerning you that is carried out on the basis of Art. 6 Par. 1 letter f DSGVO (data processing to safeguard legitimate interests) or Art. 6 Par. 1 letter e DSGVO (data processing for tasks in the public interest).


If you lodge an objection, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Information about your right of withdrawal according to Art. 7 para. 3 DSGVO

If we process your personal data for specific purposes on the basis of your consent, you have the right to revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO. After receipt of your revocation, we will stop processing your data for the purposes for which you have given us your consent. The legality of the processing before receipt of your revocation remains unaffected.


Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.


Objection to processing for direct marketing purposes

In the case of data processing for direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing.


If you object to processing for the purposes of direct marketing, we will no longer process your personal data for those purposes.


The objection can be made without formality and should be addressed to

Microtron GmbH

Landshuter Str. 20, 85716 Unterschleissheim

Phone: +49-89-726342-00

e-mail: info[at]mikrotron.de

 

11.Your right of appeal to the competent supervisory authority

You have a right of appeal to the data protection supervisory authority if you believe that the processing of your data violates the DSGVO (Art. 77 DSGVO). The supervisory authority responsible for us is:


Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Phone: +49 (0) 981 180093-0, E-Mail: poststelle@lda.bayern.de


Changes to this data protection information

We will revise this privacy policy in the event of changes in data processing or other occasions that make this necessary. You will always find the current version on our website at mikrotron.de/datenschutz.