Our obligation to inform

Information on how we handle your data and about your rights – pursuant to Art. 13, 14 and 21 of the EU General Data Protection Regulation (GDPR)

With the following we would like to give you an overview of how we process your personal data and inform you about your resulting rights. The detailed data we process and the way we use it depends to a large extent on the services requested or agreed upon in each case. Therefore, not all of the following statements may apply to you.

Furthermore, this privacy statement may be updated from time to time. You can always find the latest version on our website at Privacy.

Who is responsible for data processing and who can I contact?
Responsible:
Richter Spielgeräte GmbH
You can reach our company privacy officer at:
datenschutz@richter-spielgeraete.de
Phone: +49 8052 1798-0

Type of personal data collected
We process the following personal data that we receive from you within the scope of our business relationship:

Company name with legal form and address
Titles and names
Telephone numbers
Fax numbers
Email addresses
Credit report
Pseudonymised IP addresses

We process your data for the following purposes and on the following legal basis
We process personal data in accordance with the provisions of the EU Data Protection Basic Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

In order to fulfil contractual obligations (Art. 6 (1) (b) GDPR)
Data is processed for the purpose of implementation:
of the purchase contract

Based on legal requirements (Art. 6 (1) (c) GDPR)
We have to comply with various legal obligations that entail data processing. These include for example:

Tax laws and statutory accounting
Fulfilment of control and reporting obligations under tax laws

In addition, the disclosure of personal data may become necessary in the course of governmental/judicial action for the purpose of gathering evidence, prosecuting crimes or enforcing civil claims.

In the context of balancing of interests (Art. 6 (1) (f) GDPR)
If necessary, we process your data beyond the actual fulfilment of the contract to protect our own legitimate interests or those of third parties. Examples of such cases are:

Exchange of information with your responsible sales representatives (transmission)
Credit assessment for contract fulfilment based exclusively on order-related production
To identify the link that led you to our homepage

Who will receive my data?

In-house
Employees so that they can contact you and cooperate with you based on your contract with us (incl. the fulfilment of pre-contractual measures)

Within the scope of order processing
Your data may be passed on to service providers who work for us as data processors:

Support or maintenance of EDP or IT applications
Data destruction

All service providers are bound by contract and in particular obliged to treat your data confidentially.

Other third parties
Data will only be passed on to recipients outside our company in compliance with the applicable data protection regulations. Recipients of personal data may be, for example:

Public bodies and institutions (e.g. financial or criminal prosecution authorities) in the event of a statutory or official obligation
Credit and financial service providers (settlement of payment transactions)
Tax consultants or business and payroll tax and tax auditors (statutory audit mandate)
Commercial agents
Forwarders

Will data be transferred to a third country or to an international organisation?
Your data will only be processed within the European Union and countries within the European Economic Area (EEA).

How long will my data be stored?
We will process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. If the data are no longer necessary for the fulfilment of contractual or legal obligations, they will be deleted regularly.

Exceptions may apply to the above

As far as legal storage obligations are to be complied with, e.g. the German Commercial Code (HGB) and the Fiscal Code (AO). The time limits for storage and documentation specified there are generally six to ten years;
for the preservation of evidence within the scope of statutory limitation rules; According to §§ 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereas the regular limitation period is 3 years;
Since the lifetime of many devices exceeds the legal retention period, order data will be stored beyond this period to continue to record the exact technical specifications and changes necessary for proof of safety, e.g. in the event of an accident.
The line of credit established for you will be deleted at the end of each year, unless there are ongoing orders for which this is required; in such cases the line will not expire until the next turn of the year.

If the data processing takes place in our own legitimate interest or that of a third party, the personal data will be deleted as soon as this interest no longer exists. The above exceptions shall apply.

What data protection rights do I have?
You have the right of access under Article 15 GDPR, the right of rectification under Article 16 GDPR, the right of erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

Restrictions according to §§ 34 and 35 of the German Federal Data Protection Act (BDSG) may apply to the right to access and the right to erasure.

In addition, you have the right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG).
The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (Bayrisches Landesamt für Datenschutzaufsicht, BayLDA)

Is there an obligation to provide data?
Within the scope of the contractual relationship, you must provide the personal data that (a) are required for the commencement, performance and termination of the contractual relationship and for the fulfilment of the associated contractual obligations or (b) we are legally obliged to collect. Without this information, we will generally not be able to enter into or execute the contract with you.

Information about your right to object pursuant to Article 21 of the General Data Protection Regulation (GDPR)

Right to object in individual cases
You have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) (f) GDPR (data processing on the basis of a balancing of interests) for reasons arising from your particular situation; this includes profiling based on this provision within the meaning of Article 4 (4) GDPR.

If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Addressee of an objection
The objection can be made without formality with the subject “Objection” – please state your name, address and date of birth and send to:

datenschutz@richter-spielgeraete.de
Phone: +49 8052 1798-0

This template was created with the free customer information letter generator of activeMind AG.