Data privacy statement

Who is responsible for the data processing?

The data controller in the definition of data protection regulations is

MEFA Befestigungs- und Montagesysteme GmbH
Schillerstr. 15
74635 Kupferzell

You can find more information about our company, details of the persons authorised to represent us, as well as further contact options in the imprint of our website.

Which of your data are processed by us? And for what purposes?

If we have received data from you, we will generally process them only for the purposes for which we have received or gathered them.
For example, you have given us a business card or you are a new contact at a customer or supplier. We will then create you in the relevant systems (email, ERP, CRM), e.g. to contact you or to communicate with you.
Data processing for other purposes comes only into consideration if the legal conditions required to this end according to Art. 6 (4) GDPR are met. Any duties to provide information pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR will of course be observed by us in this case.

What is the legal basis for the processing?

The legal basis for the processing of personal data is generally Art. 6 GDPR – unless there are even more specific legal regulations. Here, especially the following options come into consideration:
• The data processing for the fulfilment of contracts (Art. 6 (1) lit. b) GDPR)
• The data processing on the basis of an assessment of interests (Art. 6 (1) lit. f) GDPR)
• Data processing for the fulfilment of a legal obligation, (Art. 6 (1) lit. c) GDPR)
 
If personal data are processed on the basis of a consent received from you, you have the right to revoke your consent in relation to us at any time with effect for the future.
 
If we process data on the basis of an assessment of interests, you as the data subject have the right to object to the processing of personal data in consideration of the requirements of Art. 21 GDPR.

For how long are the data stored?

We process the data for as long as this is required for the respective purpose.
Insofar as legal retention obligations apply – e.g. under commercial or tax law – the relevant personal data will be stored for the duration of the retention obligation. After expiration of the retention obligation, it will be reviewed if there is a further requirement for the processing. If there is no requirement anymore, the data will be deleted.
At the end of a calendar year, we generally review data with regard to the necessity of further processing. Based on the quantity of the data, this review is done with regard to specific data categories or purposes of processing.
Of course, you can request confirmation from us at any time (see below) regarding the data that are stored about your person and, in case there is no need for them anymore, you can demand the deletion of the data or the restriction of the processing.

To what recipients do we transfer the data?

On principle, your personal data will be forwarded to third parties only if this is necessary for the performance of this contract concluded with you, or if the transfer is permissible based on an assessment of interests in the definition of Art. 6 (1) lit. f) GDPR, or we are legally obligated to transfer the data or if you have granted your consent.

Where are the data processed?

Your personal data are processed by us exclusively in computing centres in the European Union.

Your rights as “data subject”

You have the right to obtain confirmation regarding the personal data relating to you that are processed by us.

We ask for your understanding that when a request of confirmation is not submitted in writing, we may then request proof from you, if necessary, to verify that you are the person you say you are.

Furthermore, you have a right of correction or erasure or the restriction of the processing to the extent that this within your statutory right.

You also have a right to object to the processing within the scope of the legal requirements. The same applies to a right of data portability.

In particular pursuant to Art. 21 (1) and (2) GDPR, you have the right to object to the processing of your data in connection with direct advertising if the processing is based on an assessment of interests.

Our Data Protection Officer

MEFA Befestigungs- und Montagesysteme GmbH
Datenschutzbeauftragter
Schillerstraße 15
74635 Kupferzell

Tel.: +49 7944 649999

E-Mail: datenschutz@mefa.de

Right to lodge complaint

In accordance with Art. 77, you have the right to lodge complaint about us with a supervisory authority if you believe that we do not act in compliance with data protection regulations. The supervisory competent for us is the “State Officer for Data Protection and Freedom of Information” (https://www.baden-wuerttemberg.datenschutz.de/impressum/)

Status: 05/12/2019