Customer information pursuant to Art. 13 GDPR

In the following we inform you about the collection of personal data when using our websites including our web shop (customer portal). Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

 

1 Person responsible for data processing

Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is

 

C.E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg
Germany

and

 

F. Dau & Sohn GmbH
Bredowstraße 31
22113 Hamburg
Germany

Managing directors: Peter Börner, Dorothée Kuhnert, Harold Lienau

 

Phone: +49 40 731 206-0
Fax: +49 40 731 206-10
Mail: sales@treffpack.de

(see our Legal Notice).

Customer information pursuant to Art. 13 GDPR

 

Information about the collection and processing of your personal data

Care and transparency are the basis for a trusting cooperation with our customers. We therefore inform you about how we process your data and how you can exercise the rights to which you are entitled under the General Data Protection Regulation (GDPR). Which personal data we process and for what purpose depends on the respective contractual relationship.

 

1 Who is responsible for data processing?

The person responsible is:

 

C.E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg
Germany

 

and

 

F. Dau & Sohn GmbH
Bredowstraße 31
22113 Hamburg
Germany

 

Managing directors: Peter Börner, Dorothée Kuhnert, Harold Lienau

 

Phone: +49 40 731 206-0
Fax: +49 40 731 206-10
Mail: sales@treffpack.de

(see our Legal Notice).

 

2 How do you reach the data protection officer?

 

You can reach our data protection officer at:
C.E. Gätcke's Glas Gesellschaft mbH and F. Dau & Sohn GmbH respectively
data protection officer
Bredowstraße 31
22113 Hamburg
Germany
datenschutz@treffpack.de

 

3 Which of your personal data is used by us?

If you have an enquiry, have us prepare an offer or conclude a contract with us, we process your personal data. In addition, we process your personal data to fulfil legal obligations, to safeguard a legitimate interest or on the basis of your consent.

 

4 What sources do the data originate from?

We process personal data that we receive from our customers, service providers and suppliers.

 

5 For what purposes do we process your data and on what legal basis?

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other relevant laws.

 

5.1 For the performance of a contract (Art. 6 para. 1 b GDPR)

We use your personal data to carry out the order.

Within this contractual relationship, we will process your data in particular for the performance of the following activities:

Contract-related establishment of contact, contract management, ongoing customer service, customer service, assertion of warranty claims, claims management, contract termination management.

Further information on the purposes of data processing can be found in the respective contract documents and general terms and conditions.

5.2 Due to a legitimate interest (Art. 6 para. 1 f GDPR)

In certain cases we process your data to protect a legitimate interest of us or third parties.

 

• Measures for building and facility security
• Video surveillance for the protection of the house right
• Consultation of and data exchange with credit agencies
• To determine creditworthiness and default risks
• Ensuring IT security and IT operations

 

6 To whom is your data passed on?

In order to fulfil our contractual and legal obligations, your personal data will be disclosed to various public or internal bodies as well as external service providers.

 

We cooperate with selected external service providers in order to fulfil our contractual and legal obligations:

 

External service providers:
• IT service providers (e.g. maintenance service providers, hosting service providers)
• Service provider for document and data destruction
• Printing services
• Telecommunications
• Payment service provider
• Auditors

 

7 How long is my data stored?

We store your personal data as long as it is necessary to fulfil our legal and contractual obligations.

If storage of the data is no longer necessary for the fulfilment of contractual or statutory obligations, your data will be deleted unless further processing is necessary for the following purposes:

• Compliance with commercial and tax retention obligations
• Preservation of evidence within the framework of the statutory statute of limitations. According to the statute of limitations provisions of the German Civil Code (BGB), in some cases these statutes of limitations can be up to 30 years, the regular statute of limitations is three years.

 

8 What rights do you have in connection with the processing of my data?

Every data subject has the right to information pursuant to Art. 15 GDPR, the right to correction pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art.18 GDPR, the right to objection pursuant to Art. 21 GDPR and the right to data transfer pursuant to Art. 20 GDPR. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to erasure.

 

8.1 Right to object

• What right do you have in the case of data processing on the basis of our legitimate or public interest?
Pursuant to Art. 21 (1) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 (1) e GDPR (data processing in the public interest) or Article 6 (1) f DSGVO (data processing to safeguard a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the etsablishment, exercise or defence of legal claims.

• What right do you have in the case of data processing for the purpose of direct marketing?
If we process your personal data for the purpose of direct advertising, you have the right, pursuant to Art. 21 (2) GDPR, to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object to the processing of your personal data for the purpose of direct marketing, we will no longer process your personal data for these purposes.

 

8.2 Revocation of consent

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future.

 

8.3 Right to access

You can request information on whether we have stored personal data about you. If you so wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have with regard to this data.

 

8.4 Other rights

In addition, you have the right to correct incorrect data or to delete your data. If there is no reason for further storage, we will delete your data, otherwise we will restrict processing. You may also request that we provide any personal information you have provided to us in a structured, common and machine-readable format either to you or to a person or company of your choice.
In addition, you have the right to appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). The supervisory authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information, Prof. Dr. Johannes Caspar, Klosterwall 6 (Block C), 20095 Hamburg, e-mail: mailbox@datenschutz.hamburg.de.

 

8.5 Exercise of your rights

In order to exercise your rights, you can contact the person responsible or the data protection officer at the following e-mail address: datenschutz@treffpack.de. We will process your enquiries immediately and in accordance with the legal requirements and inform you of the measures we have taken.

 

9 Is there an obligation to provide your personal data?

In order to enter into a business relationship, you must provide us with the personal data that is required for the performance of the contractual relationship or that we are required to collect by law. If you do not provide us with this data, we will not be able to carry out and process the contractual relationship.

 

10 Does automated decision making or profiling take place?

Automated decision making or profiling does not take place.

 

11 Changes to this information

Should the purpose or method of processing your personal data change significantly, we will update this information in good time and inform you of the changes in good time.

 

Effective May 2019