Privacy policy according to the DSGVO (as of: 25.05.2018).
The responsible party within the meaning of the data protection laws - in particular the Basic Data Protection Regulation - is: INOX-Vertriebs GmbH, Pestalozzi Str. 49, 07318 Saalfeld, Germany.
1. Collection of personal data
The business purpose of the company is the sale of chemicals
All personal data processed and used by the company are subject to the Federal Data Protection Act (BDSG) and the DSGVO. Data use is permitted if the Federal Data Protection Act or the Basic Data Protection Regulation or another legal provision allows it or if you have consented to ist use.
Accordingly, your explicit consent is required for all information, advice and support.
Examples/purpose for data collection, processing and use
The company collects and stores data that is required for the proper and complete processing of contractual relationships with customers and suppliers (taking and processing orders, making deliveries, issuing invoices, placing orders with suppliers, sending offers/promotions). These are your personal data (name, address, mail address, telephone/fax number, bank data and/or comparable data).
The decisive responsibility for processing your data - in accordance with data protection regulations - lies with the company.
You are aware that, despite all measures to ensure data protection, data published on the Internet or in the press can also be accessed in countries that do not have data protection regulations comparable to those of the Federal Republic of Germany. Furthermore, there is no guarantee that this data will remain confidential, that its content will remain accurate, or that the data cannot be altered.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. b and DSGVO. Our legitimate interest results from the purposes of data collection listed above.
2. Data deletion and period of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place for legal or other regulations to which the responsible party is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion of a contract.
3. Processing of data
Your personal data will not be passed on to third parties for purposes other than those listed below. Your personal data will only be passed on to third parties if:
o you have given your explicit consent to this (Art. 6 para. 1 p. lit. a DSGVO),
o it is necessary for the processing of the contractual relationship with you and is legally permissible (Art. 6 para. 1 p. 1 lit. b DSGVO),
o there is a legal obligation for the transfer (Art. 6 para. 1 p. 1 lit. c DSGVO),
o the processing pursuant to Art. 6 (1) p. 1 lit. f DSGVO is necessary to protect the legitimate interests of the controller or a third party and there is no reason to assume that you have an overriding interest worthy of protection in not having your data disclosed,
4. Rights of the data subject
If personal data of yours is processed, you are entitled to the following rights as a data subject within the meaning of the GDPR vis-à-vis the controller:
a) Information
Pursuant to Art. 15 DSGVO, you may request confirmation from us as to whether personal data relating to you is being processed by us. If this is the case, you have the right to information about the purpose, the category of personal data, the recipients or the category of recipients and the planned duration of storage. If the planned duration cannot be named, you can request notification of the criteria for determining the duration of storage.
In addition, you have the right to information about an existing right to rectification or deletion of personal data concerning you, the right to restrict processing or the right to object to such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data - insofar as it was not collected by us - as well as the existence of automatic decision-making including profiling and, if applicable, meaningful information about its details.
You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.
b) Correction
Pursuant to Art. 16 DSGVO, you have the right to request from the controller without undue delay the rectification and/or completion of inaccurate personal data concerning you, including by means of a supplementary declaration.
c) Deletion
Pursuant to Art. 17(1) DSGVO, you have the right to the immediate deletion of the data concerning you, provided that one of the following reasons applies:
o The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
o You revoke your consent on which the processing is based and there is no other legal basis for the processing.
o You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
o The personal data concerning you have been processed unlawfully.
o The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law.
o The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
If the personal data concerning you has been made public and there is an obligation on the part of the controller to delete it for the aforementioned reasons, the controller shall take reasonable measures, including technical measures, in accordance with Article 17(2) of the GDPR, taking into account the available technology and the cost of implementation, to inform data controllers who process the personal data that you, as the data subject, have requested them to delete all links to, or copies or replications of, that personal data.
There is no right to deletion under Article 17(1) of the GDPR to the extent that the processing is necessary:
o for the exercise of the right to freedom of speech and information,
o for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
o for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO,
o for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DSGVO, insofar as the right to deletion is likely to render impossible or seriously prejudice the achievement of the purposes of such processing,
o for the assertion, exercise or defense of legal claims.
d) Restrictions
Pursuant to Art. 18 DSGVO, you have the right to request the controller to restrict the data concerning you, provided that one of the following conditions is met:
o if you contest the accuracy of the personal data concerning you, for a period of time which permits verification of the accuracy of the data,
o if the processing is unlawful and you object to the deletion and request instead the restriction of the use of the personal data,
o if the personal data concerning you are no longer needed for the purposes of processing, but you need them for the assertion, exercise and defense of legal claims,
o if you have objected to the processing pursuant to Article 21 (1) DSGVO and it has not yet been determined whether the grounds for the processing override your reasons.
If the processing of personal data relating to you has been restricted, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If processing has been restricted in accordance with the above mentioned conditions, you will be informed in accordance with Section 18 (3) of the GDPR before the restriction is lifted.
e) Notification
All recipients to whom the personal data concerning you has been disclosed will be informed of any rectification, deletion or restriction of processing in accordance with Art. 19 DSGVO, unless this proves impossible or involves a disproportionate effort. If you so request, these recipients will be made known to you.
f) Data portability
Pursuant to Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from us, provided that
o the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and - o the processing was carried out by means of automated procedures.
The exercise of the right to data portability does not affect Art. 17 DSGVO (the right to deletion). This right also does not apply to processing necessary for the performance of tasks carried out in the public interest or in the exercise of official authority vested in the controller.
When exercising your right to data portability, you have the right that the personal data concerning you be transferred directly from one controller to another controller, where it is technically feasible.
The rights and freedoms of other persons must not be affected.
g) Objection
Pursuant to Art. 21 DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) DSGVO; This also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If data concerning you is processed for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You must be expressly informed of the above-mentioned right to object at the latest at the time of the first communication, whereby the information must be provided in a comprehensible form, separated from other information.
You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications.
You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
h) Rights regarding automated decision-making including profiling
Pursuant to Art. 22 DSGVO, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
o is necessary for the conclusion or performance of a contract between you and the controller,
o is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests or
o is made with your explicit consent.
These decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
i) Revocation
In accordance with Art. 7 DSGVO, you have the right to revoke your declaration of consent under the data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
j) Complaint to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.
Saalfeld, May 25th, 2018
Private Label
