Data Protection Statement
Data protection is a key issue for Deutronic Elektronik GmbH. The use of our webpages is, thus, possible without providing any personal data. However, if the person concerned wishes to make use of the company’s services via our webpage, it may be necessary to process personal data. If the processing of personal data is necessary and if there is no legal basis for it, we will expressly request your consent in advance.
The processing of personal data, for instance name, address, mail address or phone number of a person, will always be carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with national data protection regulations. The following data protection regulation contains information about the nature, extent and purpose of the recording, processing and use of personal data. Furthermore, persons will be informed about their rights with this data protection regulation.
In order to provide a protection that is as complete as possible, we, as the party responsible for processing the data, implemented numerous technical and organizational measures. Nevertheless, internet based data transmissions may have security issues which means that an absolute protection cannot be guaranteed. Thus, each person is free to transmit their personal data by alternative means, e.g. via phone.
Our data protection statement is based on the terms used by the European Guideline Committee when they adopted the General Data Protection Regulation (GDPR). Our data protection statement is supposed to be easy to read and understand for the public as well as for our customers and business partners. To guarantee this, we want to define the used terms beforehand.
We use, amongst others, the following terms:
a) Personal data
Personal data are all information that relate to an identified or identifiable natural person (in the following referred to as “person concerned”). A natural person shall be considered identifiable if he/she/it can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
b) Person concerned
A person concerned is each identified or identifiable natural person whose personal data can be processed by the person who is responsible for the processing.
Processing is each operation which is carried out with or without the help of automated processes and which involves personal data such as the collection, recording, organization, saving, fitting or changing, selection, inquires, usage, disclosure by transmission, distribution or otherwise making available, comparison or link, restriction, deletion or destruction.
d) Restriction of the processing
The restriction of the processing means that the saved personal data is marked in order to restrict the future processing.
Profiling is any automated processing of personal data involving the use of such personal data to evaluate certain personal aspects referring to a natural person, in particular to analyze or predict the work performance, economic situation, health, personal preferences, interests, reliabilities, behavior, whereabouts or change of location of this natural person.
Pseudonymization is the processing of personal data so that the personal data cannot be assigned to a certain concerned person without the involvement of additional information; provided that the additional information is saved separately and are subject to technical and organizational measures that guarantee that personal data cannot be assigned to an identified or identifiable natural person.
g) Person responsible or person responsible for the processing
The person responsible or the person responsible for the processing is the natural or legal person, authority, agency or other entities which alone or jointly with others determines the purposes and means of the processing of personal data.
h) Order processor
The order processor is each natural or legal person, authority, establishment or other entity that processes personal data by order of the person responsible.
The receiver is each natural or legal person, authority, agency or other entity to whom data may be disclosed, whether a third party or not. Authorities that may receive data as part of a certain investigation according to the Union law or the law of the Member states shall not be regarded as recipients.
j) Third party
A third party is a natural or legal person, authority, agency or other entity other than the person concerned, responsible, order processor and the person who, under the direct responsibility of the order processor, is authorized to process personal data.
Consent means each voluntary given declaration of intention or any other clear affirming act with which the person concerned indicates that he, she or it agrees with the processing of the personal data.
2. Name and address of the person responsible for the processing
Responsible for the data protection laws, other data protection laws applicable in the member states of the European Union and other provisions with data protection character according to the General Data Protection Regulation (GDPR) is:
Deutronic Elektronik GmbH
Managing directors: Christian Wanzke, Thomas Wanzke
Tel: +49 8707 9200
Fax: +49 8707 1004
3. Name and address of the person responsible for data protection
The person responsible for the processing is:
DEKRA Assurance Services GmbH
Each person concerned may contact our person responsible for data protection in every case of questions or suggestions.
4. Information disclosure
We only disclose your personal data to third parties, if: (1) you have given your explicit consent according to Art. 6, para. 1, s. 1 lit. a GDPR, (2) if the disclosure is required for the enforcement, execution or defense of legal claims and if there is no reason for the assumption that you have a predominant interest worthy in protection in the non-disclosure of your data according to Art. 6, para. 1 s.1 lit. f. GDPR, (3) there is a legal obligation for the disclosure according to Art. 6, para. 1, s. 1 lit. c GDPR and if (4) this is legally permissible and required according to Art. 6 para. 1, s. 1. Lit. b GDPR for the processing of contractual relationships with you.
Furthermore, there is no transmission of your personal data to any third party.
5. Collection of general data and information
Our website records with each call of the website by a person concerned or an automated system a range of general data and information which are transferred automatically by the your browser. This general data and information is collected automatically without your interaction and is available in the log files of our servers until the automated deletion. The data or information that can be collected is: (1) the used browser type and version, (2) the operating system used by the accessing system, (3) the webpage which is used by the accessing system to get to our webpage (so called “referrer”), (4) the sub-website which can be accessed via an accessing system on our website ,(5) the date and time of the access to our webpage, (6) an internet protocol address (IP-address) of the requesting PC, (7) the internet service provider of the accessing system, (8) name and URL of the accessed files and (9) other similar data and information that serve security needs in case of attacks on our information technological systems.
When using this general data and information, we do not draw any conclusions about the person concerned. Rather, this information is needed to (1) correctly deliver the content of our website, (2) to optimize the contents and advertisement for our website, (3) to guarantee the permanent functionality of our information technological systems and the technique of our website, (4) to provide necessary data to the law enforcement agencies in case of cyberattacks and (5) for further administrative purposes. This anonymously collected data and information is, one the one side, evaluated statistically and on the other side with the purpose to enhance the data protection and the data security of our company to guarantee an optimum level of protection for the personal data processed by us. The anonymous data of the server log files is stored separately from the personal data which is indicated by a person concerned.
The legal basis for this data processing is Art. 6, para 1, s. 1, f GDPR. Our legitimate interest results from the purposes listed above for the collection of Data.
By using cookies, we can provide user-friendly services, which would not be possible without a cookie placement, to the users of this website.
The person concerned can prevent the placement of cookies by our website at any time by making certain settings to the internet browser settings and thus object to the placement of cookies permanently. Furthermore, it is possible to delete already placed cookies via an internet browser or other software programs at any time. This is possible in all common internet browsers. If the person concerned deactivates the placement of cookies in the used internet browser, certain functions might not be entirely usable.
The legal basis for the usage of cookies is Art. 6, para. 1, s. 1 f GDPR. Our legitimate interest results from the purposes listed above for the data processing.
7. Google Maps
Based on Art. 6, para. 1, s. 1, lit f GDPR, this website uses the web service Google Maps, a map service by Google Inc. (“Google”) to display an interactive map and to create route maps, for the needs-based design. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using Google Maps, information about your use of this website (including your IP-address) might be transferred to Google servers in the USA and saved on them. Google might transfer the obtained information to third parties provided that it is prescribed by law or insofar that a third party processes the data on behalf of Google.
Google will in no case associate your IP-address with other data held by Google. Nevertheless, it might be technically possible for Google to identify at least single users on the basis of received data. Google might use personal data and personality profiles of the website users for other purposes over which we have no control.
If you disagree with the processing of your data, there is the possibility to deactivate the service of “Google Maps” and prevent the transfer of data to Google. For this purpose, deactivate the Java-Script-Function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or only to a limited extent.
Based on Art. 6, para. 1, s. 1, lit f GDPR, this website uses the service YouTube for the needs-based design. YouTube is operated by YouTube LLC with its head office in 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with its head office in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Each time you visit a website that includes one or more YouTube video clips, a direct connection between your browser and the server of YouTube in the USA is established. The information that you have visited this site with your IP will be transferred directly from your browser to the YouTube server and saved there. By interacting with the YouTube Plugins (e.g. starting the video), the information generated by the interaction will be transferred to YouTube and stored there.
If you are logged into YouTube as a member, YouTube will automatically assign this information to your personal user account. By using the plugin e.g. clicking on the start-button of a video, this information will also be assigned to your personal user account. You can prevent this assignment by logging out of your YouTube user account as well as other user accounts of the company YouTube LCC and Google Inc. and deleting the respective cookies of these companies before using our website.
The Data Protection Declaration for YouTube with further information for the elevation and usage of your data by YouTube, with further information about your rights and settings for your privacy can be found on the following website: https://policies.google.com/privacy?hl=en.
9. Google Web Fonts
This website uses so-called Web Fonts provided by Google for the consistent display of fonts. When you open the page, your browser loads the required Web Fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, your browser has to make a connection to the servers of Google. Google gains knowledge that you access our website via your IP. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing display of our online offers. This portrays a legitimate interest according to Art. 6, para. 1. lit. f GDPR.
If your browser does not support Web Fonts, your computer will use a standard font.
Further information about Google Web Fonts can be found on the following website: https://developers.google.com/fonts/faq and in the Data Protection Declaration of Google: https://policies.google.com/privacy?hl=en.
10. Contact possibilities via the website
Due to legal regulations, our website contains information that enables us to be contacted quickly by electronic means and to communicate directly with you, which also includes a general address for so-called electronic mail (E-Mail address). If a person concerned contacts the person responsible for processing, personal data that is transferred will be saved automatically. Such personal data transferred to the person responsible for the processing on a voluntary basis by a person concerned, will be saved for the purposes of processing or contacting. There is no further transfer of this data to a third party.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 , para. 1. S. 1 lit a GDPR on the basis of your voluntary consent.
11. Data protection for application processes and applications
The person responsible for the processing raises and processes personal data of applicants for the purpose of processing the job applications according to Art. 6, para. 1 lit b GDPR. Processing may also be carried out by electronic means. This is particularly the case when the applicant transfers relevant application documents to the person responsible for the processing on an electronical way, e.g. via mail or a web formula on the website. If the person responsible concludes an employment contract with the applicant, the transferred data will be saved for the purpose of processing the employment in compliance with statutory provisions. If the person responsible for the processing does not conclude an employment contract with the applicant, the application documents will be deleted automatically two months after the announcement of the rejection provided that there are no other legitimate interests of the person responsible for the processing. Another legitimate interest is, for instance, the duty to provide evidence in a process under the General Equal Treatment Act (GETA).
12. Data protection regulations for the use and application of Facebook
On the basis of Art. 6, para. 1, 1 S, 1 lit f GDPR, we use Social Plug-ins of the social network Facebook to promote our company. The underlying advertising purpose can be seen as a legitimate interest according to the GDPR. The responsibility for the operation compliant with data protection has to be guaranteed by the respective provider. The integration of this plug-in by us takes place in the way of the so-called two-click method to protect visitors of our website in the best possible way.
A social network is a social meeting place, an online community operated on the internet that normally enables the users to communicate with each other and interact in a virtual room. A social network can be used as a platform for exchanging opinions and experiences, it also allows the internet community to provide personal or company related information. The social network Facebooks enables the user to create and edit private profiles, upload of photos and network via friend requests.
Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025 USA. If the person concerned lives outside the USA or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the processing of personal data.
Each time this website operated by the person responsible for the processing is visited and on which a Facebook component (Facebook-Plug-In) has been integrated, the internet browser on the person’s information technological system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook-Plug-Ins can be found on: https://developers.facebook.com/docs/plugins/?locale=en_US. As a part of this technical process, Facebook obtains information about the specific subsite of our website which is visited by the person concerned. This information (including your IP-address) will be transferred directly from your browser to a server of Facebook in the USA and stored there.
If the person concerned is logged into Facebook at the same time, Facebook recognizes which specific page of our website the person concerned is visiting each time the person visits our website and for the entire duration of that person’s stay on our website. This information is gathered by the Facebook component and assigned to the Facebook-Account of the person concerned by Facebook. If the person concerned clicks on a Facebook-button, e.g. the “Like”-button, that is integrated on our website or if the person concerned adds a comment, Facebook assigns this information to the personal Facebook user account of the concerned person and saves this personal data.
Facebook receives information by the Facebook component that the individual concerned has visited our website whenever the individual concerned is logged into Facebook at the same time as accessing our website, regardless of whether the individual clicks on the Facebook component or not. Facebook is allowed to use this information for advertising purposes, market research and needs-based design of the Facebook sites. Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website in relation to the displayed advertisement, inform other Facebook users about their activities on our website and to provide other services related to the use of Facebook. If such transfer of information is not wanted by the person concerned, he or she may prevent this transfer by logging out from Facebook before visiting our website.
The published Data Protection Guideline by Facebook can be found under: https://www.facebook.com/about/privacy/ and provides information about the elevation, processing and use of personal data by Facebook. It also explains which settings Facebook offers to protect the privacy of the person concerned. Furthermore, there are different applications available that prevent the data transfer to Facebook. Such applications may be used by the person concerned to prevent the data transfer to Facebook.
13. Data protection regulations for the use of Google Analytics (with an anonymization function)
The following tracking techniques used by us are carried out on the basis of Art. 6, para. 1, s 1 lit f GDPR. We want to guarantee the needs-based design and continuing optimization of our website with the help of these tracking techniques. We also use them to record the use of our website statistically and to evaluate our services for the purposes of optimization for you. These interests are legitimate on the basis of the aforementioned regulation.
The person responsible for the processing has integrated the component Google Analytics (with an anonymization function) on this website. Google Analytics is a web-analysis-service. Web-analysis is the elevation, collection and evaluation of data considering the behavior of visitors on websites. A web analysis service collects data on, among other things, from which website a person concerned has accessed a website (so-called referrer), which subpages of the website have been accessed or how often and for how long a subpage has been viewed. A web analysis is mainly used for the optimization of a website and for a cost-benefit analysis.
Operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The person responsible for processing uses the application “_gat._anonymizelp” for the web analysis via Google Analytics This addition is used by Google to shorten and anonymize the IP address of the Internet connection of the person concerned if access to our Internet pages is from a Member State of the European Union or from another Contracting State of the Agreement on the European Economic Area.
The Google Analytics component is used to analyze visitor flows on our website. Google uses the obtained data and information to evaluate the usage of our website, create online reports for us that show the activities on our website, and provide further services that are linked to the use of our website.
Google Analytics uses a cookie on the information technological system of the person concerned. Cookies were already explained above. By placing cookies, Google is able to analyze the usage of our website. Each time one of the individual pages of this website is accessed, which is operated by the person responsible for the processing and on which a Google Analytics component has been integrated, the Internet browser on the information technological system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Google, thus, obtains information about the personal data such as the IP-address of the person concerned. This helps Google to comprehend the origin of the visitors and clicks, and eventually enable commission settlements.
With the help of cookies, personal information such as the access time, the place from which the access was made and the frequency of the visits of our website by the person concerned is saved. With every visit of our website, personal data including the IP-address of the internet connection of the person concerned is transferred to Google in the United States of America. This personal data is saved by Google in the United States of America. Google may disclose this personal data collected through technical methods to third parties.
The person concerned can, as mentioned above, prevent the placement of cookies at any time by using the corresponding setting in the internet browser and, consequently, reject the placement of cookies permanently. Such setting of the internet browser could also prevent the placement of a cookie by Google on the information technological system of the person concerned. Furthermore, a cookie placed by Google Analytics can be deleted via the internet browser or any other software program at any time.
Further information and the valid Data Protection Regulations of Google can be found under https://policies.google.com/privacy?hl=en&gl=de and under https://www.google.com/analytics/terms/gb.html. Google Analytics is explained more detailed under the following link: https://www.google.com/intl/de_de/analytics/.
14. Duration of the storage of the personal data
The person responsible for the processing processes and stores personal data of the person concerned only for the time necessary to achieve the storage purpose or where required for by the European directive and regulation maker or another legislator in laws or regulations to which the controller is subject.
If the storage purpose has lapsed or if the storage period prescribed by the person responsible for the European guidelines and regulations has exceeded, the personal data will be blocked or deleted routinely according to the legal regulations provided that they are no longer required for the fulfilment of a contract or the initiation of a contract.
15. Rights of the person concerned
As a person concerned, you are entitled to specified rights described below. You can contact us or our person responsible for data protection, if you want to exercise your rights. We will then arrange for the necessary measures to be taken in individual cases.
a) Right to confirmation
Any person concerned is entitled to obtain confirmation by the person responsible if their personal data is processed.
b) Right of Information
Any person concerned by the processing of personal data is entitled to obtain, free of charge, information on their personal data and the copy of this information. Furthermore, the person responsible for the European guidelines and regulations allowed the provision of the following information:
- the purposes of processing
- the categories of the personal data that is processed
- the receivers or category of receivers to whom person data has been disclosed or has yet to be disclosed, especially, receivers in third countries or international organizations
- if possible, the planned storage time of the personal data or, if this is not possible, the criteria for the determining the duration
- the existence of the right to rectify or erase the concerning personal data or the restriction of the processing by the person responsible or the right to oppose such processing
- the existence of a right to appeal to a supervisory authority
- if the personal data are not collected from the person concerned: all available information about the origin of the data
- the existence of an automated decision finding inclusive profiling according to art. 22, para. 1 and 4 GDPR and – at least in these cases – meaningful information about the involved logic as well as the consequences and the desired effects of such a processing for the person concerned
Moreover, the person concerned is entitled to obtain information whether person data has been transferred to a third country or an international organization or not. If this is the case, the person is entitled to obtain information about suitable guarantees in connection with the transfer.
c) Right of rectification
Any person concerned by the processing of personal data is entitled to demand the immediate rectification of false personal data. Furthermore, the person is entitled to demand the completion of incomplete personal data – also with additional explanation – considering the purposes of processing.
d) Right of deletion (Right to be forgotten)
Any person concerned by the processing of personal data is entitled to demand the immediate deletion of the respective personal data by the person responsible provided that one of the following reasons is fulfilled and that the processing is not required:
- The personal data has been collected for such purposes or processed in any other way for which they are no longer necessary.
- The person concerned revokes his/her consent on which the processing was based according to art. 6, para. 1 letter a GDPR or art. 9, para. 2 letter a GDPR and there shall be no other legal basis for the processing.
- The person concerned objects according to art. 21, para 1 GDPR to the processing and there are no prior legitimate reasons for the processing or the person concerned objects to the processing according to art. 21, para. 2, GDPR.
- The personal data has been processed illegally.
- The deletion of the personal data is required to fulfill the legal obligation according to the Union law or the right of the member states to which the responsible is subject.
- The personal data was collected in relation to the services offered by the information society according to Art. 8, para. 1 GDPR.
If the personal data has been published by us and if we, as the responsible company, are obliged to delete the personal data according to art. 17, para. 17, GDPR, we shall take reasonable measures, including technical ones, to inform other person responsible for the data processing who process the published personal data, taking into account the available technology and implementation costs, that the person concerned has requested the deletion of all links to this personal data or copies or replications of this personal data from the other people responsible for the data processing insofar as the processing is not required.
e) Right of limitation of the processing
Any person concerned by the processing of personal data is entitled to request the limitation of the processing from the person responsible for the processing if one of the following conditions is fulfilled:
- The accuracy of the personal data is disputed by the person concerned for the time that is necessary to allow the person responsible to verify the accuracy of the personal data.
- The processing is illegal; the person concerned rejects the deletion of personal data and requests the limitation of the use of the personal data instead.
- The person responsible no longer requires the data for purposes of processing; the person concerned requires the data for assertion, exercise or defense of legal claims.
- The person concerned objected to the processing according to art. 21, para. 1., GDPR and it has yet to be clarified whether the legitimate reasons of the person responsible outweigh the reasons of the person concerned.
f) Right of data transferability
Any person concerned by the processing of personal data is entitled to receive their personal data, provided by the person concerned to the responsible, in a structured, common and machine-readable format. Furthermore, the person concerned is entitled to communicate this data to the person responsible without being impeded by the person responsible to whom the personal data has been disclosed, provided that the processing is based on the consent according to art. 6, para 1, letter a GDPR or Art. 9, para. 2, letter A, GDPR or on a contract according to art. 6, para. 1, letter b GDPR and the processing takes place with the help of automated methods, unless the processing is required for the performance of a task that is based on public interest or in the exercise of official authority vested in the person responsible.
Furthermore, in exercising his or her right to data transferability pursuant to Art. 20, the data subject shall have the right to obtain the direct transfer of personal data from one person responsible to another person responsible, to the extent that this is technically feasible and without prejudice to the rights and freedoms of other persons.
g) Right to object
Any person concerned by the processing of personal data is entitled to object, on grounds relating to his/her particular situation, o the processing of personal data concerning him/her carried out pursuant to art. 6, para. 1, letter e or f GDPR. This is also valid for a profile that is based on these regulations.
We no longer process personal data in case of an objection, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the person concerned or serve the processing of the assertion, exercise or defense of legal claims.
If we process personal data to pursue direct advertising, the person responsible is entitled to object to the processing of personal data for the purposes of such advertising. This also applies to the profiling in so far as it is related to direct advertising. If the person concerned objects the processing for direct advertising to us, we will no longer process the personal data for these purposes.
Furthermore, the person concerned is entitled, on grounds relating to his/her special situation, to object to the processing of personal data relating that are collected for scientific or historical research purposes or for statistical purposes according to Art. 89, para. 1, GDPR, unless the processing is required for fulfilling a task in the general public interest.
h) Automated decisions on a case-by-case basis inclusive profiling
Any person concerned by the processing of personal data is entitled to not be subject to a decision based solely an automated processing, including profiling, which produces legal effects or similarly significantly affects him or her, unless the decision (1) is not required for the conclusion or performance of a contract between the person concerned and the person responsible or (2) if it is lawful under the legislations of the Union or member states to which the person responsible is subject and contains appropriate measures to protect the rights and freedoms as well as the legitimate interests of the person concerned or (3) is lawful under national law with the explicit consent of the person concerned.
If the decision (1) is required for the conclusion or performance of a contract between the person concerned and the person responsible or (2) is taken with the express consent of the person concerned, we shall take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the person concerned which at least includes the right to have the person responsible intervene, to state his or her point of view and to challenge the decision.
i) Right to withdraw the data protection approval
Any person concerned by the processing of personal data is entitled to withdraw the consent to the processing of personal data at any time.
j) Right to file a complaint to a supervisory authority
Any person concerned by the processing of personal data is entitled to complain to a supervisory authority. Normally, you can contact the supervisory authority of your usual place of residence or workplace or our companies headquarter.
16. Legal basis of the processing
Art. 6, I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a certain processing purpose. If the processing of personal data is required (for instance for processing operations that are required for the delivery of goods or for the delivery of a service or consideration) for the fulfillment of a contract, whose contracting party is the person concerned, the processing is based on Art. 6 l lit. b. GDPR. The same applies for such processing operations that are required for the provision of precontractual measures which are required for enquiries about our products and services. If our company is subject to legal requirements by which we are required to process personal data, e.g. the fulfillment of tax duties, the processing is based on Art. 6 l lit. c GDPR. In rare cases, the processing might be required to protect vital interests of the person concerned or another natural person. This would be the case, for instance, if a visitor is injured in our company and his or her name, age, health insurance data or other vital information would have to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6 l lit. d GDPR. Ultimately, the processing operations could be based on Art. 6 I lit. f. GDPR. Processing operations which are not covered by any of the other aforementioned legal bases are based on this legal basis if the processing is required to protect legitimate interests of our company or a third party, provided that the interests, fundamental rights and fundamental freedom of the person concerned do not prevail. We are permitted to such processing operations in particular because they have been specifically mentioned by the European legislator. The European legislator represented the opinion that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (Recital 47 sentence 2 GDPR).
17. Legal or contractual regulations for the provision of personal data; requirement for the conclusion of a contract; obligation of the person concerned to provide personal data; possible consequences of the non-provision
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information about the contractual partner). Sometimes it may be necessary for the conclusion of a contract that the person concerned provides their personal data to us which must be subsequently processed by us. The person concerned is required to provide personal data to us, if our company concludes a contract with him or her. Failure to provide personal data would mean that the contract could not be concluded with the data subject. Before providing any personal data, the person concerned may contact our data protection officer. Our data protection officer informs the person concerned on a case-by-case basis whether the provision of personal data is required by law or contract or required for the conclusion of the contract, if the provision of personal data is required and which consequences a failure of provision of personal data might have.
18. Existence of an automated decision-making
An automated decision-making or a profiling is not carried out by us.