Privacy Notice for Customers and Prospective Customers

We are pleased that you are interested in us and have contacted or are in contact with our company as a customer or prospective customer. Below, we would like to provide you with information on the processing of your personal data in connection with your interactions as a customer or prospective customer.

Protecting your personal data is important to us. Personal data is information relating to the personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your legal name, address, telephone number and date of birth, as well as any other data that can be linked to an identifiable person.

Our data protection practices comply with legal regulations, particularly those of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR). The following data protection information serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 et seq. GDPR.

Who is responsible for data processing?

The controller within the meaning of Art. 4 No. 7 GDPR is the party who, alone or jointly with others, determines the purposes and means of the processing of personal data.

With regard to our customer and prospect relationship, the responsible party is:

Paul Wiegand GmbH
Eschengrund 5, D-36124 Eichenzell-Kerzell

Email: info@paulwiegand.de
Telephone: +49 (0) 66 59 / 98 62 – 0
Fax: +49 (0) 66 59 / 98 62 – 150

You can find further information about our company, details of the persons authorised to represent it, and additional contact options in the legal notice on our website:

www.paulwiegand.de/impressum

Which of your data do we process, and for what purposes?

When you contact us, we collect the following data:

  • Your data that we have received from you in the context of contract initiation or execution (e.g., the designation of your legal representatives, company name, commercial register number, VAT ID number, operating number, address),
  • Your contact details for contact persons within the company (first name, last name),
  • Your communication data (telephone number, mobile number, email address, fax number),
  • Your order and contract data,
  • Your billing and payment data (bank details, SEPA mandate, etc.),
  • All information necessary for your consultation and/or the processing of your inquiry within the customer or prospective customer relationship.

This data is collected:

  • To identify you as our customer / prospective customer,
  • To correspond with you and/or otherwise contact you,
  • To provide you with responsible and successful advice and support,
  • For quotation and order creation,
  • For order, contract, and delivery processing,
  • For invoicing,
  • To process any liability claims you may have against us,
  • To pursue and enforce any (payment) claims we may have against you,
  • To carry out effective conflict checks.

What is the legal basis for this?

Data processing is carried out based on your engagement with us or your inquiry. It is necessary for the appropriate processing within the customer or prospective customer relationship for the stated purposes and for the mutual fulfillment of obligations arising from the customer contract (Art. 6 para. 1 sentence 1 lit. b GDPR). The processing of employee data of our customers is based on Art. 6 para. 1 lit. f GDPR. It is our legitimate interest to communicate with them.

How long will the data be stored?

Your data is stored and collected both digitally (in our administration software / document management system) and in paper form.

The personal data collected by us within the customer relationship will be stored or retained until the expiry of the statutory retention period and then deleted or destroyed. This does not apply only if we are obliged to store/retain data for a longer period due to other legal provisions (e.g., the Tax Code, the Money Laundering Act, etc.) (Art. 6 para. 1 sentence 1 lit. c GDPR), and/or you have consented to or requested a longer-term storage/retention of your data – for example, with regard to a later continuation of our customer relationship – (Art. 6 para. 1 sentence 1 lit. a GDPR).

After the retention period has ended, we will have your paper documents collected and subsequently destroyed by a certified company in sealed containers, while maintaining all confidentiality.

To which recipients will the data be disclosed?

Your personal data will generally not be transmitted to third parties for purposes other than those listed below. Data will only be disclosed if this is necessary for the proper handling of the customer relationship with you (Art. 6 para. 1 sentence 1 lit. b GDPR).

This particularly concerns the disclosure of data and information to suppliers and manufacturers for the purpose of order, contract, and delivery processing. The disclosed data may only be used by the respective recipient for the stated purposes.

Naturally, any disclosure to third parties will only take place in your well-understood interest and in consultation with you. Further details are set out in a separately concluded contract.

Those employees of our company who come into contact with your data are subject to a strict obligation of confidentiality and secrecy, the observance of which we constantly monitor. Other persons with whom we cooperate and who come or could come into contact with your data have also been or will be contractually bound by us to confidentiality and secrecy and are – as they have also been or will be expressly informed – liable to prosecution in the event of a breach.

Where is the data processed?

The data is processed exclusively on the internal servers of the controller.

Should we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection (admissibility requirements of Chapter V, Art. 44-50 of the GDPR) or if other appropriate data protection guarantees (e.g., binding corporate rules or EU standard contractual clauses) are in place.

Your rights as a “data subject”

You have the right to information (Art. 15 GDPR) about the personal data we process about you. In the case of an information request that is not made in writing, we ask for your understanding that we may then request evidence from you proving that you are the person you claim to be.

Furthermore, you have the right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction (Art. 18 GDPR) of processing, insofar as you are legally entitled to do so.

Furthermore, you have the right to object (Art. 21 GDPR) to processing within the scope of the statutory provisions. The same applies to the right to data portability (Art. 20 GDPR).

Our Data Protection Officer

We have appointed a Data Protection Officer in our company pursuant to Art. 37 GDPR. You can contact them using the following details:

Paul Wiegand GmbH
– Data Protection Officer –
Eschengrund 5, D-36124 Eichenzell-Kerzell
Email: datenschutz@paulwiegand.de

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

Changes to this Privacy Notice

We revise this Privacy Notice when changes in processing activities or other circumstances make this necessary. The current version can always be found on this website.

Last updated: 2021-09-16