Privacy policy
Privacy policy
GDPR
We process your personal data (e.g. title, name, address, email address and telephone number) only in accordance with German data protection law and European Union (EU) data protection law. The following provisions inform you about the purposes of processing, legal bases, recipients and retention periods, as well as your rights and the controller responsible for processing your data. This privacy policy applies only to our websites. If links on our pages direct you to other websites, please consult those websites for information on how they handle your data.
(1) Purpose of processing
We process the personal data you provide to us by email, contact form or other means in order to respond to and deal with your enquiries. You are not obliged to provide us with your personal data. However, without your email address we cannot reply to you by email.
(2) Legal bases
a) If you have given us your express consent to process your data, Article 6(1)(a) GDPR is the legal basis for this processing.
b) If we process your data to take steps prior to entering into a contract, Article 6(1)(b) GDPR is the legal basis.
c) In all other cases (in particular when using a contact form), Article 6(1)(f) GDPR is the legal basis.
RIGHT TO OBJECT: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Article 6(1)(f) GDPR where that processing is not for direct marketing purposes.
In the case of direct marketing, however, you may object to processing at any time without giving reasons.
(3) Legitimate interest
Our legitimate interest in processing is to communicate with you quickly and respond to your enquiries cost-effectively. If you provide us with your postal address, we reserve the right to use it for direct marketing by post. You can protect your interest in data privacy by limiting the data you disclose (e.g. by using a pseudonym).
(4) Categories of recipients
Hosting providers; mailing service providers for direct marketing
(5) Retention period
Your data will be deleted when it is apparent from the circumstances that your enquiry or the matter concerned has been conclusively resolved.
If, however, a contract is concluded, we retain the data required under commercial and tax law for the statutory periods, generally ten years (see section 257 of the German Commercial Code (HGB) and section 147 of the German Fiscal Code (AO)).
(6) Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw that consent at any time.
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against us as the controller:
1. Right of access
Under Article 15 GDPR, you may request information about the personal data concerning you that we process.
2. Right to rectification
If information concerning you is incorrect or no longer accurate, you may request rectification under Article 16 GDPR. If your data is incomplete, you may request that it be completed.
3. Right to erasure
Subject to the conditions of Article 17 GDPR, you may request the erasure of your personal data.
4. Right to restriction of processing
Under the conditions set out in Article 18 GDPR, you have the right to request restriction of the processing of data concerning you.
5. Right to data portability
Under Article 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller.
6. Right to withdraw consent under data protection law
Under Article 7(3) GDPR, you have the right to withdraw your consent under data protection law at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data concerning you infringes the GDPR, Article 77 GDPR gives you the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement).
Please also note your right to object under Article 21 GDPR:
a) In general: grounds for objection are required
Where personal data concerning you is processed
- to safeguard our overriding legitimate interest (legal basis: Article 6(1)(f) GDPR), or
- in the public interest (legal basis: Article 6(1)(e) GDPR),
you have the right to object to processing at any time on grounds relating to your particular situation; this also applies to profiling based on the provisions of the GDPR.
If you object, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
b) Special case of direct marketing: an objection without reasons is sufficient
Where personal data concerning you is processed for direct marketing purposes, you have the right to object to that processing at any time without giving reasons; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.
Controller responsible for data processing:
Clavis-Deutschland GmbH
Grüner Weg 38
34117 Kassel
Telephone: +49(0)561-988499-0
info@tresore.eu
Provider notice reproduced from the German source: This privacy policy was created and is updated using the technology of janolaw AG.