Privacy information business partners

1.1. Responsible body

Responsible for data collection and processing is Sembach GmbH & Co.KG, Oskar-Sembach-Straße 15, 91207 Lauf an der Pegnitz, Germany, is responsible for data collection and processing.

1.2. Data processing for the purposes of legitimate interests

We process your contact data within the company for internal administrative purposes and, if necessary, for the purpose of direct advertising.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR and in the interest of promoting the conclusion or execution of contracts and other business relationships, to carry out the associated customer service or to handle internal administrative tasks (such as the administration of business contacts, accounting, etc.).

In addition, your data is processed on the basis of Art. 6 para. 1 lit. f GDPR in the interest of sending you advertising tailored to you by e-mail if the legal requirements are met and to inform you about our company and our products by post or telephone.

The data will generally be deleted after the end of the business relationship or as soon as it is no longer required for the purpose of direct advertising.

In the event of the existence of statutory and contractual retention periods, the data concerned will be archived for the duration of these periods.

1.3. Data processing for the performance of a contract

We may also process your collected data in accordance with Art. 6 para. 1 lit. b GDPR for the fulfillment of contracts and other business relationships that we maintain with you as an individual.

This includes, for example, the processing of purchase orders, deliveries or payments or the assertion of warranty rights.

If necessary, personal data will be passed on to the companies involved in the processing of this contract, such as credit institutions for payment processing.

The data required to fulfill the contract will be deleted after termination of the contractual relationship. The data will not be deleted if receivables are still outstanding after termination of the contract and are to be collected.

In the event of the existence of statutory and contractual retention periods, the data concerned will be archived for the duration of these periods.

1.4. Data processing for compliance with a legal obligation

We may process your data in order to comply with legal obligations that may arise from tax law, foreign trade law or sanction law regulations, for example. Data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR.

The data is archived for the duration of the respective statutory retention period and then deleted.

1.5. Data processing on the basis of consent

We may process your data for the purpose of direct advertising by e-mail if you have given us your consent to do so and the processing is not already based on the exercise of legitimate interests.

The data is processed on the basis of the consent given in accordance with Art. 6 para. 1 lit. a GDPR.

We delete your data as soon as it is no longer required for the purpose of direct advertising.

1.6. Data acquisition when ordering our sample box

Scope, purposes and legal basis of data proce

We process your personal data (mandatory information: Title, first and last name, business e-mail address, company address) as part of the processing of your order for our sample box for sending an electronic order confirmation and for shipping to the company address you have provided. If you also voluntarily provide us with your business telephone number, we will use this to contact you following your order to initiate further contract negotiations.

Data processing is carried out for the fulfillment of the contract and for further contract initiation on the basis of Art. 6 para. 1 lit. b GDPR if you as a natural person are our client (customer).

If you are an employee of a client (customer) and order our sample box for them, we process your data in our legitimate interest in the fulfillment of the contract and further contract initiation. Our legitimate interest outweighs any possible counter-interest on your part in not processing your business contact data. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.

If you have also given us your separate consent, your data (title, first and last name, business e-mail address) will be processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in order to inform you in future by e-mail about products, services, events and promotions of Sembach GmbH & Co. KG and to contact you for advertising purposes.

You can revoke your consent at any time with effect for the future by sending an e-mail to info(at)sembach.de or by using the other contact details provided in the privacy policy.

Finally, we process your personal data (title, first and last name, company address) for the purpose and in our legitimate interest of informing you by post about products, services, events and promotions of Sembach GmbH & Co. KG and to address you in advertising. Our legitimate interest in this outweighs any possible counter-interest on your part in not processing your business contact data. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.

Storage duration

We store your data as long as this is necessary to fulfill the aforementioned purposes, you have not objected to the data processing or have not exercised your right of revocation and the processing is not necessary to achieve other purposes mentioned in this declaration, in particular not to fulfill legal storage or documentation obligations.

Recipient

The recipients of your data are the shipping service providers we use to send the sample box. Web service provider: Thorit GmbH, Binsenstraße 13, 91088 Bubenreuth

1.7. Automated decision-making and profiling

In general, no automated decision-making, including profiling, takes place with your personal data in accordance with Article 22 (1) and (4) GDPR.
An exception exists if we use your personal data in connection with a check by the credit reference agency CRIF. Details can be found in the corresponding chapter.

1.8. Data recipient

We only transfer your data to third parties if we are authorized to do so under data protection law. We will neither sell your personal data to third parties nor market it in any other way. Within the company, only authorized Sembach employees with the appropriate responsibilities have access to your personal data. Your data may also be passed on by us to external service providers (e.g. IT service providers, companies that destroy or archive data), which support us in data processing within the framework of order processing strictly in accordance with instructions. Data processing outside the EU or the EEA does not take place.

1.9. Processing of your data with the involvement of the credit agency CRIF

We transmit personal data collected within the scope of this contractual relationship regarding the application, execution and termination of this business relationship as well as data on non-contractual or fraudulent behavior to CRIF GmbH, Leopoldstraße 244, 80807 Munich.

The legal basis for this transfer is Article 6 para. 1 lit. b) and f) of the General Data Protection Regulation (GDPR). The exchange of data with CRIF GmbH also serves to fulfill legal obligations to carry out creditworthiness checks (§§ 505a and 506 of the German Civil Code, BGB).

CRIF GmbH processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area and in Switzerland and, if applicable, other third countries (insofar as an adequacy decision of the European Commission exists for these) with information, among other things, to assess the creditworthiness of natural persons.

Further information on the activities of CRIF GmbH can be found in its information sheet or online at www.crif.de/datenschutz.

1.10. Contact details of the data protection officer

We are supported by our data protection officer in the fulfillment of our data protection obligations.

The contact details of our data protection officer are

datenschutz süd GmbH
Wörthstr. 15
97082 Würzburg
office@datenschutz-sued.de
Phone +49 (0) 931 304 976 0

1.11. Rights of the data subject

Data subjects have the right to obtain information from the controller about the personal data concerning them and to have incorrect data corrected or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing if one of the conditions set out in Art. 18 GDPR applies and, in the cases set out in Art. 20 GDPR, the right to data portability.

If data is collected on the basis of Art. 6 para. 1 lit. e GDPR (data processing for the fulfillment of official tasks or for the protection of the public interest) or lit. f GDPR (data processing to safeguard legitimate interests), the data subject has the right to object to the processing at any time on grounds relating to his or her particular situation in accordance with Art. 21 GDPR. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

If data is processed in accordance with Art. 6 para. 1 lit. a GDPR (data processing on the basis of consent), the data subject has the right to withdraw consent at any time in accordance with Art. 7 para. 3 GDPR. The objection and revocation are effective for the future from the time they are exercised and do not affect the lawfulness of the processing that has already taken place.

1.12. Right to lodge a complaint with a supervisory authority

Every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of data relating to them infringes data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject’s habitual residence or place of the alleged infringement. In Bavaria, the competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, phone: +49 (0) 981 180093-0, fax: +49 (0) 981 180093-800, e-mail: poststelle@lda.bayern.de.