Data protection information

We would like to provide you with this data protection information about the processing of your personal data by Salzgitter Maschinenbau AG and the rights you are entitled to under the new EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG) from May 25, 2018 inform as the person concerned.

Person responsible for processing your personal data

PEINER SMAG Lifting Technologies GmbH

Windmühlenbergstraße 20-22

38259 Salzgitter

Telephone:  49 5341 302-04

Email: contact[at]smag.de

Data Protection Officer

We process your personal data exclusively in accordance with the legal requirements of the EU General Data Protection Regulation (GDPR), the new Federal Data Protection Act (BDSG) and any relevant sector-specific laws. We therefore only process your data if there is a contractual basis for this, you have given us your consent to process the data or a law permits the processing of your data or requires us to do so.

Data processing for the purpose of fulfilling a contract or carrying out pre-contractual measures

We process your personal data that you provided to us on the registration form/order form to the extent that this is necessary for the conclusion of the contract, the execution of the contract and the termination of the contractual relationship. In addition to the data of the service or goods you have ordered, this includes your first name, your last name, your customer number and your address. We process data in order to enable you to process the contract properly and to be able to contact you as quickly as possible, for example if you have any questions or problems also your address and/or your telephone or mobile phone number and/or your email address, if you have provided them to us for this purpose. The legal basis for data processing to fulfill a contract and the implementation of pre-contractual measures is usually Article 6 Paragraph 1 Letter b GDPR.

Data processing for the purpose of protecting the legitimate interests of the controller or a third party

We also process your data to the extent this is necessary to protect our legitimate interests or the legitimate interests of a third party. The processing we carry out based on a legitimate interest regularly includes direct advertising for our own products, the creation of internal statistics, the investigation of criminal offenses and measures to ensure the proper operation of our IT infrastructure. The legal basis for data processing is to protect the legitimate interests The interests of the person responsible or a third party are Article 6 (1) (f) GDPR.

Categories of recipients of personal data

Data processing in the group of companies

As part of our administrative activities and the implementation of the contract, it may be necessary for us to transmit your personal data to the company in our group of companies responsible for the respective data processing task.

external serviceprovider

Our external service providers who carry out data processing on our behalf are contractually obliged in accordance with Art. 28 GDPR to treat personal data in accordance with the applicable regulations. To the extent that these companies come into contact with your personal data, we have taken legal, technical and organizational measures as well as regular controls to ensure that they comply with the provisions of data protection laws.

Authorities

We may provide your personal data to the authorities if this is required under our legal notification obligations.

Data transfer to a third country

In principle, we do not transfer your personal data to a third country or to an international organization outside the European Economic Area (EEA). If we carry out such a transfer in individual cases, this will only happen to third countries for which an adequacy decision has been made by the European Commission or whose level of data protection has been confirmed by suitable or appropriate guarantees (e.g. binding corporate rules or EU standard contractual clauses).

Duration of data storage

We only store your personal data for the period for which it is necessary for the purposes mentioned above and for the period in which we potentially have to assert legal claims against us. The statutory limitation period for such claims can be between three and thirty years in individual cases.

In addition, we store your personal data to the extent that we are obliged to do so within the scope of the legal proof and storage obligations (e.g. in accordance with the Commercial Code, the Tax Code or the Money Laundering Act). The statutory retention periods can be up to ten years. Furthermore, in exceptional cases there may be special obligations to provide evidence that makes it necessary to store your personal data for a longer period of time.

Rights of data subjects

As a data subject, you have the following rights towards us in accordance with Article 15 ff. GDPR:

Right to information

You have the right to request information from us as to whether we process personal data concerning you. If this is the case, you have the right to request information from us about this personal data.

Right to rectification

You have the right to request that we correct inaccurate personal data concerning you.

Right to deletion

In certain cases, you have the right to request that we delete personal data relating to you immediately.

Right to restriction of processing

In certain cases, you have the right to request that we restrict processing.

Right to data portability

You have the right to receive from us the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.

Right to object to processing

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR. If we use your data for direct advertising, you can object to this at any time.

Right to withdraw

If you have given us your consent to use personal data, you can revoke this at any time.

Data Protection Supervisory Authority

In addition, you have the option of complaining to the data protection supervisory authority about our processing of personal data. The responsible data protection supervisory authority is:The State Commissioner for Data Protection Lower SaxonyPrinzenstraße 530159 Hannover

If you have any further questions or comments, please feel free to contact us or our data protection officer at any time.