We take data protection seriously and hereby inform you how we process your data and what claims and rights you are entitled to under data protection regulations.

1. controller within the meaning of the General Data Protection Regulation and contact details of the data protection officer

The controller within the meaning of data protection law is

deconta GmbH
Im Geer 20
466419 Isselburg
Phone: +49 2874 91560
E-mail: info(at)deconta.com

You can contact our data protection officer at our postal address with the addition "the data protection officer" or at: datenschutz(at)deconta.com

 

2. purposes and legal basis on which we process your data

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations. Which data is processed in detail and how it is used depends on the respective agreed service.

2.1 Purposes for the fulfilment of a contract or pre-contractual measures (Art. 6 para. 1 b GDPR)

Personal data is processed in order to fulfil our contracts with you and to execute your orders as well as to carry out measures and activities in the context of pre-contractual relationships. In particular, the processing serves to prepare invoices in accordance with your orders and includes the services, measures and activities necessary for this.

2.2 Purposes within the scope of a legitimate interest of us or third parties (Art. 6 para. 1 f GDPR)

Beyond the actual fulfilment of the contract or preliminary contract, we may process your data if it is necessary to protect our legitimate interests or those of third parties, in particular for the following purposes:

• advertising or market and opinion research, unless you have objected to the use of your data;
• obtaining information and exchanging data with credit agencies, insofar as this is covered by our legitimate interest
• the enrichment of our data, e.g. by using or researching publicly available data;
• the restricted storage of data if deletion is not possible or only possible with disproportionate effort due to the special type of storage

2.3 Purposes within the scope of your consent (Art. 6 para. 1 a GDPR)

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The only mandatory information for sending the newsletter is your e-mail address. We store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email or by sending a message to the contact details given above under Controller.

2.4 Purposes for the fulfilment of legal requirements (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1 e GDPR)

We are subject to a large number of legal requirements (e.g. commercial and tax laws), as well as regulatory or other official requirements. The purposes of processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and investigation of terrorist financing and criminal offences that endanger assets, comparisons with European and international anti-terror lists, the fulfilment of control and reporting obligations under tax law and the archiving of data for the purposes of data protection and data security as well as audits by tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, criminal prosecution or the enforcement of civil law claims.

 

3. data categories processed by us, insofar as we do not receive data directly from you, and their origin

Insofar as this is necessary for the provision of our services, we process personal data legitimately obtained from other companies or other third parties (e.g. credit agencies). We also process personal data that we have legitimately extracted, received or acquired from publicly accessible sources (e.g. telephone directories, commercial and association registers, etc.) and are authorised to process.

Recipients or categories of recipients of your data
Within our company, those internal departments or organisational units receive your data that need it to fulfil our contractual and legal obligations or as part of the processing and implementation of our legitimate interest. Your data will only be passed on to external parties

• in connection with the execution of the contract;
• for the purpose of fulfilling legal requirements,
• on the basis of our legitimate interest or the legitimate interest of the third party for the purposes specified in section 2.2 (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, experts, group companies and bodies and supervisory authorities);
• if you have given us your consent to transfer your data to third parties.

We will not pass on your data to third parties beyond this.

 

4. duration of the storage of your data

We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract. In addition, we store data that must be retained due to commercial and tax regulations for 10 years. Other data for which no tax retention periods are applicable will be retained until the end of the regular limitation period (§§195, 199 BGB), but periods of up to 30 years may be applicable under certain circumstances.  
If the data is no longer required for the fulfilment of contractual or legal obligations and rights, it is regularly deleted, unless its - temporary - further processing is necessary for the fulfilment of the purposes listed in section 2.2 for an overriding legitimate interest.

 

5. processing of your data in a third country or by an international organisation

Data is transferred to bodies in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary for the execution of an order/contract from you, if it is required by law (e.g. reporting obligations under tax law), if it is in our or a third party's legitimate interest or if you have given us your consent.
Your data may also be processed in a third country in connection with the involvement of service providers as part of order processing. If there is no decision by the EU Commission on an appropriate level of data protection in the country in question, we ensure that your rights and freedoms are adequately protected and guaranteed in accordance with EU data protection regulations by means of appropriate contracts.

 

6. your data protection rights

You have the following rights vis-à-vis us with regard to your personal data:

• Right to information,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to the processing,
• Right to data portability.

You also have the right to complain to the data protection supervisory authority responsible for you about the processing of your personal data by us.

 

7. credit agencies

Our company regularly checks the creditworthiness of our customers if there is a legitimate interest, e.g. if our company could be exposed to a financial default risk . For this purpose, we work together with Creditsafe Deutschland GmbH, Sonnenallee 221 F, 12059 Berlin and Euler Hermes Deutschland Niederlassung der Euler Hermes SA, Gasstraße 29, 22761 Hamburg, from whom we receive the necessary data. For this purpose, we transmit your personal data from this contractual relationship and the information necessary for obtaining creditworthiness to the above-mentioned credit agencies and credit insurers. The legal basis for the data transfer is Art. 6 I 1 f), Art. 6 I b) GDPR. You can view the information pursuant to Art. 14 of the GDPR on the data processing carried out by the commissioned credit agencies and credit insurers at https://www.creditsafe.com/de/de/rechtliches/datenschutz.html and www.allianz-trade.de/datenschutz.html. We reserve the right to decide on a case-by-case basis which of the aforementioned credit agencies and credit insurers we use for the business relationship.

 

---

Information about your right to object Art. 21 GDPR

1. You have the right to object at any time to the processing of your data on the basis of Art. 6 (1) f GDPR (data processing on the basis of a balancing of interests) or Art. 6 (1) e GDPR (data processing in the public interest) if there are reasons for this arising from your particular situation.
2. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
3. We may also process your personal data for the purposes of postal advertising, mailings and, if applicable, direct advertising by e-mail. If you do not wish to receive advertising, you have the right to object to this at any time. We will observe this objection for the future and will no longer process your data for the purposes of direct advertising.

The objection can be made informally and should preferably be addressed to

deconta GmbH
Im Geer 20
46419 Isselburg
Phone: +49 2874 91560
E-mail: datenschutz(at)deconta.com

---