Declaration on the duty to provide information – in accordance with Article 13 of the EU General Data Protection Regulation – for clients and suppliers
Dear Sir/Madam,
Thank you for your interest in our company. We take your data protection very seriously. In accordance with Article 13 of the GDPR (EU General Data Protection Regulation) we are obligated to provide you with specific information on the collection, processing and use of your personal data. Processing of your data, received from you in the course of your contact or provided by you in the resulting business relationship is made strictly on the basis of legal regulations (GDPR and the new German Privacy Law BDSG).
This declaration serves to inform you about the main aspects of data processing made in the course of our business activities.
This declaration serves to inform you about the main aspects of data processing made in the course of our business activities.
Responsible body | Controller
Wöhler Brush Tech GmbH
Wöhler-Platz 2
33181 Bad Wünnenberg
GERMANY
Telefon: +49 2953 73300
Email: [email protected]
General Manager: Dipl.-Ing. Matthias Peveling, Daniel Horenkamp, MBA
Wöhler Brush Tech GmbH
Wöhler-Platz 2
33181 Bad Wünnenberg
GERMANY
Telefon: +49 2953 73300
Email: [email protected]
General Manager: Dipl.-Ing. Matthias Peveling, Daniel Horenkamp, MBA
Data protection officer
The data protection officer responsible for Wöhler Brush Tech GmbH can be contacted as follows:
The data protection officer responsible for Wöhler Brush Tech GmbH can be contacted as follows:
Name: Oliver Baldner
Adress: bITs GmbH, Detmolder Straße 204, D-33100 Paderborn, Germany
Tel: +49 52 51 688 94 80
Fax: +49 52 51 688 98 84
E-Mail: [email protected]
Adress: bITs GmbH, Detmolder Straße 204, D-33100 Paderborn, Germany
Tel: +49 52 51 688 94 80
Fax: +49 52 51 688 98 84
E-Mail: [email protected]
Purposes of processing personal data | Legal basis and categories of personal data processed
On contacting us or entering a business relationship as client or supplier with us, we shall collect the following information:
• Title, first name, surname
• Valid e-mail address
• Company name
• Office/position in company
• Address, telephone number (landline and/or mobile)
• Contractual data to orders made or received
• Bank details
• Further personal data, required by us in meeting our contractual duties with our clients.
• Valid e-mail address
• Company name
• Office/position in company
• Address, telephone number (landline and/or mobile)
• Contractual data to orders made or received
• Bank details
• Further personal data, required by us in meeting our contractual duties with our clients.
Collection of this data is made for the following purposes:
• to properly identify you as our business contact
• to consult you appropriately
• for correspondence with you
• for fulfilling our contractual duties with suppliers and clients.
• to consult you appropriately
• for correspondence with you
• for fulfilling our contractual duties with suppliers and clients.
The legal basis for processing your personal data is as follows:
• Article 6, paragraph 1, letter a of the GDPR (consent of the data subject)
• Article 6, paragraph 1, letter b of the GDPR (measures prior to contract or for the performance of contract)
• Article 6, paragraph 1, letter f of the GDPR (legitimate interests of the controller).
• Article 6, paragraph 1, letter b of the GDPR (measures prior to contract or for the performance of contract)
• Article 6, paragraph 1, letter f of the GDPR (legitimate interests of the controller).
Processing of your personal data for the purposes of legitimate interests
Should we process your personal data for the purposes of legitimate interests, then these are the following:
• Saving and processing of your contact data for communicating with you
• To supply you with information on our company, products and/or services.
• To supply you with information on our company, products and/or services.
Categories of recipients of your personal data
Forwarding of your personal data may be made to external processors, active for us in accordance with Article 28 of the GDPR. Examples of such activities are IT, maintenance and shipping service applications.
Categories of external processors used:
• Leonex Internet GmbH, service provider for webhosting
• External service providers, operating for us in maintenance or IT applications
• External service providers, operating for us in forwarding and shipping applications
• Agents and sales representatives for our clients, active for us as part of their operating activities.
• External service providers, operating for us in maintenance or IT applications
• External service providers, operating for us in forwarding and shipping applications
• Agents and sales representatives for our clients, active for us as part of their operating activities.
Furthermore, we may also forward your data to external parties, when we are legally obligated to do so.
Duration of data storage
Personal data stored on the basis of statutory storage obligations will be erased as soon as the obligation ends. Personal data is otherwise erased, once the purpose of processing ends.
Data stored on the basis of data subject consent in accordance with Article 6, paragraph 1, letter a of the GDPR is erased once the purpose of processing ends or the consent is revoked.
Cookies Settings
Data stored on the basis of data subject consent in accordance with Article 6, paragraph 1, letter a of the GDPR is erased once the purpose of processing ends or the consent is revoked.
Cookies Settings
Rights of data subject | Right of appeal
In accordance with Article 7, paragraph 3 of the GDPR you have the right to revoke your consent from us at any time. This means we are no longer allowed to carry out the data processing, which was based on this consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In accordance with Article 15 of the GDPR you have the right to demand information on our processing of your personal data, in particular regarding:
• The purposes of processing
• The categories of personal data concerned
• The categories of recipients, to whom your data has been or will be disclosed
• The envisaged period of storage
• The existence of rights of rectification, erasure, restriction of processing or objection
• The right to lodge a complaint with a supervisory authority
• The source of your data, if not collected by us
• The existence of automated decision-making including profiling and to demand meaningful information in this context.
• The categories of personal data concerned
• The categories of recipients, to whom your data has been or will be disclosed
• The envisaged period of storage
• The existence of rights of rectification, erasure, restriction of processing or objection
• The right to lodge a complaint with a supervisory authority
• The source of your data, if not collected by us
• The existence of automated decision-making including profiling and to demand meaningful information in this context.
In accordance with Article 16 of the GDPR you have the right to demand without undue delay the rectification of your inaccurate personal data stored by us.
In accordance with Article 17 of the GDPR you have the right to demand the erasure of your personal data stored by us, unless any legal basis entitles or obligates us to further store the data.
In accordance with Article 18 of the GDPR you have the right to demand the restriction of processing your personal data in the following cases:
• You have contested the accuracy of the personal data, for a period enabling us to verify the accuracy thereof
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
• We no longer need the personal data for the purposes of processing, but these are required by you for the establishment, exercise or defence of legal claims
• You have objected to the processing of your personal data in accordance with Article 21, paragraph 1 of the GDPR, pending the verification whether our legitimate grounds override your grounds.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
• We no longer need the personal data for the purposes of processing, but these are required by you for the establishment, exercise or defence of legal claims
• You have objected to the processing of your personal data in accordance with Article 21, paragraph 1 of the GDPR, pending the verification whether our legitimate grounds override your grounds.
In accordance with Article 20 of the GDPR you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to have this data forwarded to another controller.
In accordance with Article 77 of the GDPR you have the right to lodge a complaint with a supervisory authority, if you consider the processing of your personal data to infringe against the GDPR.
Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Article 6, paragraph 1, subparagraph 1, letter f of the GDPR, then you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, if reasons apply from your particular situation.
Provision of your data
The provision of certain personal data is generally not necessary for the fulfilment of our contractually agreed services for our suppliers and clients.
And our presence on Facebook
Under the following link, you can reach our Facebook page, for which we are jointly responsible with Meta Platforms Ireland Limited based in Dublin (Ireland) for certain functions (see below) in accordance with Article 26 of the GDPR:
https://www.facebook.com/wohlerbrushtech
Meta Platforms Ireland Limited is a subsidiary of Meta Platforms Inc. (formerly Facebook Inc.) based in Menlo Park, California, USA (Meta Platforms).
Insofar as you visit our Facebook page specified above, Meta Platforms collects, among other things, your IP address as well as other information, which Meta Platforms stores on your PC in the form of cookies in order to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page.
Meta Platforms provides more detailed information on data processing in this context at the following link: https://facebook.com/help/pages/insights.
In joint responsibility with Meta Platforms pursuant to Article 26 of the GDPR, we analyse how you use our Fanpage (Page Insights function). Meta Platforms provides the information on data processing within the scope of Page Insights that must be made available in accordance with the GDPR at the following link: https://www.facebook.com/privacy/explanation.
Meta Platforms also provides you with the relevant contents of the joint responsibility processing agreement concluded between Meta Platforms and us pursuant Article 26 of the GDPR at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
Meta Platforms Ireland Limited has agreed to assume primary responsibility under the GDPR for the processing of Insights Data and to comply with all obligations under the GDPR with respect to the processing of Insights Data. This relates in particular to Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR and Articles 32 to 34 of the GDPR.
The statistical information transmitted to us does not constitute personal data (any more) for us, so that it is not possible for us to identify you based on this data. We only use the statistical data to the extent that we generally want to understand the interests of our users better in order to improve our online presence and to ensure the quality of our online offers.
To the extent that we collect your personal information through our Facebook page (e.g. your name, nickname, content of messages sent to us, content of comments, and profile information you provide “publicly”) only to communicate and interact with you.
We process your personal data in principle for the purpose of communication and interaction based on our legitimate interest pursuant to Article 6 (1) lit. f of the GDPR. Our legitimate interest is that we pursue our business management objectives through our information and communication offers on the Facebook page.
Insofar as we carry out processing in connection with the operation of our Facebook page for which your consent is required (e.g. participation in a competition, raffle, sending a newsletter, etc.), this will be obtained separately on our part in each case. In this case, the processing of your personal data is based on Article 6 Paragraph 1 lit. a in conjunction with Article 7 of the GDPR.
Insofar as the social network Facebook collects their data for its own purposes for which consent is required (e.g. evaluation of user behavior), this is also done based on Article 6 para. 1 lit. a in conjunction with Article 7 of the GDPR. In this case, the social network itself obtains the required consent.
Due to the joint responsibility of Meta Platforms and us for the processing of personal data on our Facebook presence, you can assert your data subject rights both with us and directly with Meta Platforms.
As Meta Platforms is responsible for the majority of the data processing that takes place as a service provider, our ability to access your data is very limited. Only the service provider has full access to your data according to the terms of use of the network. For this reason, usually only the provider of the social network can take and implement the necessary measures to fulfil your data subject rights (e.g. right to information, deletion, objection, etc.). The most effective way to assert your rights is therefore directly against the network provider.
Please note that Meta Platforms in the USA also processes personal data.
CONTACT US
Inquiries
+49 29 53 - 73 300
Aftersales / Spare parts
+49 29 53 - 73 300
Technical support
+49 29 53 - 73 333