Duty to Inform under Sec.13 GDPR When Collecting Personal Data from Data Subject
Under Sec. 13 GDPR, BRANOpac GmbH is obligated at the time of data collection to inform you of the following additional details:
1. Data Controller
BRANOpac GmbH processes personal data according to the principles of the EU General Data Protection Regulation. The data controller responsible for data collection and processing is BRANOpac GmbH.
2. Data Protection Officer Contact
The external data protection officer of the Company can be contacted at the following email address: firstname.lastname@example.org.
3. Processing Limits (Processing Purpose)
For processing purposes, the following categories of personal data are collected directly from the data subject:
- Name data, e.g. your name
- Address data, e.g. your postal address
- Communication data, e.g. your e-mail address
The personal data of the prospect/customer are collected for marketing and delivery purposes. The data are collected, stored and processed exclusively for this purpose on the legal basis of Sec. 6 Subsec. 1 b) GDPR.
On termination of the contract, personal data are blocked and erased after the expiry of the statutory retention period of maximally 10 years (Sec. 147 Subsec. 2 in connection with Subsec. 1 Nos.1, 4 and 4a AO, Sec. 14b Subsec. 1 UStG).
4. Data Recipient
BRANOpac GmbH will transfer your personal data to affiliated service providers or third parties only with your approval (see Consent) and only for the purpose of carrying out marketing measures or to comply with a legal requirement. The transmission is made in harmony with data protection regulations as well as social security data protection.
If your data are intended for transfer to a third party outside the EU/EEA, you will be notified separately.
5. Retention Period
In line with the statutory retention period, personal data including documents will be stored for a period of 10 years and thereafter deleted or erased in conformity with data protection regulations.
6. Rights of Data Subject
As a data subject, you have the following rights with regard to the storage and processing of your personal data:
Right of Revocation
You may revoke your consent at any time without quoting a reason and lodge an objection to the processing.
Right to Information
You have the right to demand information at any time on your personal data stored and processed by us. If your data are incorrect or no longer up-to-date, you may demand a report on their update and/or completion at any time.
Right to Erasure
You have the right to the erasure of your personal data processed by us. If you demand the erasure of your data, we will carefully examine your request and, unless barred by the statutory retention period, proceed to erase them.
Right to Limit Processing
If your erasure request runs counter to our statutory retention obligation, we will limit the processing of your personal data.
Right to Transferability
You may request us to supply your personal data at any time in a transferable and machine-readable format for their transfer to another entity.
Right of Objection
If you believe you have a reason to complain about the processing of your data, you are entitled to file a complaint with our data protection officer (for contact details see above) or the competent supervisory authority.
The Data Protection Commissioner for the State of Hesse
P.O. Box 31 63
Fax 0611/1408-900 or -901