Privacy Information on the collection of personal data pursuant to Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR) for our customers
With this information, we inform you about the processing of your personal data and your rights under data protection law. The specific data processed and how it is used largely depends on the requested and agreed-upon services.
Controller responsible for data processing and who I can contact:
Responsible Entity:
promoforever.eu
c/o AS ServiceGroup GmbH
Ober der Röth 4
65824 Schwalbach am Taunus
Email: datenschutz@promo4ever.eu
Phone: +49 69 – 254 74 1650
What data we process and what for (Purposes of processing) and on what legal basis we do this:
We process personal data in compliance with the EU General Data Protection Regulation (GDPR) as well as all other relevant laws. The processing of personal data (Art. 4 No. 2 GDPR) is generally always required if a business relationship is initiated with you or already exists. The purposes of the processing are primarily based on the service to be provided by us. Below we clarify the "core processing activities" in our company. In addition, there may be further processing operations about which you will be informed separately or in more detail in the respective process.
Insofar as the data provided or the special categories of personal data that may be derived from the data provided constitute data within the meaning of Art. 9 GDPR, the Contractor's task lies exclusively in product generation and not in the processing of this information. The Client/Customer guarantees the legality of the transmission and processing for the fulfillment of the order or request and that – where necessary – the appropriate consent of the data subjects has been obtained.
For the fulfillment of contractual obligations pursuant to Art. 6 Para. 1 lit. b) GDPR
| Purposes of Data Processing | Categories of Data |
|---|---|
| Preparation of offers, pre-contractual measures, order confirmation and processing, fulfillment of contract incl. delivery of goods | Personal master data (e.g.: title, salutation, surname, first name, further contact details), delivery addresses, billing addresses, contract data, graphic/print data, order information |
| Customer master data management | Personal master data, delivery addresses, billing addresses |
| Provision of services (graphic services) | Personal master data, graphic/print data |
| Invoice processing incl. reminders | Personal master data, billing addresses, payment information |
Based on your consent pursuant to Art. 6 Para. 1 lit. a) GDPR
If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent once given can be revoked (withdrawn) at any time. Please note that the revocation only takes effect for the future. Processing that was carried out before this revocation is not affected.
| Purposes of Data Processing | Categories of Data |
|---|---|
| Sending newsletters | Personal master data, order information |
| Customer satisfaction surveys for the purpose of product and process improvements | Personal master data, order information |
| Direct marketing (electronic advertising) | Personal master data, order information |
| Testimonials | Personal master data, photographs, expressions of opinion |
Within the scope of balancing interests pursuant to Art. 6 Para. 1 lit. f) GDPR
Where necessary, we also process your data to protect our legitimate interests or those of third parties. This can be the case, for example, for:
| Purposes of Data Processing | Categories of Data |
|---|---|
| Guaranteeing IT security and ensuring IT operations | Log data, protocol data |
| Statistical purposes | Personal master data, order information |
| Prevention and investigation of criminal offenses | All categories of data on an event-driven basis |
| Direct marketing (postal advertising) | Personal master data, order information |
| Direct marketing (electronic advertising) for similar goods and services taking into account Sec. 7 Para. 3 UWG (Unfair Competition Act) | Personal master data, order information |
| VIP customer care | Personal master data, date of birth, order information |
| Data enrichment customer segmentation | Personal master data, company data |
| Customer satisfaction surveys during the order process | Personal master data, contact details, order information |
Processing based on legal requirements pursuant to Art. 6 Para. 1 lit. c) GDPR
In the area of legal obligations, your personal data is processed in particular on the basis of commercial and tax law retention periods as well as, if necessary, information required by authorities.
To whom the data is passed on (Categories of recipients):
- Data processing within the company: We have bundled certain data processing operations within our company. These are handled centrally by specialized company departments. Here, your data can be processed, for example, for telephone customer service, invoicing, or mail processing.
- External contractors and service providers (this also includes processors): To fulfill our tasks and contract fulfillment, we partly use external contractors and service companies. These may include, for example, document shredding companies, print service providers, logistics (delivery and postal services), IT service providers, prepress companies, as well as credit institutions and payment service providers for payment processing.
- Further recipients: Furthermore, data may be passed on to recipients to whom we are legally obliged to disclose it (e.g., law enforcement authorities and courts).
Further Information
- Duration of data storage: As far as necessary, we process and store your personal data for the duration of our business relationship. This also includes the initiation and processing of a contract/order. In addition, we are subject to various retention obligations arising, inter alia, from the Commercial Code. Finally, the storage period also depends on the statutory limitation periods, which are usually 3 years but can also be up to 30 years.
- Data transfer to third countries: A data transfer to third countries (states outside the EU and the European Economic Area EEA) only takes place if this is necessary for the execution of a contract/order/business relationship including initiation, and only in compliance with the data protection requirements prescribed for this purpose.
Data Subject Rights:
You can request information about the data stored about you via the contact details provided above (Art. 15 GDPR). In addition, you can request the correction or deletion of your data under certain conditions (Art. 16 and 17 GDPR). You have the right to request the restriction of the processing of your personal data (Art. 18 GDPR). Furthermore, you have the right to receive the data you have provided in a structured, commonly used, and machine-readable format (Art. 20 GDPR).
Is there an obligation to provide data?
In the context of initiating or conducting a business relationship with us, you generally only need to provide the data that we require for the corresponding establishment, execution, or termination of this relationship. Without the provision of the necessary data, we may have to refuse the establishment of a business relationship, or may not be able to execute it, or may even have to terminate it.
Right to complain:
You have the option to lodge a complaint with the above-mentioned data protection officer or a data protection supervisory authority.
Automated individual decision-making:
We do not use fully automated processing processes to bring about a decision.
Right to object:
For legal reasons, we inform you of your right to object as detailed below. However, direct advertising with your personal data as mentioned therein is not carried out by us.
If we process your data to protect legitimate interests, you can object to this processing if there are reasons arising from your particular situation that speak against the data processing. We will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.