Data protection information for customers, business partners, and interested parties

Responsible body

Komax SLE GmbH & Co. KG

Technopark 4

94481 Grafenau, Germany

Phone +49 8552-72 30-000

Fax +49 8552-72 30-001

Email: info.gra@komaxgroup.com

Data Protection Officer

Creditreform Compliance Services GmbH

Hammfelddam 13

41460 Neuss, Germany

Email: TeamPrivacy@creditreform-compliance.de

Purposes and legal bases for the processing

We process your personal data within the framework of our business relationship with you. For this purpose, your data may be processed for different purposes based on different legal bases:

Processing for the performance of contracts pursuant to Art. 6 (1)(b) GDPR

If personal data is collected and processed for the implementation of pre-contractual measures or on the basis of a contract, this data will be used for the conclusion of the contract, the implementation of the contractual relationship, and, if applicable, its termination.

Processing for the protection of legitimate interests pursuant to Art. 6 (1)(f) GDPR. Data may be processed in order to protect the legitimate corporate interests of Komax SLE GmbH & Co. KG, or, where applicable, those of third parties. This may be necessary, for example, to ensure IT security and IT operation, prevent and investigate criminal offenses/violations, and safeguard internal law in order to be able to offer our customers a post-contractual service, or for the purpose of direct marketing to our own customers and to answer general inquiries.

Processing on the basis of consent, Art. 6(1)(a) GDPR

Insofar as you have given Komax SLE GmbH & Co. KG consent to data processing for certain purposes (e.g., sending email newsletters), this personal data may be processed in accordance with the scope of the consent.

Processing for the fulfillment of legal obligations, Art. 6 (1)(c) GDPR

The data processing may be necessary for the fulfillment of legal obligations to which we are subject (e.g., the fulfillment of legal retention obligations).

Categories of personal data

We process the following categories of personal data:

Contact details (name, address, [if applicable, business] email address, telephone number)
Communication data (emails, notes, minutes of meetings)
Data on purchases and sales
If applicable, payments details
Credit information/checks (when obtaining information on private persons or individual companies)

Origin of personal data

We process your personal data insofar as this data is provided by yourself (e.g., customers within the framework of the business relationship), or, if applicable, by third parties.

Insofar as we receive personal data from third parties, these are in particular the following entities:

Financial intelligence agencies
Sales representatives
Business partners within the framework of the performance of contractual services

Reporting within the Group (Komax Group)

Recipients of your data

We provide access to personal data to those persons who need it for the lawful performance of their relevant tasks. If commissioned external service providers receive personal data for these purposes, we ensure that suitable technical and organizational measures are implemented and necessary agreements are concluded in such a way that processing takes place in accordance with the applicable data protection regulations, and guarantees the protection of the rights of the data subject.

We may disclose personal data to:

External service providers (e.g., IT service providers, data centers, support by software providers, payroll service providers, testing software (e.g., sanctions list screening)
Business partners with whom the data transfer is necessary for the performance of tasks, such as payment service providers/banking institutions, postal/parcel services, commercial agents, external consultants
If applicable, debt collection companies for the collection of receivables
Authorities and companies within the framework of updates or to fulfill legal notification obligations (e.g., social security institutions, tax authorities, police and public prosecutor’s office, supervisory authorities, road traffic authorities)
Other third parties for whom the data subjects have given consent to the data transfer or for whom there is legal authority to transfer data (e.g., lawyers, insolvency administrators)

Whenever we transfer your personal data to external recipients who process this data on our behalf, we will ensure that your data is transferred, protected and processed in accordance with all applicable data protection laws.

Will data be transferred to a third country or to an international organization?

None of your personal data will be transferred to a third country (countries outside the European Union or the European Economic Area) or to an international organization.

How long will we save your personal data?

The personal data will only be saved for as long as permitted by the applicable legal basis. In particular, for as long as it is necessary to fulfill the contractual purposes for which the personal data was collected, for as long as its further storage is necessary to fulfill retention obligations, or for an overriding legitimate interest.

Your rights

Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to deletion pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR and the right to data portability pursuant to Article 20 GDPR.

Right to object pursuant to Art. 21 GDPR: You can object to the processing of your data at any time, provided that it is processed on the basis of a balancing of interests (Art. 6 (1)(f) GDPR). In this case, we will no longer process your data, unless compelling legitimate grounds for the processing override your interests, rights and freedoms or the processing serves the assertion, exercise, or defense of legal claims.

Right to withdraw consent

Insofar as we base data processing on your consent (cf. Art. 6 (1)(a) and Art. 9 (2)(a) GDPR), you have the right to withdraw your consent at any time with future effect. This also applies if special categories of personal data are affected. The lawfulness of the processing of your data up to the time of revocation remains unaffected.

You can send the withdrawal to the contact information above.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority of your choice.

Obligation to provide personal data

An obligation to provide certain personal data arises from the contracts concluded or to be concluded insofar as the contract cannot be carried out without the provision of the data. In addition, legal obligations may apply that oblige us to collect/process certain data.

If data is required for a contract, the contract cannot be concluded if information is missing.

If data must be provided due to legal obligations, the associated performance cannot be provided without the provision of data.

Automated decision-making or profiling

Automated decision-making in individual cases, including profiling pursuant to Art. 22 GDPR, does not take place at Komax SLE GmbH & Co. KG.