Data Information Business Partners and Prospective Customers

Who is responsible for data processing/Who is the data controller?

DUO PLAST AG

David-Eifert-Straße 1

36341 Lauterbach

Phone: +49 (0) 6641 6550-0

Mail: info@duoplast.ag

If another group company is the contracting party, that company is the data controller under data protection law.

How can you contact our data protection officer?

You can reach our data protection officer at the following contact address: datenschutz@duoplast.ag

For what purposes and on what legal basis do we process your personal data?

§   Execution and processing of the contractual relationship in accordance with Art. 6 (1) (b) GDPR (e.g. fulfilment of contractual performance obligations, invoice processing, communication, etc.)

§   For internal organizational and administrative purposes and to support the joint internal administration of our affiliated companies in accordance with Art. 6 (1) (f) GDPR

§   Fulfilment of legal obligations Art. 6 (1) (c) in conjunction with Art. 39 GDPR (e.g. tax and commercial law retention obligations)

§   Legitimate interest in the processing in accordance with Art. 6 (1) (f) GDPR (e.g. settlement of legal disputes, assertion, exercise and defense of legal claims)

§   Marketing purposes Art. 6 (1) (a) and (f) GDPR based on consent (e.g. for the newsletter, references, collaborations, conducting market analyses, competitions, contests or similar promotions, etc.) or existing legitimate interests (e.g. for advertising similar products and services, satisfaction surveys, direct marketing, etc.)

If country-specific regulations apply, these will be taken into account accordingly.

What data categories do we process from you?

§   Personal details (first name, surname, business contact details, title/position)

§   Contract information (payment details, invoice details)

§   Communication contents (emails, phone calls or business letters)

§   Business relationship history (e.g. advertising and sales data)

§   Other data arising from the fulfillment of our contractual and legal obligations

Who has access to your personal data (internally and externally)?

We give access to your data to those departments that need it to fulfill contractual and legal obligations. Depending on the purpose, this may include:

§   internal Departments: Department Heads, Field Sales, Sales, Executive Board, Management, Leadership Team, Finance and Accounting, Human Resources, Works Council, Facility Management, IT, Controlling, Marketing, Quality Assurance, Development and Application Engineering, Engineering, Purchasing, Supply Chain, Order Center

§   External entities: Subsidiaries and branches of the Group, data processors, external service providers, tax advisors, debt collection agencies, government agencies (tax office, data protection authority), cooperation partners

Data transfer and data processing within and outside the European Union or the European Economic Area

Your personal data will always be processed both within and outside the European Union and the European Economic Area (EEA) by the above-mentioned parties in compliance with the contractual restrictions on confidentiality and security and in accordance with the applicable laws and regulations on data protection. We do not disclose your personal data to parties that are not authorized to process it.

We will always ensure that appropriate measures are taken in accordance with all applicable laws to protect any such transfer of your personal data outside the European Union at all times.

How long do we store your personal data?

We store your data for different lengths of time depending on the required processing purpose. As a rule, we process your information for the duration of the entire business relationship (from the initiation, processing, to the termination of a contract, as well as to the termination of any interest in information from your side).

In addition, we store your data in compliance with and within the scope of the statutory retention and documentation obligations, the applicable guarantee, warranty and limitation periods, in the event of legal disputes in which the data is required as evidence, until the end of the period.

If other country-specific retention obligations are relevant, these are taken into account accordingly.

Would you suffer any disadvantages if you did not provide us with the data?

If you do not wish to provide us with the information, we will be unable to conclude a contract with you.

What rights are available to you?

§   Right to information

§   Right to rectification

§   Right to erasure

§   Right to restricted processing

§   Right to data transfer

You have the right to do the following in the event of the legal requirements being met:

§   to request information about which of your data is processed by us;

§   to have your data corrected or deleted, unless our legitimate interest or a legal obligation precludes processing;

§   restrict the processing of your data;

§   to be able to assert the right to data portability.

Note on revocation: If you have given your consent to certain processing activities, you can revoke this at any time with effect for the future. This revocation will not affect the previous processing of the data.

Note on objection: If we process your data on the basis of legitimate interest, you can also object to this processing at any time in accordance with Art. 21 GDPR.

To exercise your rights, please contact us using the contact information provided above.

Does automated decision-making/profiling take place?

No automated decision-making or profiling is carried out during processing.

In the course of processing, AI-supported applications may be used to assist with analysis, structuring, or evaluation processes. These systems serve exclusively to prepare for and support decision-making processes. There is no exclusively automated decision-making within the meaning of Article 22 of the GDPR. All final decisions are always made by natural persons.

Where can you lodge a complaint about the processing of your personal data?

If you believe that we are processing your data unlawfully, you have the right to file a complaint with the competent supervisory authority.

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Phone: +49 (0) 611 140 80

Mail: poststelle@datenschutz.hessen.de

You can find an overview of national data protection supervisory authorities here.

The international data protection authorities are listed here.