Controller for data processing pursuant to point (a) of Art. 13(1) GDPR: Trading name pursuant to section 17(1) HGB inc. contact details of the responsible person (MD)
Veyhl GmbH
Schwarzwaldstrasse 2-8
D-75389 Neuweiler
Telefon: +49 (0) 7055/18-0
Telefax: +49 (0) 7055/18-180
Mail: info(at)veyhl.com
Stuttgart local court, HRB 331658
VAT ID number: DE 814 121 048
Managing director with power of representation: Gerhard Wahl, Jochen Gerken
Contact details of the data protection officer pursuant to point (b) of Art 13(1) GDPR:
Helbig Datenschutz GmbH
Michaela Helbig
Bräunleinsberg 51
91233 Neunkirchen a.S.
+49 9123 70275-10
michaela.helbig(at)helbig-datenschutz.de
Purposes and legal basis of the data processing pursuant to point (c) of Art 13(1) GDPR
The personal data will be processed for the performance of a contract or in order to take steps prior to entering into a contract. They include the customer master data with contact persons and the contact history, offers, purchase orders, invoices, project data and other statutory obligations of the controller. The legal basis derives from Art. 6 GDPR. Other substantive legal bases derive from the German Commercial Code (HGB), German tax legislation, the German Limited Liability Company Act (GmbHG) and other statutory requirements of relevance for Veyhl GmbH. These also include contractual arrangements. Newsletters are processed on the basis of consent from the data subject.
Processing is necessary to protect the legitimate interests of the controller or a third party pursuant to point (d) of Art. 13(1) GDPR.Where necessary, we will process your data beyond actual performance of the contract in order to protect our legitimate interests or those of third parties. These purposes includ:
- Managing distribution and controlling distribution
- Establishing legal claims and defending in the event of legal disputes
- Guaranteeing IT security and IT operations
- Measures to control and develop business
Categories of recipients of personal data (data transfer) pursuant to point (e) of Art. 13(1) GDPR
Within Germany, the European Union and the European Economic Area Germany: public accountants, bailiffs and other creditors as well as other state bodies for the fulfilment of statutory obligations and for required certifications, logistics companies, applicants, customers, suppliers and other bodies and business partners.
Third country inc. adequacy decision pursuant to point (f) of Art. 13(1) GDPR
In international business relations, data will be transferred pursuant to point (b) of Art. 6(1) for the performance of a contract or in order to take steps prior to entering into a contract. This does not require an adequacy decision.
Storage period pursuant to point (a) of Art. 13(2) GDPR
The respective purposes derive from statutory requirements and pertinent regulations specific to the industry. The personal data will be erased after the purpose has been achieved.
Rights of data subjects pursuant to point (b) of Art. 13(2) GDPR
You can at any time make use of your rights regarding the contact data set out above. If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
Notice of the rights of the data subject
The data subject has the right to demand confirmation from the controller as to whether personal data concerning them are being processed; if this is the case, they have the right to access these personal data and the information set out in detail in Art. 15 GDPR. The data subject has the right to require the controller to rectify without undue delay incorrect personal data concerning them and where appropriate to complete incomplete personal data (Art. 16 GDPR).
The data subject has the right to require the controller to erase personal data concerning them without undue delay if one of the reasons set out in detail in Art. 17 GDPR applies, e.g. if the data are no longer necessary for the purposes pursued (right to erasure). The data subject has the right to require the controller to restrict processing if one of the requirements set out in detail in Art. 18 GDPR is met, e.g. if the data subject has objected to the processing, pending verification by the controller.
The data subject has the right to object at any time to the processing of personal data concerning them on grounds relating to their particular situation. The controller will no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).
Rights of data subjects pursuant to point (c) of Art. 13(2) GDPR
If you have given us consent to process personal data for certain purposes (e.g. processing images of the data subjects), your consent makes such processing lawful. Once given, consent can be withdrawn at any time. This also applies for the withdrawal of declarations of consent that were given to us prior to the entry of the GDPR into force, i.e. prior to 25 May 2018. Please note that the withdrawal only has effect for the future. It does not affect processing performed prior to the withdrawal of consent.
Right to complain to a supervisory authority pursuant to point (d) of Art 13(2) GDPR
Notwithstanding any other remedy in administrative law or through the courts, every data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of the personal data concerning them infringes the GDPR (Art. 77 GDPR). The data subject can exercise this right with a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg the competent supervisory authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Hausanschrift: Königstrasse 10a, 70173 Stuttgart
Postanschrift: Postfach 1029 32, 70025 Stuttgart
Tel: +49 (0)711 615541-0
Fax: +49 (0)711 615541-15
E-Mail: poststelle(at)lfdi.bwl.de
Provision of personal data pursuant to point (e) of Art. 13(2)
For the purposes of our business relationship, you only need to provide personal data that are necessary for the establishment, implementation or termination of the employment relationship or that we have a statutory duty to collect. Without these data we will normally not be able to implement the employment relationship.
Change to the Data Privacy Statement - change of purpose
We reserve the right to change this Data Privacy Statement in compliance with data protection legislation. You can request it at any time using the above contact data. If we intend to process your data for purposes other than those for which they were collected, we will inform you of this in advance in compliance with statutory provisions.