for customers and suppliers

Information in accordance with article 13 of the GDPR for customers and suppliers

Information according to Art. 12 et seq. GDPR for clients, suppliers, other communication partners and visitors to our premises Thank you for your interest in our company. The protection of your personal data is particularly important to us. According to Art. 12 ff. DS-GVO (General Data Protection Regulation), we are obliged to provide you with certain information on the collection, processing and use of your personal data. We process your data that we received when you contacted us or that you made available to us as part of the resulting business relationship, as well as data that we may receive from other sources (see below), therefore exclusively on the basis of the statutory provisions (in particular DS-GVO, BDSG). In this data protection information we inform you about the most important aspects of data processing within the scope of our business activities.

Responsible

Wemhöner Surface Technologies GmbH & Co. KG 
Planckstrasse 7
32052 Herford
Germany
Telephone: +49 5221 77020
Email: info@wemhoener.de

Managing Director: Dipl. Oek. Heiner Wemhoner

Data Protection Officer

Our company data protection officer can be reached under the following contact detail:

Name: Oliver Baldner
Address: bits GmbH
Detmolder Strasse 204
D-33100 Paderborn
Germany

Telephone: +49 5251 6889480
Email: datenschutz_wemhoener@bits.gmbh

Categories of personal data being processed

As part of our business activities, we process the following personal data or data categories:

• Salutation, first name, last name,
• a valid email address,
• Company Name,
• function / position in the company,
• Address, Telephone number (landline and/or mobile),
• Contractual data on orders placed or received,
• bank details,
• Video recordings (cable storage, fire brigade access, garbage cans), other personal data that we need to fulfill our contractual obligations with our clients or that we process to fulfill legal obligations,
• Content data of your message or your input to us. For example, if you assert your rights as a data subject or consult our external data protection officer in connection with the processing of your personal data and do not transmit your request or input directly to the data protection officer, but to us for forwarding to the data protection officer,
• Data required to assert, exercise or defend civil claims
• Purposes of data processing of personal data and the legal basis

This data is collected for the following purposes:

• to be able to identify you as our business contact,
• to be able to advise you appropriately,
• for correspondence with you,
• to fulfill our contractual obligations with our suppliers and clients,
• Vandalism prevention, house rules,
• protection of third-party rights,
• to assert, exercise or defend civil claims,
• to fulfill our legal obligations and tasks, in particular from Art. 38 para. 2, 15 – 22 GDPR in the context of cooperation with our external data protection officer (e.g. to forward inquiries from data subjects to the data protection officer, cooperation with the supervisory authorities),
• If applicable, list of other permissible processing purposes.

The legal bases for processing your personal data are:

• Article 6(1)(a) GDPR (consent of the data subject),
• Article 6 (1) (b) GDPR (for pre-contractual measures or to fulfill a contract),
• Art. 6 (1) (c) GDPR, possibly in conjunction with Art. 38 (2) and possibly Art. 15 – 22 GDPR (fulfillment of a legal obligation, e.g. when forwarding inquiries to the data protection officer or in the context of fulfilling the rights of data subjects and in connection with the receipt of data from the data sources specified below),
• Article 6 paragraph 1 lit. f GDPR (legitimate interest of the person responsible)
• Processing of your personal data based on legitimate interests

If we process your personal data for legitimate interests, these interests consist of:

• store and process your contact details and communicate with you,
• send you information about our company and our products and/or services,
• Establish, exercise and defend our legal rights,
• Protection of property (material property, customer data and information as well as trade and business secrets)
• Data Source

In principle, we collect your personal data directly from you as the person concerned. In certain situations, however, it may exceptionally happen that we do not collect your personal data directly from you as a data subject, but from other (external) bodies. Such external bodies include, for example, our clients, suppliers, customers or processors (e.g. in the case of forwarding inquiries from data subjects to us).

Recipients of your personal data

Your personal data will be forwarded to external contractors who carry out certain activities for us as part of order processing in accordance with Art. 28 DS-GVO and to public authorities. These activities are, for example, IT services, maintenance activities, shipping activities.

Possible recipients are:

• Inmotto GmbH, Freiligrathstr. 28, D- 32105 Bad Salzuflen, Erbringung von Dienstleistungen im Bereich Webhosting,
• webgo GmbH, Heidenkampsweg 81, 20097 Hamburg, Erbringung von Dienstleistungen im Bereich Webhosting,
• Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA
• TELCAT MULTICOM GmbH, Sudetenstraße 10, 38239 Salzgitter
• Strafverfolgungsbehörden (Aufnahmen der Videoüberwachung zur Beweisführung im Rahmen der Zweckbestimmung)

Data transfer to recipients in a third country

Your data will only be forwarded to recipients in a third country if we are legally obliged to do so or, as already explained above, as part of order processing in accordance with Art. 28 DSGVO. Insofar as personal data is transmitted to a recipient in a third country (e.g. (sub)contractor), the data is transmitted on the basis of an adequacy decision if suitable guarantees exist in accordance with Art. 46 (2) GDPR (in particular standard contractual clauses, binding internal data protection regulations) or in exceptional cases according to Art. 49 GDPR. A copy of the appropriate and reasonable warranties, if desired, can be obtained upon request by either writing to us or emailing us.

Duration of storage

Personal data stored due to legal storage obligations will be deleted as soon as the storage obligation no longer applies. Otherwise, personal data will be deleted if the purpose of the processing no longer applies or if they are no longer required to achieve the purpose. The personal data of the video surveillance are automatically deleted after 14 days, unless further storage is required for reasons of proof. Personal data that we store on the basis of consent given by the person concerned in accordance with Article 6 Paragraph 1 lit. a GDPR will be deleted if the purpose of the processing no longer applies or if the consent is revoked.

Rights of data subjects / right of appeal

According to Art. 15 DS-GVO, you have the right to request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the category of personal data processed by you, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the rights to correction, deletion, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of their data, if they were not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information on their details.

In accordance with Art. 16 DS-GVO, you have the right to immediately request the correction of incorrect or the completion of your personal data stored by us.

According to Art. 17 DS-GVO, you have the right to request the deletion of your personal data stored by us, unless there is a legal basis that entitles or obliges us to continue storing the data.

According to Art. 18 DS-GVO, you have the right to demand the restriction of the processing of your personal data if:

• the accuracy of the personal data is disputed by you, for a period enabling us to verify the accuracy of the personal data,
• the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted,
  we no longer need the personal data for the purposes of processing, but you need the Data to exercise or defend against legal claims
• You have lodged an objection to the processing pursuant to Article 21 Paragraph 1 DS-GVO, as long as it is not certain whether our legitimate reasons outweigh your reasons.

In accordance with Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.

According to Art. 77 DS-GVO you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the DS-GVO.

Right to revoke consent

In accordance with Art. 7 Para. 3 DS-GVO, you have the right to revoke the consent you have given us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are reasons for this that arise from your particular situation.

Provision of your data

The provision of certain personal data is required to provide our services to our clients. In addition, the provision of your data is necessary in particular to process your data protection request. If this data is not provided, we cannot provide our services in certain cases and cannot process your inquiries or entries. It is usually not necessary for suppliers to provide us with personal data.

questions and suggestions

If you have further questions about the information on data protection and the processing of your personal data, you can contact us using the contact details given above.

Secure communication

If you contact us with your request, especially as the person concerned, and use our contact form, the data transmission to us is encrypted.