Sembach GmbH & Co. KG, Oskar-Sembach-Straße 15, 91207 Lauf an der Pegnitz, is responsible for data collection and processing.
Data processing for the protection of legitimate interests
We process your information within the company for internal administrative purposes as well as for direct marketing purposes. The data processing is based on Art. 6 paragraph 1 sentence 1 lit. (f) GDPR and in the interest of promoting the conclusion or execution of contracts and other business relationships, to carry out the associated customer support or to handle internal administrative tasks (such as the management of business contacts, accounting, etc.).
In addition, your data will be processed based on Art. 6 paragraph 1 sentence 1 lit. (f) GDPR in the interest of providing you with tailored advertising by email if you meet the legal requirements and informing you about our company and our products by post or telephone.
The data is always deleted after termination of the business relationship or as soon as it is no longer required for the purpose of direct marketing. In the event of legal and contractual retention periods, the affected data will be archived for the duration of these periods.
Data processing for contract fulfillment
In addition, we process your collected data according to Art. 6 paragraph 1 sentence 1 lit. (b) GDPR for the performance of contracts and other business relationships that we maintain with you as an individual. This includes, for example, the processing of purchase orders, deliveries or payments or the assertion of warranty rights.
If necessary, personal data is shared with the companies involved in the execution of this contract, such as credit institutions for payment processing.
The data required for the fulfillment of the contract will be deleted after termination of the contractual relationship. The data will not be deleted if after contract termination, there are still outstanding receivables to be collected. In the event of legal and contractual retention periods, the affected data will be archived for the duration of these periods.
Data processing to fulfill legal obligations
If necessary, we process your data in order to be able to fulfill legal obligations, which may result from tax, foreign trade or sanctions regulations. The data processing is based on Art. 6 paragraph 1 sentence 1 lit. (c) GDPR. The data is archived for the duration of the respective legal retention period and then deleted.
Data processing based on consent
We also process your data for the purpose of direct mailing by email, as far as you have given us your consent and the processing is not already based on the exercise of legitimate interests.
The data is processed according to Art. 6 paragraph 1 sentence 1 lit. (a) GDPR. We will delete your data as soon as it is no longer necessary for the purpose of direct mailing.
Automated decision making and profiling
No automated decision making including profiling according to Article 22 (1) and (4) GDPR takes place with your data.
We only transfer your data to third parties, provided that a data protection law transmission authority exists. We will not sell or otherwise market your personal information to third parties.
Within the company, only authorized Sembach employees with appropriate responsibilities have access to your personal data.
Your data can also be forwarded to external service providers (e.g. IT service providers, companies that destroy or archive data), which support us strictly bound by instruction in the processing of data in the context of order processing.
Data processing outside the EU or the EEA does not take place.
Contact details of the data protection officer
datenschutz süd GmbH
Tel. +49 (0) 931 304 976 0
Rights of the data subject
Data subjects have the right of information from the person responsible about the personal data concerning them as well as the right to correction of incorrect data or on deletion, if one of the reasons stated in Art. 17 GDPR, e.g. if the data for the pursued purposes are no longer needed. There is also the right to restrict processing if one of the conditions set out in Art. 18 GDPR exists and, in the case of Art. 20 GDPR the right to data portability.
If data is collected based on Art. 6 paragraph 1 sentence 1 lit. (e) GDPR (data processing for the official performance of the task or for the protection of the public interest) or lit. (f) GDPR (data processing to safeguard legitimate interests), the data subject has the right under Art. 21 GDPR the right to object to the processing at any time for reasons that arise from their particular situation. We will then no longer process the personal data unless there are evidently compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
The data is processed according to Art. 6 paragraph 1 sentence 1 lit. a GDPR (data processing based on consent), the data subject has the right under Art. 7 para. 3 GDPR to revoke the consent at any time. The objection and revocation shall be effective from the time of exercise and shall not affect the legality of any processing already performed.
Right of appeal to a supervisory authority
Every data subject has the right to complain to a supervisory authority if they consider that the processing of the data concerning them is contrary to data protection provisions. In particular, the right of appeal may be invoked by a supervisory authority in the Member State of the data subject’s place of residence or the place of the alleged infringement. In Bavaria, the competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, Phone: +49 (0) 981 180093-0, Fax: +49 (0) 981 180093-800, Email: email@example.com.