Data protection

This privacy notice applies to the processing of personal information by:
LEONHARD WEISS GmbH & Co. KG
Leonhard-Weiss-Str. 22
73037 Göppingen
P +49 07161-602-0
bau-de(at)leonhard-weiss.com 

The company’s data protection officer can be contacted at:
LEONHARD WEISS GmbH & Co. KG Datenschutzbeauftragter
Leonhard-Weiss-Str. 22
73037 Göppingen
datenschutz(at)leonhard-weiss.com

We process personal data pursuant to Art. 6 para. 1 sentence 1 lit. b of the EU General Data Protection Regulation (hereinafter "GDPR") which is necessary for the fulfilment of obligations arising from the contractual relationships with our customers, particularly for for trouble-free project coordination, correspondence and invoicing. This includes in particular title, first name, surname, a valid email address, address, phone number (landline and/or mobile) and - to the extent necessary within the context of business transactions in accounting - banking and payment transaction data. 

To optimise our internal processes, we use AI systems where necessary to efficiently process the data generated as part of the business relationship. This data is anonymised as far as possible. We base the processing on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interest lies in increasing the efficiency of our internal processes and procedures. We expressly point out that the data is not used for training purposes and is processed exclusively on local servers.

We process your personal data, in order to inform you about our innovations, in order to invite you to trade fairs, or in order to contact you for surveys to find out about the satisfaction of our business partners. This use of personal data is in our legitimate interest (art. 6 par. 1 sentence 1 letter f GDPR).

We collect and process your personal data in connection with client satisfaction surveys on the basis of your agreement (art. 6 par. 1 sentence 1 letter a GDPR).

Before concluding a contract with you, we may request information on your economic activities, creditworthiness and solvency from credit agencies in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Such information will only be requested if a prior assessment has shown that we have a justified interest in requesting information - in particular if we provide services in advance and this may lead to a financial risk of default - and our interest in data processing overrides your interest in non-execution.

We regularly carry out creditworthiness checks when entering into contracts, when opening accounts for new customers and, in certain cases involving existing customers, where we have a legitimate interest in doing so.
For this purpose, we work with credit reference agencies from which we obtain the data required to assess creditworthiness. In this context, and on behalf of the relevant credit reference agencies, we hereby provide you in advance with the following information pursuant to Article 14 GDPR:
Credit reference agencies maintain databases in which creditworthiness information relating to you is stored. On this basis, they provide us with credit reports. The data stored by such agencies may include, in particular, your name, address, date of birth, email address (where applicable), payment behaviour and shareholding interests.

The purpose of processing this stored data is to enable the provision of information regarding the creditworthiness of the companies concerned. The legal basis for this processing is Article 6(1)(f) GDPR. The legitimate interests pursued within the meaning of Article 6(1)(f) GDPR may include, in particular: credit decisions, the initiation of business relationships, the assessment of shareholding structures, the management of receivables, creditworthiness checks, the conclusion of insurance contracts and the obtaining of information for enforcement purposes.
Any processing of the data stored by us is carried out on the basis of compelling legitimate grounds worthy of protection. These grounds include, in particular, the protection of creditors and protection against credit risk.

Where LEONHARD WEISS cooperates in a specific case with one or more partner companies as part of a bidder consortium or joint venture ("Bietergemeinschaft"/"Arbeitsgemeinschaft"), personal data may be processed under joint controllership pursuant to Article 26 GDPR. This applies in particular to the initiation, performance and handling of joint bids, projects or construction works.
Joint controllership exists in each case between LEONHARD WEISS and the partner company or companies involved in the specific bidder consortium or joint venture. The participating companies define their respective data protection obligations and areas of responsibility or process stages in an agreement pursuant to Article 26 GDPR. More detailed information on the substance of this agreement can be requested from LEONHARD WEISS and from each of the other joint controllers.

Within the scope of joint controllership, the following categories of data in particular may be processed:

• contact details, such as first and last name, address, telephone number and email address
• profession, professional position, company
• other personal data (e.g. tax identification number, date of birth)
• payment data, billing-related data, creditworthiness data
• documentation data (minutes of meetings)

insofar as this is necessary for carrying out the joint cooperation, for fulfilling legal or contractual obligations, for safeguarding legitimate interests, or is based on your consent. The legal bases are, in particular, Article 6(1)(a), (b), (c) and (f) GDPR.

In addition, affiliated companies, service providers, processors engaged by us (e.g. for IT services), agents, as well as other third parties (e.g. institutions, public authorities, auditors, tax advisers and lawyers) involved in providing our services may receive your data for the purposes stated above.

Data subject rights may be asserted against LEONHARD WEISS as well as against each of the other joint controllers. For this purpose, you may contact LEONHARD WEISS at any time using the contact details provided in this privacy notice.

Your personal data will only be transferred to third parties if this is necessary for the purpose of processing the contract (e.g. to ensure a trouble-free project execution), if you gave us your consent to the transfer (Art. 6 para. 1 sentence 1 lit. a GDPR). Categories of recipients of personal data include in particular involved project partners. In addition, we use external service providers as processors within the scope of Art. 28 GDPR for certain business transactions (in particular for it-providers, waste management companies). These are bound by directives and data protection laws and may not use your data for purposes other than those specified above.

Personal data will be stored as long as it's necessary for the respective purpose of processing in compliance with the statutory retention periods (e.g. ten years for tax-relevant documents or six years for other business letters in accordance with the German Commercial Code and the German Tax Code; Art. 6 para. 1 sentence 1 lit. c GDPR). Storage beyond the statutory retention periods is possible if you gave us your consent to a retention beyond these periods in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or if the purpose of the data processing has not yet ceased.

As a person concerned you have the right

• to be informed about the data we process in connection with your person (art. 15 GDPR),
• to have incorrect data corrected or incomplete data completed (also see art. 16 GDPR)
• to have your respective data deleted immediately (also see art. 17 GDPR), or, alternatively, as far as further processing is required according to art. 17 par. 3 GDPR, to have this processing limited according to the prescriptions of art. 18 GDPR;
• to demand the transferability of your data (art. 20 GDPR).

Furthermore, you have the right to object to the processing of your respective personal data at any time for reasons resulting from your particular situation, as long as we justify the processing with art. 6 par. 1 p. 1 letter f GDPR. We will then stop processing these data, except if we can prove mandatory reasons requiring protection for the processing, which supersede your interests, rights, and freedom, or if the processing serves the enforcement, exercise, or defence of legal claims (art. 21 GDPR). 

Furthermore, you have the possibility of exercising your right of appeal with a responsible data protection authority. The authority responsible for us is:

The representative for data protection and freedom of information of the federal state Baden-Württemberg
Post office box 10 29 32
70025 Stuttgart
poststelle(at)lfdi.bwl.de
Telephone: +49 (0) 711 / 615541 - 0