Dear Sir or Madam,
We hereby inform you about the processing of your personal data by LEONHARD WEISS GmbH & Co. KG and the rights to which you are entitled in this context.
1. Controller
This privacy notice applies to the processing of personal information by:
LEONHARD WEISS GmbH & Co. KG
Leonhard-Weiss-Str. 22
73037 Göppingen
P +49 07161-602-0
bau-de(at)leonhard-weiss.com
The company’s data protection officer can be contacted at:
LEONHARD WEISS GmbH & Co. KG Datenschutzbeauftragter
Leonhard-Weiss-Str. 22
73037 Göppingen
datenschutz(at)leonhard-weiss.com
2. Purpose and Legal Basis of the Data Processing
We process personal data pursuant to Art. 6 para. 1 sentence 1 lit. b of the EU General Data Protection Regulation (hereinafter "GDPR") which is necessary for the fulfilment of obligations arising from the contractual relationships with our customers, particularly for for trouble-free project coordination, correspondence and invoicing. This includes in particular title, first name, surname, a valid email address, address, phone number (landline and/or mobile) and - to the extent necessary within the context of business transactions in accounting - banking and payment transaction data.
To optimise our internal processes, we use AI systems where necessary to efficiently process the data generated as part of the business relationship. This data is anonymised as far as possible. We base the processing on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interest lies in increasing the efficiency of our internal processes and procedures. We expressly point out that the data is not used for training purposes and is processed exclusively on local servers.
Publicity / contact:
We process your personal data, in order to inform you about our innovations, in order to invite you to trade fairs, or in order to contact you for surveys to find out about the satisfaction of our business partners. This use of personal data is in our legitimate interest (art. 6 par. 1 sentence 1 letter f GDPR).
Client satisfaction survey:
We collect and process your personal data in connection with client satisfaction surveys on the basis of your agreement (art. 6 par. 1 sentence 1 letter a GDPR).
Before concluding a contract with you, we may request information on your economic activities, creditworthiness and solvency from credit agencies in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Such information will only be requested if a prior assessment has shown that we have a justified interest in requesting information - in particular if we provide services in advance and this may lead to a financial risk of default - and our interest in data processing overrides your interest in non-execution.
3. Categories of Recipients
Your personal data will only be transferred to third parties if this is necessary for the purpose of processing the contract (e.g. to ensure a trouble-free project execution), if you gave us your consent to the transfer (Art. 6 para. 1 sentence 1 lit. a GDPR). Categories of recipients of personal data include in particular involved project partners. In addition, we use external service providers as processors within the scope of Art. 28 GDPR for certain business transactions (in particular for it-providers, waste management companies). These are bound by directives and data protection laws and may not use your data for purposes other than those specified above.
4. Erasure of Data
Personal data will be stored as long as it's necessary for the respective purpose of processing in compliance with the statutory retention periods (e.g. ten years for tax-relevant documents or six years for other business letters in accordance with the German Commercial Code and the German Tax Code; Art. 6 para. 1 sentence 1 lit. c GDPR). Storage beyond the statutory retention periods is possible if you gave us your consent to a retention beyond these periods in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or if the purpose of the data processing has not yet ceased.
5. Your Rights as a Data Subject
As a person concerned you have the right
- to be informed about the data we process in connection with your person (art. 15 GDPR),
- to have incorrect data corrected or incomplete data completed (also see art. 16 GDPR)
- to have your respective data deleted immediately (also see art. 17 GDPR), or, alternatively, as far as further processing is required according to art. 17 par. 3 GDPR, to have this processing limited according to the prescriptions of art. 18 GDPR;
- to demand the transferability of your data (art. 20 GDPR).
Right of objection
Furthermore, you have the right to object to the processing of your respective personal data at any time for reasons resulting from your particular situation, as long as we justify the processing with art. 6 par. 1 p. 1 letter f GDPR. We will then stop processing these data, except if we can prove mandatory reasons requiring protection for the processing, which supersede your interests, rights, and freedom, or if the processing serves the enforcement, exercise, or defence of legal claims (art. 21 GDPR).
Right of appeal
Furthermore, you have the possibility of exercising your right of appeal with a responsible data protection authority. The authority responsible for us is:
The representative for data protection and freedom of information of the federal state Baden-Württemberg
Post office box 10 29 32
70025 Stuttgart
poststelle(at)lfdi.bwl.de
Telephone: +49 (0) 711 / 615541 – 0