Ladies and gentlemen,
Please allow us to provide you with information regarding the processing of your personal data according to paragraphs 13 and 14 of the General Data Protection Regulation (GDPR). This information is valid for both customer and supplier relationships.

 

1. Name and contact details of the person responsible

Bräuer Systemtechnik GmbH
Managing director: Karolin Wolf
Gewerbering 33
09456 Annaberg-Buchholz
GERMANY
Phone: 0049 3733 59 676 10
E-Mail: info@braeuersysteme.de
Website: www.braeuersysteme.de

 

2. Name and contact details of the data protection officer

Tina Grunert
Gewerbering 33
09456 Annaberg-Buchholz
GERMANY
Phone: 0049 3733 59676 18
E-Mail: datenschutz@braeuersysteme.de

 

3. Processed data/data categories

• Personal master data (first name, surname, title, position in the company, department)
• Contact details (Email address, mailing address, phone number)
• Payment data/bank details
• Company Name
• Value added tax – identification number
• Order data
• Communication/correspondence data

When visiting our location:

• Video recordings (see www.braeuersysteme.de/en/data-protection/video-monitoring)

When using our guest WLAN (our WLAN for guests) at the firm location:

• IP address, MAC address, device name

 

In online meetings (via provider Webex by Cisco):

• Email address
• For the data processed by Cisco, please read Cisco’s data protection declaration: https://www.cisco.com/c/de_de/about/legal/privacy-full.html

 

4. Purposes and legal foundations of data processing

We use your data for contract fulfillment and/or preparation according to paragraph 6 section 1 b) GDPR. This includes:

• Sales order processing (offers, orders, order confirmations, delivery notes, billing, receipt/shipment of goods, complaints, etc.)
• Communication via mail, email, phone, fax
• Online meetings (for technical and commercial agreement)

Your data are also processed to fulfill legal obligations according to paragraph 6 section 1 c) GDPR, such as:

• Tax reporting and inspection requirements
• Sanctions list check
• Processing of requests by public authorities

Our justified interests according to paragraph 6 section 1 f) GDPR can also be the basis for processing your personal data. Justified interests include:

• Simplification of administrative procedures
• Use of contact data for contact partners for more efficient communication and customer support
• Making available a guest WLAN for visitors to our firm location
• Vandalism prevention/ protection of company property by means of video monitoring of the premises
• Processing of requests on a non-contractual basis

 

5. Storage period

The data are stored until the processing purpose is no longer relevant. Legal retention periods are considered in this process.

 

6. Recipients of the data

• IT service providers
• Software maintenance company /SAGE GmbH
• Tax consultants/qualified auditors
• Banks/credit institutions
• Shipment service providers
• Authorities upon request
• Insurance companies

If it is necessary to fulfill the contract, or if there is a legal obligation, data can also be sent to third countries. This is based on paragraph 49 sections 1 b), c), e) GDPR.

 

7. Your rights

As a data subject, you have the following rights:

 

7.1 Right to information (according to paragraph 15 GDPR)

You are entitled to be informed of whether and which of your personal data are processed. This also includes the purposes of processing, the recipients, and the period of storage.er.

 

7.2 Right to correction (according to paragraph 16 GDPR)

You have a right to correct or complete your data if they are incorrect or incomplete. We will make the correction immediately.

 

7.3 Right to deletion (according to paragraph 17 GDPR)

You are entitled to have your data deleted provided the legal requirements are met (among others, in case of illegal processing, lapse of necessity, revocation of consent, entry of objection, and/ or lack of justified reasons for processing them.

 

7.4 Right to limited processing (according to paragraph 18 GDPR)

You may demand limited processing of your personal data provided the legal requirements are met (among others, when exercising or defending legal claims).

 

7.5 Right to information (according to paragraph 19 GDPR)

If you have asserted your right to correction, deletion, or limitation of processing, we are obliged to inform all recipients of your data of this correction, deletion, or limitation of processing, unless this proves to be impossible or entails disproportionate efforts. You are entitled to be informed of these recipients.

 

7.6 Right to data transferability (according to paragraph 20 GDPR)

You are entitled to obtain the personal data which you have made available to us in a structured, commonly used, and machine-readable format, or, if technically feasible, to have the data sent to a third party.

 

7.7 Right to objection (according to paragraph 21 GDPR)

You have the right to object to data processing preformed based on paragraph 6 section 1 e) GDPR or paragraph 6 section 1 f) GDPR. We will then no longer process your data, unless there are compelling reasons for processing that take precedence over your interests, rights, and licenses, or if the processing is for the assertion, exercise, or defense of legal claims.

7.8 Right to revocation (according to paragraph 7 GDPR)

You are entitled to revoke your legal data protection declaration of consent at any time. Revocation of approval will not affect the lawfulness of processing your data prior to revocation.

 

7.9 Right of complaint to a supervisory authority (according to paragraph 77 GDPR)

You are entitled to lodge a complaint to the responsible authority. This is the Saxon data protection and transparency officer:

Sächsische Datenschutz- und Transparenzbeauftragte
Postfach 1101 32
01330 Dresden

As a matter of course, we and our data protection officer are available to provide information and answer questions.