Data protection delcaration
The following information gives you an overview of the processing of your personal data by our company and your rights resulting from the General Data Protection Regulation (GDPR).
1. Name and address of the controller and data protection officer
The controller (“we”) within the meaning of the GDPR is:
DESERTFOODS International GmbH
Beseliner Parkweg 5
Phone: +49 170 22 58 101
The controller’s data protection officer can be contacted at the above phone number and/or email address.
2. Collection of personal data
a) on the basis of our business relationship
We process personal data which we receive from you within our business relationship in your function as customer/contractual partner or as representative/authorised representative/contact person of the company which is our customer/contractual partner. In the business initiation phase and during the business relationship, we and you generate personal data. In the case of companies, this data essentially relates to the contact person responsible at your company and, if applicable, the company management (managing director, executive board).
The personal data usually generated are:
First name, surname, title, address, telephone number (landline and/or mobile phone number), fax number, a valid e-mail address, account data, your company/company (with VAT ID), division, position, date of birth, subject matter of the contract, credit ratings, enquiries and correspondence regarding the conclusion, administration, performance and settlement of the contract.
b) when visiting our website
When using our website merely for informational purposes i.e. if you do not transmit information to us, we shall collect only the personal data which your browser transmits to our server. If you wish to view our website, we shall collect the following data which are technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 sentence 1 lit. f GDPR):
- Informationconcerning the browser type and the version used
- User’s operating system and its interface
- User’s internet service provider
- User’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites which are accessed by the user’s system via our website
- Volume of data transmitted
- Access status/HTTP status code
aa) Contact form
If you have any questions, we offer you the possibility to contact us via a contact form provided on the website. A valid e-mail address must be provided so that we know who sent the request and can answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us occurrs in accordance with Art. 6 Para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent.
The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.
Information is stored in the cookie, which results in each case in connection with the specifically used terminal device. This does not, however, mean that we will immediately become aware of your identity.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your terminal device for a specified period of time. If you visit our website again in order to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The data processed by cookies are necessary for the purposes of our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 sentence 1 lit. f GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you deactivate cookies completely, you may not be able to use all the functions of our website.
3. Purpose and legal basis of data processing
Your personal data will be processed in accordance with the applicable data protection regulations, in particular the GDPR and the Federal Data Protection Act (BDSG). In detail this takes place for the following purposes and on the basis of the following legal bases:
a) On the basis of your consent pursuant to Art. 6 Para. 1 sentence 1 lit. a GDPR
If you have given us your consent to the processing for certain purposes, we will process your data on the legal basis of the consent. The scope and purpose of the data processing are described in the corresponding declaration of consent, which you have been given separately.
b) For the performance of contractual obligations pursuant to Art. 6 Para. 1 sentence 1 lit. b GDPR
The processing of personal data takes place for reasons of the handling of contracts, in particular for the execution of your contract.
Further information on the purposes and scope of the contractual services for which the data is processed can be found in the respective contract concluded with you and the general terms and conditions included therein.
c) For compliance with legal obligation persuant to Art. 6 Para. 1 sentence 1 lit. c GDPR
As a company, we are subject to various legal obligations for the fulfilment of fiscal control and reporting obligations. To ensure that these obligations are met, personal data are processed within the business initiation and processing in accordance with the statutory requirements.
d) for the purposes of the legitimate interests persuant to Art. 6 Para. 1 sentence 1 lit. f GDPR
We process your data, which we receive in the context of our business relation, beyond the actual fulfilment of the contract for the protection of legitimate interests of us or third parties.
4. Who receives my data?
Your personal data, which we receive within the scope of our business relationship, are only accessible to the parties who need them to fulfil their contractual and legal obligations. If service providers and vicarious agents are also involved in the data processing process, a data transfer is only possible if the legal obligations prescribed for this in the GDPR as well as our own specifications for the handling of personal data are complied with.
5. Will my personal data be transferred to a “third country”?
A transfer of your personal data, which we have received within our business relationship, to countries outside the EU or the EEA will only take place if you have given us your consent or if this is a necessary condition for the execution of a contract.
6. How long will my data be stored?
Your personal data, which we receive within the scope of our business relationship, will be processed and stored as long as it is necessary to fulfil our contractual and legal obligations. After fulfilment of the contractual and legal obligations, the personal data will be deleted. Special retention periods apply in particular to:
- compliance with commercial and tax law requirements. The deadlines for this are two to ten years.
- the preservation of evidence. According to §§ 195 et seq. of the German Civil Code, these limitation periods may be up to thirty years. The regular limitation period here is three years until the end of the year.
7. What data protection rights can I exercise?
As a “data subject”, you have the following rights towards us with regard to the personal data relating to you:
You have the right pursuant to Art. 7 Para. 3 GDPR to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.
You have the right to request confirmation from us as to whether personal data concerning you will be processed; if so, you have the right to know the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended duration of the storage, the existence of a right of rectification, cancellation, limitation or opposition, the existence of a right of appeal, the origin of your data if it has not been collected from us, and the existence of automated decision making, including profiling and, where appropriate, meaningful information on its details.
You have the right to demand from us immediately the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data (Art. 16 GDPR).
You have the right to demand that we delete personal data relating to you immediately, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (right to deletion).
You have the right to demand that we restrict the processing if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR.
Pursuant to Art. 20 GDPR, you have the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person.
In addition, as a data subject you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR). The revocation is effective for the future. Processing of personal data prior to the declaration of revocation is not affected by this.
If you wish to exercise your right to object, simply send an e-mail to firstname.lastname@example.org.
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority if you consider that the processing of your personal data violates the GDPR (Art. 77 GDPR). You have the right to exercise this right with a supervisory authority in the Member State in which you are located, in which you work or in which the alleged infringement occurred.
Your consent to the processing of personal data may be revoked at any time. The revocation only takes effect for the future. Processing of personal data prior to the declaration of revocation is not affected.
8. Obligation to provide data
As part of our business relationship, you must only provide personal data that is necessary for the establishment, performance and termination of a business relationship or which we are legally obliged to collect. Without this data we will normally have to refuse the conclusion of a contract or will no longer be able to execute an existing contract and may have to terminate it.
Last updated: June 3rd, 2019