Interested parties/customers/customers’ employees

Information for persons affected about the processing of their personal data as per Articles 13 and 14 GDPR by Bernard van Lengerich Maschinenfabrik GmbH & Co. KG

Category: Interested parties/customers/customers’ employees (M/F/X)

To comply with our information obligations as per Art. 13 and 14 of the General Data Protection Regulations (GDPR), we are pleased to provide you with the following information about data protection:

 

I. Name and contact details of the Controller

In accordance with Art. 4(7) GDPR and other national data protection laws of Member States and other data protection regulations, the Controller is:

Bernard van Lengerich Maschinenfabrik GmbH & Co. KG
Grenzstraße 16
48488 Emsbüren, Germany
Tel.: +49 5903 951 0
Fax: +49 5903 951 34
Email: info@bvl-group.de
Website: https://www.bvl-group.de/
 

II. Contact details of the Data Protection Officer

Email: datenschutzbeauftragter@bvl-group.de

or our postal address:

Bernard van Lengerich Maschinenfabrik GmbH & Co. KG (hereinafter referred to as BvL)
Grenzstraße 16
48488 Emsbüren, Germany

 

III. No transfer to third countries and no transfer to an international organisation

Your personal data is not transferred to a third country or an international organisation, and is not intended.

 

IV. No automated decision-making or profiling

No automated decision-making or profiling occurs as per Art. 22 GDPR.

 

V. Purposes for processing your personal data

1. Address management and (email/telephone) communication
2. Order processing (by BvL)
3. Personalised information transfer and advice about our products and services
4. Data obtained to assert, exercise or defend potential legal claims against you or against third parties
5. Managing the data-protection rights of Data Subjects

 

VI. Legal grounds for processing your personal data

Re. 1: Provided processing is necessary for the performance of a contract or for the implementation of pre-contractual measures in direct relation with you as a person affected, we process your data as per point (b) of Art. 6(1) GDPR. If we do not process your personal data for the performance of a contract or for the implementation of pre-contractual measures, we process your data as per point (f) of Art. 6(1) GDPR. Our legitimate interest lies in establishing and maintaining communication with you.

Re. 2: Provided processing is necessary for the performance of a contract or for the implementation of pre-contractual measures in direct relation with you as a person affected, we process your data as per point (b) of Art. 6(1) GDPR. If we do not process your personal data for the performance of a contract or for the implementation of pre-contractual measures, we process your data as per point (f) of Art. 6(1) GDPR. Our legitimate interest lies in the processing and implementation of services commissioned by yourself or your employer.

Re. 3: Beyond the actual fulfilment of the contract, BvL processes personal data as per point (f) of Art. 6(1) GDPR for purposes of direct advertising. This is permissible provided the processing is necessary to safeguard our legitimate interests, unless your interests or fundamental rights and freedoms, which require protection of personal data, prevail. Such a legitimate interest exists in sharing personalised information and offering advice about our products and services for BvL products.
Provided you have given BvL consent to process your personal data for direct advertising purposes, the lawfulness of processing is based on your consent as per point (a) of Art. 6(1) GDPR. Any consent granted can be revoked at any time. Please note that this revocation only applies to the future. Processing that occurred before revocation is not affected by this.

Re. 4: Processing occurs to adhere to and meet the legal commitment that BvL as Controller as per Art. 4(7) GDPR must comply with to honour the data-protection rights of the Data Subject stipulated in Chapter III (Art. 12-22) GDPR. The legal grounds for processing are those listed in point (c) of Art. 6(1.1.) GDPR.

 

VII. Description of the personal data categories

Re. 1: Contact data (last name, first name, email address, telephone number, address, type of contact, fax number), communication content.

Re. 2: Contractual data, communication and order content, as well as other data that we obtain from you as part of processing orders.

Re. 3: Key data, communication data, contractual data.

Re. 4: Declaration of withdrawal of any of the declarations of consent you may have made; statements of objection that you may have made relating to the processing of your personal data; explanations and information that we have obtained from you to assert the data-protection rights of the Data Subject stipulated in Chapter III (Art. 12-22) GDPR.

 

VIII. Categories of recipients with whom personal data was shared or will be shared

BvL employees, as well as the telephone and IT service providers we use to carry out our business, with whom we have concluded appropriate contracts so that your personal data is protected at all times. Possibly the authorities to clarify any criminal investigations.

 

IX. Deletion periods of different data categories and storage criteria

Personal data is deleted following the discontinuation of the purpose of the data processing, at the latest following the conclusion of the business relationship (storage limit), unless statutory retention periods (e.g. of a commercial and tax-law nature) conflict with deletion or statutory statues of limitation.

 

X. Requirement to provide data

The provision of your personal data is neither required by law nor by contract. However, the provision of your personal data is required to uphold our business relationship. If you do not provide your personal data, we cannot establish a business relationship with you or communicate with you for business purposes.

 

XI. Data origin

We work with data that you provide us with directly; furthermore, we can also obtain data from other persons at your company or other business contacts.

 

XII. Rights of persons affected

If your personal data is processed, you are considered a Data Subject as per GDPR and you are entitled to the following rights vis-à-vis the Controller (BvL):

1. Right of access
Under the provisions of Art. 15 GDPR, you shall have the right to obtain from the Controller at any time confirmation as to whether or not, and how, your personal data is being processed by us.

2. Right to rectification
Under the provisions of Art. 16 GDPR, you shall have the right to obtain from the Controller the rectification and/or completion of incomplete data, provided the processed personal data that affects you is incorrect or incomplete. The Controller must rectify the data without undue delay.

3. Right to restriction of processing
Under the provisions of Art. 18 GDPR, you shall have the right to obtain from the Controller restriction of processing.

4. Right to erasure and the “right to be forgotten”
Under the provisions of Art. 17 GDPR, you shall have the right to obtain from the Controller the erasure of your personal data and to exercise the right to be forgotten.

5. Right of notification
If you have exercised your right to obtain from the Controller rectification, erasure or restriction of processing, they are obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. Under the provisions of Art. 19 GDPR, you shall have the right to be informed of those recipients.

6. Right to data portability
Under the provisions of Art. 20 GDPR, you shall have the right to receive your personal data, which you provided to the Controller, in a structured, commonly used and machine-readable format.

7. Right to object
Under the provisions of Art. 21 GDPR, you shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6(1) GDPR, including profiling based on those provisions. As the Controller, BvL shall no longer process your personal data unless BvL demonstrates legitimate grounds for the processing which override your interests, rights and freedoms as the Data Subject or for the establishment, exercise or defence of legal claims.

8. Right to revoke the data-protection declaration of consent
You have the right to revoke your data-protection declaration of consent at any time. The consent-based lawfulness of the processing that has taken place up until this revocation will not be affected by the withdrawal.

9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if your consider that the processing of your personal data infringes GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The State Data Protection Supervisory Authority responsible for BvL is:

The State Data Protection Commissioner for Lower Saxony
Prinzenstraße 5
30159 Hanover, Germany
Telephone: +49 511 120 45 00
Fax: +49 511 120 45 99
Email: poststelle@lfd.niedersachsen.de