Information pursuant to Art. 13 GDPR
Important Customer Information pursuant to Art. 13 GDPR
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG-new).
1. Controller:
BUGI (c/o Limock)
Hohenzollernstr. 29
30171 Hanover
E-Mail: info@bugi-ev.org
Represented by the Board
Agnes Hapsari, Limock, Rafael Anindya Krishna Siddharta
2. Legal Bases and Purposes of Data Processing:
a) Based on Your Consent
Legal basis: Art. 6 para. 1 lit. a GDPR
Purpose: Processing is carried out for advertising purposes or participation in a prize draw.
Right of withdrawal: Consent given can be withdrawn at any time. This also applies to the withdrawal of advertising consents granted before the GDPR came into effect. The withdrawal of consent does not affect the lawfulness of data processing carried out up to that point.
b) For the Fulfillment of Contractual Obligations
Legal basis: Art. 6 para. 1 lit. b GDPR
Purpose: Data is processed to provide contractually agreed services, such as fulfilling a subscription contract, publishing advertisements in various publishing products of the MADSACK Media Group in print and online, or delivering goods and services ordered by telephone or online.
c) Due to Legal Obligations
Legal basis: Art. 6 para. 1 lit. c GDPR
Purpose: We are subject to legal obligations, i.e. legal requirements (e.g. Anti-Money Laundering Act). Processing purposes include the fulfillment of tax reporting obligations.
d) Within the Scope of Balancing Interests
Legal basis: Art. 6 para. 1 lit. f GDPR
Purpose: Where necessary, we process your data beyond the actual fulfillment of the contract to protect legitimate interests of ours or third parties, e.g.:
– Communication (email, phone) for maintaining business relationships in the B2B sector
– Consulting credit agencies (SCHUFA) to assess credit and default risks in online sales (e.g. tablets)
– Needs analysis for direct customer targeting, advertising or market and opinion research, provided you have not objected to the use of your data
– Enforcement of legal claims and defense in legal disputes
– Ensuring IT security and IT operations
– Prevention and investigation of crimes
– Building and plant security measures (e.g. access controls)
– Measures to ensure property rights
– Measures for business management and further development of services and products.
3. Data Sharing / Recipients of Data
Within the company, only those who need your data to fulfill contractual or legal obligations will have access to it. Service providers we engage may also receive data for these purposes. These are companies in the categories of IT services, printing services, logistics, telecommunications, accounting, debt collection, consulting, and sales/marketing.
4. Data Transfer to a Third Country or an International Organization
A transfer of data to entities in countries outside the European Union (so-called third countries) takes place as part of tasks performed by certain service providers that may be headquartered or have parent companies in a third country. According to Art. 45 GDPR, transfer is permissible if the European Commission has decided that a third country provides an adequate level of data protection. If no such decision has been made, we or our service providers may only transfer personal data to a third country or an international organization if appropriate safeguards are in place (e.g. standard data protection clauses adopted by the Commission or supervisory authority) and enforceable rights and effective remedies are available. We have contractually agreed with our service providers that both they and their subcontractors must comply with European data protection levels and European data protection law.
5. Duration of Data Storage
We process and store your personal data as long as necessary to fulfill our contractual and legal obligations.
If the data is no longer required, it will be regularly deleted, unless further (temporary) processing is required for the following purposes: compliance with commercial or tax retention obligations under the German Commercial Code (HGB), the Fiscal Code (AO), or the Anti-Money Laundering Act (GwG). Retention periods there range from two to ten years. To preserve evidence within statutory limitation periods under §§ 195 ff. of the German Civil Code (BGB), limitation periods can be up to 30 years. The regular limitation period is three years.
6. Rights of Data Subjects
Every data subject has the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object (Art. 21 GDPR). Restrictions under §§ 34 and 35 BDSG-new apply to the rights of access and erasure.
Every data subject has the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG-new).
Any consent to the processing of personal data may be withdrawn at any time. This also applies to consents granted before May 25, 2018 (effective date of the GDPR). The withdrawal applies for the future; processing carried out before the withdrawal remains unaffected and lawful.
7. Obligation to Provide Data
Within the scope of our business relationship, you must provide the personal data necessary for entering into and carrying out a business relationship and fulfilling contractual obligations, or that we are legally required to collect. Without this data, we will generally not be able to conclude or perform a contract with you.
8. Automated Decision-Making
We generally do not use automated decision-making in accordance with Art. 22 GDPR to establish and conduct business relationships. Should such a procedure be used, you will be separately informed, if required by law.
9. Profiling
We partially process your data automatically with the aim of evaluating certain personal aspects (profiling) and use this to provide you with targeted information and advice on products. In order to send you only suitable advertising and inform you specifically about products, we must assess your personal interests and aspects. Accordingly, we use cookies and analysis tools.