Data processing principles at Hänsch GmbH

Information pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR).

We hereby wish to inform you about how we process your personal data and about the claims and rights to which you are entitled in accordance with the data protection regulations.

Contents
1. Who is the controller of data processing and whom can I contact?
2. Which data is gathered, for which purpose and for how long is it retained?
3. Who will receive your data?
4. Which rights do you have regarding the processing of your data?

1. Who is the controller of data processing and whom can I contact?

The controller within the meaning of the General Data Protection Regulation is:

Hänsch GmbH
Schützenstraße 21
D - 49770 Herzlake
Email: info[at]fg-haensch.de
Imprint: https://www.fg-haensch.de/footer-unten/impressum/impressum.html

(henceforth also referred to as "Hänsch GmbH" or "we")
If you have any questions about this privacy policy or the protection of your data by Hänsch GmbH, please contact our data protection officer at any time:

Carla Holterhus
Email: datenschutz[at]fg-haensch.de

2. Which data is gathered, for which purpose and for how long is it retained?

Contract implementation
We only collect personal data if you voluntarily provide it to us. No personal data is collected beyond this. Your personal data will only be processed beyond the scope of the legal permissions based on your express consent.

The duration of data storage depends on the mandatory legal retention periods and is usually 10 years.

Application procedure
Personal data through application details are collected for the purpose of conducting application procedures.

As a rule, application data will be deleted within four months of notification of the decision, unless the applicant has consented to longer data storage as part of the inclusion in the applicant pool.

Customer data/Interested party data
The personal data disclosed for the implementation of the contract (incl. offers, orders, sales and invoicing, quality assurance) are recorded. We also process your data - to the extent permitted - for the purpose of direct marketing, in particular for sending our publicity, such as product information or event notices. Data processing is based on Art. 6 para. 1 lit. f GDPR and in the interest of informing you about new products, events and services. Each customer has a separate right to object to such processing, which, if exercised, will result in the termination of processing for the purpose of direct marketing. If data is stored exclusively for direct advertising, it will be deleted following an objection. Any data beyond this will be collected based on your express consent to processing.

The duration of data storage depends on the mandatory legal retention periods and is usually 10 years.

Employee data
The personal data provided for the implementation of the contract as part of the employment relationship will be collected and, if necessary, any additional data will be processed based on your express consent.

The duration of data storage depends on the mandatory legal retention periods and is usually 10 years.

Supplier data
The personal data communicated for the implementation of the contract (incl. enquiries, purchasing, quality assurance) will be collected and, if necessary, any additional data will be processed based on your express consent.

The duration of data storage depends on the mandatory legal retention periods and is usually 10 years.

3. Who receive your data?

  •  Public authorities in the case of prevailing legal provisions, e.g. tax office, social security institutions.
  •  External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for print and dispatch of information, accounting, payment processing, payroll accounting, travel expense accounting, insurance services.
  • Other external bodies, where the data subject has given consent or where a transfer is permissible for prevailing interest.

Transfers to non-EU countries:
We use data processors outside the European Union (here: United States of America); accordingly, we have concluded standard contractual clauses/contractual data processing agreement or other lawful agreement for the processing of personal data with the service provider.

4. Which rights do you have regarding the processing of your data?
You have the right of access to the personal data we process concerning you. If your request for information is not provided in writing, please understand that we may then require you to provide evidence that you are the person you claim to be.

You also have a right to rectification or erasure or to restriction of processing where you are entitled to do so by law.

Additionally, you have the right to object to the processing within the framework of the legal requirements. The same applies for a right to data portability. Specifically, you have the right to object to the processing of your data in connection with a direct marketing campaign in accordance with Art. 21 para. 1 and 2 GDPR, if this is based on a balancing of interests. Objections can be made without formalities and should be addressed to:

Hänsch GmbH
Data  protection officer
Schützenstraße 21
D - 49770 Herzlake
Email: datenschutz[at]fg-haensch.de

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Phone: 0511 120-450
Email: poststelle@lfd.niedersachsen.de

Status: 22/09/2022