Privacy Policy

The following information gives you an overview of how we handle your personal data (hereinafter: data) and your rights as a data subject.

Which data we specifically process depends on the particular business relationship.

The controller responsible for the processing of personal data is:

Erchinger AG
Rudolf-Diesel-Straße 20
78532 Tuttlingen, Germany
service@erchinger.de

Erchinger AG's appointed Data Protection Officer is:

Achim Barth
Theodor-Veiel-Straße 94
70374 Stuttgart, Germany
barth@barth-datenschutz.de

We generally collect your data directly from you. As a rule, you provide us with this data as part of your order and within the business relationship arising from a request for a quote. We only collect those data as mandatory that are necessary for the relevant contractual purpose. Any further information is provided voluntarily.

In certain cases, we may receive data from third parties, where this is necessary for carrying out our business relationship — for example, in connection with an order being taken on by Erchinger AG, or through an external referral.

We collect and process, in particular:

• Core customer data such as name, address, place of residence
• Billing data (alternative billing address)
• Bank details for payment processing
• Contract / service data
• Communication data for establishing and maintaining a contractual relationship, e.g. email address, phone number, mobile number
• Voluntary information about specific requirements when preparing a quote
• Details of consent to marketing, use of your email address or phone number for marketing purposes
• Anonymised or pseudonymised data for our own statistical analyses and marketing reports

We collect and process your data in accordance with statutory provisions, in particular the GDPR and the German Federal Data Protection Act (BDSG-2018), as well as other legal bases such as the German Telemedia Act (TMG), for the following purposes:

• Entering into and performing contracts (Art. 6(1)(b) GDPR) — the purposes of data processing are primarily determined by the specific order; further details can be found in the relevant contractual documents and terms and conditions
• Fulfilling legal obligations or regulatory requirements, including commercial and tax law provisions (Art. 6(1)(c) GDPR)
• Safeguarding legitimate interests (Art. 6(1)(f) GDPR), e.g. asserting legal claims, providing information about our products and services, business management and development, ensuring IT security

We also use email addresses obtained in connection with entering into a contract to inform you about our products, services and current developments, pursuant to Art. 6(1)(1)(f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG). You may object to this use for marketing purposes at any time, at no cost other than the transmission costs based on standard rates.

We store all data necessary for contract fulfilment and customer support in our IT systems. Within our company, access to your data is granted only to those departments that require it to fulfil our contractual obligations.

To provide our contractual services, we make use of selected service providers (processors) and agents, who may be granted access to your data to the extent required. Any further disclosure of data only takes place where required or permitted by law, or where you have given your consent. Possible recipients include:

• Public authorities and institutions where legally or officially required (e.g. tax authorities)
• IT service and consulting companies
• Document and data destruction, logistics, printing service providers/letter shops
• Telecommunications, billing and customer support service providers (e.g. call centres)
• Financial institutions and debt collection service providers
• Sales, marketing and sales representatives
• Management consultancies as well as audit and tax firms

Data is not transferred to entities in countries outside the European Union (third countries).

We process and store your data for as long as necessary to fulfil the purposes stated above, in particular our contractual and statutory obligations. Once the data is no longer required for these purposes, it is routinely deleted — unless continued processing for a limited period is required for:

• Fulfilling commercial and tax-law retention obligations (in particular under the German Commercial Code, HGB, and Fiscal Code, AO) — the applicable retention periods range from six to ten years
• Preserving evidence within the framework of statutory limitation periods (Sections 195 et seq. of the German Civil Code, BGB) — these periods can be up to 30 years, with the standard limitation period being three years

Every data subject has the right to access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR, and the right to data portability under Art. 20 GDPR, provided no statutory provisions preclude this.

To exercise your rights, please contact us in writing, stating your business partner details, at info@barth-datenschutz.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

Within the scope of our business relationship, you are required to provide the data necessary for entering into and carrying out a business relationship and for fulfilling the associated contractual obligations, or which we are legally required to collect. Without this data, we will generally be unable to enter into or perform the contract. The provision of any further data is voluntary.

Right to object on grounds relating to your particular situation: You have the right, on grounds relating to your particular situation, to object at any time to the processing of data concerning you carried out on the basis of Art. 6(1)(e) GDPR or Art. 6(1)(f) GDPR.

Right to object to processing for marketing purposes: You have the right to object at any time to the processing of data concerning you for the purposes of direct marketing. This also applies to profiling, to the extent it is related to such direct marketing. The objection can be made informally and should be addressed to: service@erchinger.de.

This Privacy Policy is updated from time to time.