Principles of data processing at Provitec GmbH
A link brought you to this page because you want to find out how we use (your) personal data. In order to fulfil our obligations to provide information in accordance with Art. 12 et seq. of the General Data Protection Regulation (GDPR), we have outlined our privacy policy below:
Who is responsible for data processing?
The responsible body according to data protection law is
Provitec GmbH
Robert-Bosch-Str. 1
74196 Neuenstadt
Germany
You can find more information about our company, authorised representatives and other ways of contacting us in the legal notice on our website: www.provitec.biz
What data of yours do we process and for what purposes?
If we have obtained data from you, we will only process it for the purposes for which we obtained or collected it.
Data processing for other purposes is only relevant if the legal requirements under Art. 6 (4) GDPR are met. We will of course observe any obligations to provide information under Art. 13 (3) GDPR and Art. 14 (4) GDPR.
What legal framework is this based on?
The lawful basis for processing personal data – provided that there are no other specific legal provisions – is Art. 6 GDPR. Here the following options are particularly relevant:
- Consent (Art. 6 (1) (a) GDPR)
- Data processing for the performance of contracts (Art. 6 (1) (b) GDPR)
- Data processing on the basis of a balance of interests (Art. 6 (1) (f) GDPR)
- Data processing for compliance with a legal obligation (Art. 6 (1) (c) GDPR)
If personal data is processed on the basis of your consent, you have the right to revoke your consent to us at any time with effect for the future.
If we process data on the basis of a balance of interests, you have the right as the data subject to object to the processing of the personal data taking into consideration the requirements of Art. 21 GDPR.
How long is data stored for?
We process the data as long as this is necessary for the relevant purpose.
If there are statutory retention obligations – e.g. in commercial or tax law – the affected personal data will be stored for the duration of the retention obligation. When the retention obligation has expired, it will be checked whether there is a further need for processing. If there is no longer such a requirement, the data is deleted.
At the end of a calendar year, we review data as to whether there is a need for subsequent processing. Due to the volume of data, this check is done for specific types of data or purposes of processing.
You can of course request information about the personal data that we are storing about you at any time (see below) and, if there is no need for it, can request its deletion or to restrict the processing.
To which recipients will the data be disclosed?
Your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, if disclosure is permitted on the basis of a balance of interests according to Art. 6 (1) (f) GDPR, if we are legally obliged to disclose it, or if you have given consent in this respect.
Where will the data be processed?
Your personal data will be processed by us exclusively in data centres in the Federal Republic of Germany.
Your rights as the data subject
You have the right to information about the personal data we process about you.
Bei einer Auskunftsanfrage, die nicht schriftlich erfolgt, bitten wir um Verständnis dafür, dass wir dann ggf. Nachweise von Ihnen verlangen, die belegen, dass Sie die Person sind, für die Sie sich ausgeben.
Ferner haben Sie ein Recht auf Berichtigung oder Löschung oder auf Einschränkung der Verarbeitung, soweit Ihnen dies gesetzlich zusteht.
If we receive a request for information that is not in writing, please note that we may request verification from you that you are the person about whom you are seeking information.
You also have a right to rectification, deletion or to restrict processing provided that you are legally entitled to this. Furthermore, you have a right to object to the processing within the scope of legal requirements. The same applies to a right to data portability.
Under Art. 21 (1) and (2) GDPR you have a right to object in particular to the processing of your data in connection with direct advertising if this is done on the basis of a balance of interests.
Our data protection officer
We have appointed a data protection officer for our company. Their contact details are as follows:
SIRUS Beratungsgesellschaft mbH
– Data Protection Officer –
Göppelstr. 4
74613 Öhringen
Germany
Email: info@sirus.de
Right of complaint
You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.