For customers and prospective customers

Data protection information for customers and prospective customers

as per Chapters 13, 14 and 21 of the General Data Protection Regulation (DSGVO)

Data protection is very important for us. We describe below how we process your data and what your rights are.

  1. Who is responsible for data processing and who can you contact?

    groninger & Co. GmbH
    Hofäckerstraße 9
    74564 Crailsheim
    07951 495-0
    info@groninger.de

  2. Contact information for the data protection officer

    daniel.voigtlaender@mso.de

  3. Objectives for processing and legal basis

    Your personal data are processed in accordance with the provisions of the General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and other relevant data protection regulations. The processing and usage of specific data depends on the agreed or desired service. You can find additional details and supplements regarding the purposes of processing in our contractual documentation, forms, informed consent form and the other information (e.g. on the web site or the business terms and conditions).

    1. Consent (Art. 6 Sec. 1 Part a DSGVO)

      If you have given your consent to us processing your personal data, the consent is the legal basis for the stated processing. You can withdraw your consent at any time with effect for the future.

    2. Compliance with contractual obligations (Art. 6 Sec. 1 Part b DSGVO)

      We process your personal data in order to implement our contracts with you, i.e. particularly with reference to processing inquiries and orders. Your personal data are also processed to implement measures and actions with reference to precontract relationships.

    3. Fulfillment of legal obligations (Art. 6 Sec. 1 c DSGVO)

      We process your personal data if processing is required to fulfill legal obligations (e.g. commercial and tax legislation). Identity and age checks, prevention of fraud and money-laundering, prevention, combat and investigation of terrorism financing and crimes of property, comparisons with European and international anti-terror lists, implementation of tax-based checks and registration requirements and archiving data for the purposes of data protection and data security and for auditing by tax and other authorities. It may also be necessary to allow access to personal data for official or legal actions for the purposes of obtaining proof, criminal investigations or the implementation of civil claims.

    4. Authorized interest by us or third parties (Art. 6 Sec. 1 f DSGVO)

      We may also use your personal data on the basis of a balancing of interests for preservation of the authorized interest of us or third parties. This has the following purposes:

      • for comparison with European and international anti-terror lists, if this goes beyond the legal obligations.
      • for the continuing development of services and products and existing systems and processes.

  4. Categories of personal data that we process

    The following data are processed:

    • personal data (name, citizenship, profession and industry)
    • contact information (address, email address and telephone number)
    • customer history

  5. Who receives your data?

    We forward your personal data within our company to the sections that require the data to fulfill their contractual and statutory obligations and to implement our authorized interest.

    The following departments may also receive your data:

    • processing services that we appoint (Art. 28 DSGVO) particularly in the following fields
      e.g. support/maintenance of IT applications, archiving, file processing, data screening for anti-money-laundering purposes, purchasing/procurement, customer administration, marketing, media technology, research, risk management, accounting, telephony, web-site management, auditing services, banks, courier services, logistics
    • public services and institutions on submission of a statutory or official obligation under which we are required to provide information, reporting or forwarding of data or forwarding the data is in the public interest
    • offices and institutions based on our authorized interest or the authorized interest of the third party for the purposes listed in section 3.5 (e.g. to authorities, credit agencies, collection agencies, law firms, courts, assessors, companies in the same group and committees and inspection authorities)
    • other areas for which you have given your consent to supplying your data (e.g. …..)

  6. Transfer of your data to another country or an international organization

    Data are not processed outside the EU or the EEA

  7. How long do we store your data?

    We process your personal data to the extent required for the duration of our business relationship; this also includes the acquisition and processing of a contract.

    In addition, we are subject to various retention and documentation obligations, which among others are specified by the German Commercial Code (HGB) and the tax code (AO). The specified periods for retention and documentation are up to ten years beyond the end of the business relationship or the precontract legal relationship.

    Ultimately the retention period is also based on the statutory limitation periods, which for example according to §§ 195 ff. of the German Civil Code (BGB) are generally three years, but also in some cases may extend up to thirty years.

  8. To what extent is there automatic decision making in the specific case (including profiling)?

    We do not use a purely automatic decision-making process in accordance with Article 22 DSGVO. If we do use this process in specific cases, we will inform you separately if this is required by law.

  9. Your privacy rights

    You have the right disclosure under Art. 15 DSGVO, the right to correction under Art. 16 DSGVO, the right of deletion under Art. 17 DSGVO, the right to restrict processing under Art. 18 DSGVO and the right to data transferability under Art. 20 DSGVO. There is also a right of appeal to a privacy authority (Art. 77 DSGVO). According to Article 21 DSGVO you have a fundamental right to contest the processing of personal data by us. However, the right to contest only applies to very specific circumstances in your personal situation which may be in conflict with rights of our company.
    If you wish to take advantage of one of these rights, please contact our data protection officer (daniel.voigtlaender@mso.de).

  10. Scope of your obligations to provide your data to us

    You are only required to provide the data required to acquire and maintain a business relationship or for a precontractual relationship with us or the data that we are legally required to obtain. Without the data we would not normally be in a position to conclude or implement the contract. This may also extend to data required in the context of the business relationship. If we request additional data from you, you will be specifically informed that submission of this information is voluntary.

  11. Information on your right of objection Art. 21 DSGVO

    You have the right at any time to lodge an objection to the processing of your data that was conducted based on Art. 6 Sec. 1 f DSGVO (data processing based on a balancing interests) or Art. 6 Sec. 1 e DSGVO (data processing in the public interest) if there are reasons for the objection arising from your specific situation. This also applies for profiling based on this provision under the terms of Art. 4 No. 4 DSGVO.

    If you lodge an objection, we will cease to process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is used for enforcement, exercising or defense of legal claims.

    We process your personal data, if applicable, to process direct marketing. If you do not wish to receive advertising, you have the right to submit an objection at any time. This is also applicable for profiling that is connected to direct marketing. We will continue to respect your objection for the future.

    We will no longer process your data for the purposes of direct marketing if you object to processing for these purposes.

    The objection can be lodged by letter at the address listed in section 1.

  12. Your right of appeal to the applicable supervisory authority

    You have a right of appeal to the data protection authority (Art. 77 DSGVO). The data protection regulator responsible for us is:

    The state officer for data protection and freedom of information
    Königstrasse 10 a
    70173 Stuttgart