We will process the data you have relayed to us in conjunction with contacting us (email, business card, enquiry, telephone call). This is done in order to be able to, for example, initiate a business contact or transaction, satisfy your request for some information or, generally, to communicate with you. Data may also be stored and processed because it is required by law.

We also process the data relating to you that is necessary to conclude and execute a contract that has been made between us.

Legal basis

The legal basis for processing your personal data for these proceedings is provided primarily by Art. 6(1)(f) of the GDPR (legitimate interest, e.g. in the sense of a desired initiation of a business contact or the satisfying of a desire for information) and Art. 6 (1)(b) of the GDPR (for the performance of a contract).

How long will data be stored?

The data collected will be stored for as long as it is required, i.e. for as long as it is needed to fulfil the purpose for which it was collected. This means, in particular, that the personal data collected will be deleted once the contract has been completed, provided that there are no statutory or contractual retention period considerations that would prevent this. If, therefore, the data is no longer required for the purposes of communicating with you, providing you with information, maintaining a business relationship with you or because it is stipulated in law that your data is retained, the data will be deleted. In particular, it will be deleted if

• the reasons stated above no longer apply and are unlikely to arise again,
• you assert your right to have your data deleted,
• the deletion of the data is required by law.

Disclosure to others

The personal data collected as a result of the contact will not be relayed to third parties unless

• this is required by law,
• it is required to fulfil contractual obligations,
• it is required due to the legitimate interest of a third party,
• you have agreed to it by giving consent to a form of disclosure.

As a result of the above measures, the following might be recipients:

• processors that we have commissioned,
• public authorities,
• public organisations,
• customers and partners.

The relaying of data to a state that is not part of the European Economic Area will only take place if it can demonstrate an appropriate level of data protection, which is confirmed by the EU Commission; further, that it has provided appropriate data protection guarantees; that this is required to meet employment contract obligations; or if you have given your consent for this to happen. If a processor is commissioned to execute a contract, we will conclude a contract with that third party for contract processing within the meaning of Art. 28 of the GDPR and obtain your express consent to this in advance.

The personal data will be processed in our internal systems, by contract processors with whom we have contracts and in data centres in the Federal Republic of Germany.

We are obliged to carry out data backups regularly and to the required extent. We must also comply with the technical and organisational stipulations of Art. 32 of the GDPR, in particular, we must protect the systems to which we control access against them becoming known to, or being recorded or modified by, unauthorised employees or other third parties, or against any other unauthorised access or attack, no matter what form this takes. To do this, we deploy appropriate measures using the latest in proven technology, in particular to safeguard against viruses and other malicious software or program routines; and additionally, measures to protect our facilities, in particular to guard against break-in.

We have a named data protection officer in our organisation. You can contact the officer in the following ways:

Weiss Chemie + Technik GmbH & Co.KG

- Data protection officer -

Hansastrasse 2

35708 Haiger

Email: datenschutz@weiss-chemie.de