Data protection information of MGS – Europe GmbH according to Art. 13 and 21 GDPR
The following information describes how and for what purpose MGS-Europe GmbH, Brüsseler Allee 21c, 41812 Erkelenz, Germany (hereinafter also: “MGS” or “we”) processes personal data of its business partners and their employees.
1.0 Responsibility for data processing and contact details
Responsible for the processing of your personal data is:
MGS-Europe GmbH, Brüsseler Allee 21c,.41812 Erkelenz, Germany
Phone: [0049 2431 945762], Fax [0049 2431 945773], E-Mail [email@example.com]
2.0 Type of data processed
We process the following personal data or categories of personal data that we receive from our business partners and their employees:
- Master data (first name, surname, title, telephone, e-mail, fax, delivery address, address, position in the company)
- Information about business transactions (e.B. order receipt, confirmation, delivery note, payment agreements)
- Communication data (e.B. contents of contact requests)
- Technical usage data for communication by e-mail and telephone
- Declarations on data protection (consent to the processing of personal data, assertion of data protection claims for information, correction, deletion, restriction and data portability, including the information you provide to us in this context)
- [Additional data if applicable]
We do not process any data that we have received from third parties.
3.0 Duration of data storage
In principle, we only process personal data for as long as it is necessary for the processing purpose listed below.
In addition, we are subject to various storage and documentation obligations arising from, among other things, the German Commercial Code (HGB) and the Tax Code (AO). The storage and documentation periods specified there are two to ten years.
Finally, the storage period is also assessed according to the statutory limitation periods, which can be up to thirty years, for example according to §§ 195 et seq. of the German Civil Code (BGB), whereby the regular limitation period is three years.
4.0 Purposes of data processing and legal basis
We process your personal data in accordance with the relevant data protection regulations, in particular the GDPR and the Federal Data Protection Act (BDSG), for various purposes. In principle, the following are considered as the purposes of the processing: The processing:-
- for the fulfilment of contractual obligations or pre-contractual measures (Art. 6 para. 1 lit.b GDPR),
- to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR),
- on the basis of your consent (Art. 6 para. 1 lit. a) GDPR) and/or
- due to legal requirements (Art. 6 para. 1 lit.c GDPR).
In particular, we process your personal data for the following purposes and on the respective legal basis:
4.1 Purpose / Legitimate interest
Administration of business partners and contact persons at the business partners for the purpose of communication and for the initiation and execution of the business relationship (customer acquisition and support)
Processed data or categories of data
Master data; information on business incidents; Communication data (e.B. contents of contact requests)
Art. 6 (1) to .b, Art. 6 (1) to DSGVO
4.2 Direct marketing and direct marketing (e.B. to inform our customers about our products and services)
Art. 6 (1) lit. a (if consent is given)
Art. 6 (1) lit. f GDPR (legitimate interest in direct marketing)
4.3 Prosecution, assertion of or defence against legal claims
Master data; any data or categories of data relevant to the claim in question.
Art. 6 (1) lit. f DSGVO
4.4 Management of consents and objections (management of declarations of consent and revocation as well as objections to data processing)
Master data, declarations of the data subjects
Art. 6 (1) bed. c DSGVO
4.5 Management of the claims asserted by data subjects (assertion of claims of the data subject for information, correction, deletion, restriction of data processing and data portability)
Master data, declarations of the data subjects, any data or categories of data that are the subject of the request.
Art. 6 (1) bed. c DSGVO
5.0 Recipients or categories of recipients
The personal data may be disclosed to the following recipients or categories of recipients:
We use service providers who process personal data on our behalf (so-called processors, cf. Art. 4 No. 8, 28 GDPR). This includes the following companies or service providers in the following categories:
- Service providers in the fields of IT and telecommunications
- Forwarding agency for the processing of goods deliveries to customers
- Suppliers for direct deliveries to customers
We do not pass on any personal data to other companies that process the data on their own responsibility.
6.0 Transfer of data to a third country or an international organisation
We do not transfer the above-mentioned personal data to entities in third countries (countries outside the European Economic Area – EEA) or international organizations:
7.0 Obligation to provide data
As part of our business relationship, you only have to provide the personal data that is necessary for the establishment and execution of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse the conclusion of the contract or the execution of the order or will no longer be able to carry out an existing contract and may have to terminate it.
8.0 Automatic decision-making and profiling
We do not use your personal data for automated decision-making, including profiling.
9.0 Rights of the data subject
9.1 Information, correction, deletion, restriction of processing, data portability
Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR and the right to data portability pursuant to Article 20 GDPR. To exercise the aforementioned rights, you can contact the bodies mentioned in Section 1 (Responsibility for data processing and contact data).
9.2 Right to object pursuant to Article 21 of the General Data Protection Regulation (GDPR)
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) (f) of the GDPR (data processing on the basis of legitimate interest); this also applies to any profiling based on this provision within the meaning of Article 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made informally and should be addressed to the body named in Section 1 (Responsibility for data processing and contact data). You will not incur any costs other than the transmission costs according to the basic tariff.
9.3 Revocation of consent
If you have given us your consent to the processing of your personal data, you can revoke this consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by this.
Please address the revocation of consent to the body named in Section 1 (Responsibility for Data Processing).
10.0 Right to lodge a complaint with the supervisory authority
In accordance with Article 77 (1) GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful, in particular violates the GDPR.
The address of the supervisory authority responsible for MGS Europe is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Phone: 0211/38424-0, Fax: 0211/38424-10, E-Mail: firstname.lastname@example.org.