Information for new customers

We take data protection seriously and hereby inform you how we process your data and what claims and rights you are entitled to under data protection regulations.

1. Responsible person within the meaning of data protection law and contact details of the data protection officer

The person responsible in terms of data protection law is:

HEIN Reinraum GmbH
Daimlerstrasse 12
38112 Braunschweig
Tel: 0531 230 469-0

You can reach our data protection officer at our postal address with the addition “the data protection officer” or at datenschutz@hein-reinraum.de.

2. Purposes and legal basis on which we process your data

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other applicable data protection regulations. Which data is processed in detail and how it is used depends on the respective agreed service.

2.1 Purposes for the fulfillment of a contract or pre-contractual measures (Art. 6 Para. 1 Sentence 1 Letter b) GDPR)

Personal data is processed to carry out our contracts with you and to carry out your orders, as well as to carry out measures and activities within the framework of pre-contractual relationships. In particular, the processing serves to create invoices in accordance with your orders and includes the services, measures and activities necessary for this.

2.2 Purposes within the scope of a legitimate interest of us or third parties (Art. 6 para. 1 sentence 1 lit. f) GDPR)

Beyond the actual fulfillment of the contract or preliminary contract, we may process your data if it is necessary to protect our legitimate interests or those of third parties, in particular for the purposes of:

• advertising, market and opinion research or address leasing, provided you have not objected to the use of your data;
• Obtaining information and exchanging data with credit agencies, provided this is covered by our legitimate interest
• enriching our data, including by using or researching publicly available data;
• the limited storage of data if deletion is not possible or only possible with disproportionate effort due to the special nature of storage

2.3 Purposes to fulfill legal requirements (Art. 6 Para. 1 S. 1 lit. c) GDPR) or in the public interest (Art. 6 Para. 1 S. 1 lit. e) GDPR)

We are subject to a variety of legal requirements (e.g. commercial and tax laws), but also regulatory or other official requirements. The purposes of processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and investigation of terrorist financing and crimes that endanger assets, comparisons with European and international anti-terror lists, the fulfillment of tax control and reporting obligations and the archiving of data for data protection and data security purposes as well as audits by tax and other authorities. In addition, the disclosure of personal data may be necessary as part of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcing civil law claims.

3. The data categories we process, insofar as we do not receive data directly from you, and their origin

To the extent necessary to provide our services, we process personal data lawfully received from other companies or other third parties (e.g. credit agencies). We also process personal data that we have lawfully collected, received or acquired from publicly accessible sources (such as telephone directories, commercial and association registers, etc.) and are permitted to process.

Recipients or categories of recipients of your data

Within our company, those internal departments or organizational units receive your data that need it to fulfill our contractual and legal obligations or as part of the processing and implementation of our legitimate interest. Your data will be passed on to external bodies

• in connection with the execution of the contract;
• for the purposes of fulfilling legal requirements,
• due to our legitimate interest or the legitimate interest of the third party for the purposes stated in Section 2.2 (e.g. to authorities, credit agencies, debt collection, lawyers, courts, experts, group companies and committees and control bodies);
• if you have given us your consent to transmit it to third parties.

4. Duration of storage of your data

We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. In addition, we store data that must be tracked due to commercial and tax regulations for 10 years. Other data for which tax retention periods do not apply will be retained until the expiry of the regular statute of limitations (§§195, 199 BGB), but periods of up to 30 years may apply under certain circumstances.

If the data is no longer required for the fulfillment of contractual or legal obligations and rights, it will be regularly deleted, unless its – temporary – further processing is necessary for the fulfillment of the purposes listed under point 2.2 due to an overriding legitimate interest.

5. Processing of your data in a third country or by an international organization

Data will be transferred to locations outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary to carry out an order/contract from you or is required by law (e.g. tax reporting obligations ), it is within the scope of a legitimate interest of us or a third party or you have given us your consent.

Your data may also be processed in a third country in connection with the involvement of service providers as part of order processing. If there is no decision by the EU Commission on an adequate level of data protection for the country in question, we ensure, in accordance with EU data protection regulations, through appropriate contracts that your rights and freedoms are adequately protected and guaranteed.

6. Your privacy rights

You have the following rights towards us with regard to personal data relating to you:

• Right to information,
• Right to rectification or deletion,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

You also have the right to complain to the data protection supervisory authority responsible for you about our processing of your personal data.

7. Credit bureaus

Our company regularly checks the creditworthiness of our customers if there is a legitimate interest, for example if our company could be at risk of financial default. To do this, we work with Creditreform Braunschweig Göttingen Bruns & Harland GmbH & Co. KG, from whom we receive the necessary data. For this purpose, we transmit your personal data from this contractual relationship and the information necessary to obtain your credit rating to Creditreform Braunschweig Göttingen. The legal basis for the data transfer is Article 6 Paragraph 1 Sentence 1 Letter f), Article 6 Paragraph 1 Clause 1 Letter b) GDPR. You can find the information in accordance with Article 14 of the GDPR on the data processing taking place at Creditreform Braunschweig Göttingen at https://www.creditreform.de/braunschweig/datenschutz . view