General Data Protection Notice of Obeck Verpackungen GmbH

1. With this Data Protection Notice we are informing you about how we process your data in our company.

Controller within the context of data protection legislation is

Obeck Verpackungen GmbH
Steinräum 10
96524 Föritztal
Phone: +49 3675 42 70 6 - 0
Email: info@obeck.eu

Contact details of the Data Protection Officer:

Obeck Verpackungen GmbH
DATA PROTECTION OFFICER
Steinräum 10
96524 Föritztal

The company’s Data Protection Officer may be contacted at the above address and at datenschutz@obeck.eu.

2. We process the following personal data:

• Contact details (contacts’ information, if required) postal address(es)
• Invoice data (possibly with tax information)
• Information required for reasonable contract fulfilment
• Any further data relating to the contractual relationship with our suppliers, service providers and business partners
• Any further data as part of the mailing of the newsletter, catalogue or price lists

3. We process personal data for the purposes of

• performing and processing the order and contract, including
• any necessary correspondence,
• fulfilling our contractual and statutory obligations as a company and
• processing within the scope of mutual claims arising from the contract (e.g. invoicing, benefit, remuneration and liability claims etc.).
• ensuring a specific and regular delivery of newsletters, catalogues or price lists for similar goods and services to the emails addressed collected during the course of the existing business relationship, where necessary.

4. The legal basis for data processing in our company is

• Art. 6(1) subsection1 lit. b GDPR to enter into and fulfil the contract,
• Art. 6(1) subsection 1 lit c GDPR to meet legal obligations to which we, as a company, are subject,
• Art. 6(1) subsection 1 lit. f GDPR, if data processing is necessary to safeguard our legitimate interests or those of a third party; in particular, we have a legitimate interest in the ongoing business relationship with our customers and business partners,
• Art. 6(1) subsection 1 lit. a GDPR, where you have consented to your personal data being processed by us for specific purposes.
• Art. 7(3) of the German Fair Trade Practices Act (UWG) in conjunction with Art. 6(1) lit f GDPR to regularly send a newsletter for similar goods and services to the email address collected during the course of the existing business relationship.

5. Sharing with third parties

Your personal data shall only be disclosed to external recipients, if this is necessary to carry out the activities referred to above, or if you have previously consented to such disclosure, or this is carried out on your behalf. These third parties may not use the data for any other purpose. For example, your address details may be passed on to freight forwarders, transport companies and couriers as part of contract fulfilment.

We will only disclose customers’ data, if we are obliged to do so under the law or because of a court decision, or if the disclosure is necessary to implement or protect our General Business Terms or other agreements. This applies mutatis mutandis to the storage of data. No data shall be disclosed for commercial reasons.

6. Transmission to third countries

Data shall only be transferred to third countries (countries outside the European Economic Area EEA), if this is required to execute the contract (e.g. payment orders), or you have given us your consent, or this is otherwise legally permitted. In this case, we shall take steps to protect your data, for example, through contractual regulations. We shall only transfer to recipients who guarantee to protect your data pursuant to the regulations of GDPR on the transfer to third countries (Art. 44 to 49 GDPR).

7. Retention and Erasure

We shall store personal data in our company for the duration of statutory retention periods. Generally, this is 10 years for tax data and 6 years for business correspondence. At the end of the statutory periods, we will check if there are any reasons to retain the data further, for example, in the case of open activities or in the event of guarantees and warranties. We generally delete personal data, if it is no longer required in order to fulfil the purpose, or if there is no other obligation for its retention.

8. As a data subject whose data we process, you have the following rights:

• Right of access according to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to erasure (“to be forgotten”) according to Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to portability of your data in a structured, commonly used and machine-readable format according to Art. 20 GDPR

If we process your personal data for specific purposes based on your consent, you have the right to withdraw your consent in accordance with Art. 7 3 GDPR. After receiving your objection we shall stop processing your data for the purposes for which you granted your consent. The lawful of processing prior to receiving your objection remains unchanged.

Right to object: If we process your personal data to safeguard legitimate interests within the meaning of Art. 6(1) subsection 1 lit. f GDPR, you have the right according to Art. 21(1) GDPR to object to such processing for reasons specific to your particular situation. You may object to processing for the purposes of direct advertising at any time without giving a reason in accordance with Art. 21(2) GDPR. It is sufficient for you to notify us informally to exercise your right of objection (e.g. by email to datenschutz@obeck.eu, giving details of which data processing you object to).

Based on Art. 7(3) of the German Fair Trade Practices Act (UWG) and Art. 6(1) lit f GDPR we regularly send a newsletter for similar goods and services to the email address collected during the course of the existing business relationship. You can object to this mailing at any time by sending an email to datenschutz@obeck.eu.

If you feel that that processing of your personal data breaches the General Data Protection Regulation, you have the right to lodge a complaint in accordance with Art. 77(1) GDPR with a supervisory authority for data protection (generally the State Data Protection and Freedom of Information Officer). The complaint may be lodged, in particular, with the supervisory authority that is responsible at your usual place of residence, employment or where the alleged breach took place.

9. This notice represents the legislation in force as of December 2021.

We reserve the right to amend our Data Protection Notice to take account of any changes in regulations or legislation.