Information duties acc. to art. 13 GDPR 

We her­eby wish to inform you com­pre­hen­si­ve­ly about the pro­ces­sing of your data in our com­pa­ny and the data pro­tec­tion claims and rights to which you are enti­t­led wit­hin the mea­ning of Art. 13 of the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR).

1. Who is respon­si­ble for data pro­ces­sing and whom can you con­ta­ct?
Ratis­bo­na Group GmbH
Yorck­stra­ße 22
93049 Regens­burg
Pho­ne: 0941/56993274

The com­pa­ny data pro­tec­tion offi­cer is
Nico Becker
Pro­jekt 29 GmbH & Co. KG
Osten­gas­se 14
93047 Regens­burg
Pho­ne: 0941–2986930

2. Which data are pro­ces­sed and from which sources do the­se data ori­gi­na­te?
We pro­cess the data which we have recei­ved from you wit­hin the frame­work of con­tract initia­ti­on or pro­ces­sing, on the basis of cons­ents or wit­hin the frame­work of your app­li­ca­ti­on to us or wit­hin the frame­work of your staff.

Per­so­nal data inclu­des per­so­nal data:
Your master/contact data, for examp­le first and last name, address, con­ta­ct data (e‑mail address, tele­pho­ne num­ber, fax), bank data for cus­to­mers.

For app­li­cants and employees, this inclu­des, for examp­le, first and last name, address, con­ta­ct data (e‑mail address, tele­pho­ne num­ber, fax), date of birth, data from cur­ri­cu­lum vitae and job refe­ren­ces, bank data, reli­gious affi­lia­ti­on, photographs.

For busi­ness part­ners, this inclu­des, for examp­le, the name of their legal repre­sen­ta­ti­ve, com­pa­ny, com­mer­cial regis­ter num­ber, VAT num­ber, com­pa­ny num­ber, address, con­ta­ct per­son con­ta­ct data (e‑mail address, tele­pho­ne num­ber, fax), bank details.

In addi­ti­on, we also pro­cess the fol­lowing other per­so­nal data:

  • Infor­ma­ti­on on the type and con­tent of con­tract data, order data, sales and docu­ment data, cus­to­mer and sup­plier histo­ry and con­sul­ting documents,
  • adver­ti­sing and sales data,
  • infor­ma­ti­on from your elec­tro­nic dealings with us (e.g. IP address, log-in data),
  • other data that we have recei­ved from you wit­hin the frame­work of our busi­ness rela­ti­ons­hip (e.g. in dis­cus­sions with customers),
  • we gene­ra­te this data our­sel­ves from mas­ter data, con­ta­ct data and other data, e.g. by means of cus­to­mer demand and cus­to­mer poten­ti­al analyses,
  • the docu­men­ta­ti­on of your decla­ra­ti­on of con­sent for the rece­i­pt of e.g. newsletters,
  • pho­to­gra­phy in the con­text of events.

3. For what pur­po­ses and on what legal basis are the data pro­ces­sed?
We pro­cess your data in accordance with the pro­vi­si­ons of the Data Pro­tec­tion Basic Regu­la­ti­on (GDPR) and the Federal Data Pro­tec­tion Act 2018, as amended:

a) to ful­fil (pre-)contractual obli­ga­ti­ons (Art. 6 para. 1lit.b GDPR):
The pro­ces­sing of your data takes place for the con­tract win­ding up on-line or in one of our bran­ches, for the con­tract win­ding up of your cowor­kers in our enter­pri­se. The data will be pro­ces­sed in par­ti­cu­lar during the initia­ti­on of busi­ness tran­sac­tions and the exe­cu­ti­on of con­tracts with you.

b) to ful­fil legal obli­ga­ti­ons (Art. 6 para. 1 lit.c GDPR):
A pro­ces­sing of your data is necessa­ry for the pur­po­se of the ful­film­ent of dif­fe­rent legal obli­ga­ti­ons, e.g. from the com­mer­cial code or the tax code.

c) to safe­guard legi­ti­ma­te inte­rests (Art. 6 para. 1 lit.f GDPR):
On the basis of a weig­hing of inte­rests, data pro­ces­sing may take place bey­ond the actu­al ful­film­ent of the con­tract in order to safe­guard the legi­ti­ma­te inte­rests of us or third par­ties. Data pro­ces­sing to safe­guard legi­ti­ma­te inte­rests is car­ri­ed out in the fol­lowing cases, for example:

    • adver­ti­sing or mar­ke­ting (see No. 4),
    • mea­su­res for busi­ness manage­ment and the fur­ther deve­lo­p­ment of ser­vices and products;
    • mana­ge a group-wide cus­to­mer data­ba­se to impro­ve cus­to­mer service
    • in the con­text of legal proceedings
    • sen­ding of non-pro­mo­ting infor­ma­ti­on and press releases.

d) wit­hin the scope of your con­sent (Art. 6 para. 1lit.a GDPR):
If you have given us your con­sent to pro­cess your data, e.g. to send you our news­let­ter, to publish photos.

4. Pro­ces­sing of per­so­nal data for adver­ti­sing pur­po­ses
You may at any time object to the use of your per­so­nal data for adver­ti­sing pur­po­ses in who­le or for indi­vi­du­al mea­su­res without incur­ring any cos­ts other than the trans­mis­si­on cos­ts accord­ing to the basic tariffs.

In Ger­ma­ny we are enti­t­led under the legal requi­re­ments of § 7 Abs.3 UWG (law against unfair com­pe­ti­ti­on) to use the email address you pro­vi­ded when con­clu­ding the con­tract for direct adver­ti­sing for our own simi­lar goods or ser­vices. You will recei­ve the­se pro­duct recom­men­da­ti­ons from us regard­less of whe­ther you have sub­scri­bed to a news­let­ter or not.

If you do not wish to recei­ve such recom­men­da­ti­ons by e‑mail from us, you can object to the use of your address for this pur­po­se at any time without incur­ring any cos­ts other than the trans­mis­si­on cos­ts accord­ing to the basic tariffs. A text mes­sa­ge is suf­fi­ci­ent for this pur­po­se. Of cour­se, every e‑mail always con­tains a unsub­scri­be link.

5. Who recei­ves my data?
If we use a ser­vice pro­vi­der in the sen­se of an order pro­ces­sing, we remain nevertheless respon­si­ble for the pro­tec­tion of your data. All con­tract pro­ces­sors are con­trac­tual­ly obli­ged to tre­at your data con­fi­den­ti­al­ly and to pro­cess it only wit­hin the scope of the ser­vice pro­vi­si­on. The con­tract pro­ces­sors com­mis­sio­ned by us will recei­ve your data inso­far as they requi­re the data for the per­for­mance of their respec­ti­ve ser­vices. The­se are, for examp­le, IT ser­vice pro­vi­ders that we need for the ope­ra­ti­on and secu­ri­ty of our IT sys­tem as well as adver­ti­sing and address publis­hers for our own adver­ti­sing campaigns.

Your data will be pro­ces­sed in our cus­to­mer data­ba­se. The cus­to­mer data­ba­se sup­ports the impro­ve­ment of the data qua­li­ty of the exis­ting cus­to­mer data (dupli­ca­te clean­sing, spoilage/deadness flags, address cor­rec­tion) and enab­les the enrich­ment with data from public sources.

If the­re is a legal obli­ga­ti­on and in the con­text of legal pro­se­cu­ti­on, aut­ho­ri­ties and courts as well as exter­nal audi­tors may be reci­pi­ents of your data.

In addi­ti­on, insuran­ce com­pa­nies, banks, credit agen­ci­es and ser­vice pro­vi­ders may be reci­pi­ents of your data for the pur­po­se of initia­ting and ful­fil­ling contracts.

6. How long will my data be stored?
We pro­cess your data until the ter­mi­na­ti­on of the busi­ness rela­ti­ons­hip or until the expi­ry of the app­li­ca­ble sta­tu­to­ry reten­ti­on peri­ods (e.g. from natio­nal com­mer­cial Laws, tax laws etc.); fur­ther­mo­re until the ter­mi­na­ti­on of any legal dis­pu­tes in which the data is requi­red as evidence.

7. Is per­so­nal data trans­fer­red to a third coun­try?
In princip­le, we do not trans­fer any data to a third coun­try. A trans­fer will only take place on a case-by-case basis on the basis of an ade­quacy decisi­on of the Euro­pean Com­mis­si­on, stan­dard con­trac­tu­al clau­ses, appro­pria­te safe­guards or your express consent.

8. What data pro­tec­tion rights do I have?
You have the right at any time to infor­ma­ti­on, cor­rec­tion, dele­ti­on or restric­tion of the pro­ces­sing of your stored data, a right of objec­tion to the pro­ces­sing as well as a right to data trans­fer and a right of com­p­laint in accordance with the requi­re­ments of data pro­tec­tion law.

Right to infor­ma­ti­on
You can request infor­ma­ti­on from us as to whe­ther and to what extent we pro­cess your data.

Right to rec­ti­fi­ca­ti­on
If we pro­cess your data that is incom­ple­te or inac­cu­ra­te, you may request that we cor­rect or com­ple­te it at any time.

Right to dele­ti­on
You can demand that we dele­te your data if we pro­cess it unlaw­ful­ly or if the pro­ces­sing dis­pro­por­tio­na­te­ly inter­fe­res with your legi­ti­ma­te pro­tec­tion inte­rests. Plea­se note that the­re may be rea­sons that pre­vent an immedia­te dele­ti­on, e.g. in the case of legal­ly regu­la­ted sto­rage obligations.

Irre­spec­ti­ve of the exer­cise of your right to dele­ti­on, we will dele­te your data immedia­te­ly and com­ple­te­ly, inso­far as the­re is no legal or sta­tu­to­ry obli­ga­ti­on to retain data in this respect.

Right to limit the pro­ces­sing
You can ask us to restrict the pro­ces­sing of your data if

  • you dis­pu­te the accu­ra­cy of the data for a peri­od of time that allows us to veri­fy the accu­ra­cy of the data,
  • the pro­ces­sing of the data is unlaw­ful, but you refu­se to dele­te it and ins­tead request a restric­tion on the use of the data,
  • we no lon­ger need the data for the inten­ded pur­po­se, but you still need this data to assert or defend legal claims, or
  • you have objec­ted to the pro­ces­sing of the data.

Right to data trans­fe­ra­bi­li­ty
You may request that we pro­vi­de you with the infor­ma­ti­on you have pro­vi­ded to us in a struc­tu­red, com­mon and machi­ne-read­a­ble for­mat and that you may pro­vi­de that infor­ma­ti­on to ano­t­her respon­si­ble per­son without our inter­fe­rence, pro­vi­ded that

  • we pro­cess this data on the basis of a con­sent given and revo­ca­ble by you or for the ful­film­ent of a con­tract bet­ween us, and
  • this pro­ces­sing is car­ri­ed out using auto­ma­ted procedures.

If tech­ni­cal­ly fea­si­ble, you may request us to trans­fer your data direct­ly to ano­t­her respon­si­ble person.

Right of objec­tion
If we pro­cess your data for legi­ti­ma­te rea­sons, you may object to such pro­ces­sing at any time; this would also app­ly to pro­filing based on the­se pro­vi­si­ons. We will then no lon­ger pro­cess your data unless we can pro­ve com­pel­ling grounds for pro­ces­sing worthy of pro­tec­tion which out­weigh your inte­rests, rights and free­doms or the pro­ces­sing ser­ves the asser­ti­on, exer­cise or defence of legal claims. You can object to the pro­ces­sing of your data for the pur­po­se of direct mar­ke­ting at any time without giving reasons.

Right of appeal
If you are of the opi­ni­on that we vio­la­te Ger­man or Euro­pean data pro­tec­tion law when pro­ces­sing your data, we ask you to con­ta­ct us in order to cla­ri­fy any ques­ti­ons you may have. Of cour­se, you also have the right to con­ta­ct the super­vi­so­ry aut­ho­ri­ty respon­si­ble for you, the respec­ti­ve sta­te office for data pro­tec­tion supervision.

If you wish to assert any of the afo­re­men­tio­ned rights against us, plea­se con­ta­ct our data pro­tec­tion offi­cer. In case of doubt, we may request addi­tio­nal infor­ma­ti­on to con­firm your identity.

9. Am I obli­ged to pro­vi­de data?
The pro­ces­sing of your data is necessa­ry to con­clu­de or ful­fil your con­tract with us. If you do not pro­vi­de us with this data, we will gene­ral­ly have to refu­se to enter into the con­tract or will no lon­ger be able to per­form an exis­ting con­tract and will the­re­fo­re have to ter­mi­na­te it. Howe­ver, you are not obli­ged to give your con­sent to data pro­ces­sing with regard to data which is not rele­vant for the ful­film­ent of the con­tract or which is not requi­red by law.

Yorck­stra­ße 22, 93049 Regens­burg
+49 941 69877810

The Office Cen­ter Regens­burg is part of Ratis­bo­na Works­pace.
Ratis­bo­na Works­pace is a brand of Ratis­bo­na Group GmbH.