Data protection obligation information
initiation
Responsible body
We, POS TUNING GmbH, +49 5222 36965–0, info@postuning.de, as the responsible body, would like to explain to you below what data we process from you and how.
Data Protection Officer
If you have any questions about data protection, our data protection officer , Mr. Thomas Werning, will be happy to help.
This can be reached at:
werning.com GmbH — Dieselstraße 12 — 32791 location — teamDatenschutz@werning.com — +49 5232 98047–00
With this mandatory data protection information, we, as the responsible body, fulfill our duty to inform in accordance with Art. 12–14 DSGVO.
Information on data collection and processing
Below you will find information about what personal data (this is any data that identifies or makes identifiable you as a natural person (hereinafter “data subject”).
These are for example:
- Customer master data for contract execution/fulfillment of the service, name, address, e‑mail address, data in connection with payment processing, correspondence (e.g., correspondence or e‑mail correspondence with you), advertising and sales data (e.g., to inform you about new potentially interesting offers by mail or, if you have given your consent, by e‑mail)
- Data from contact initiations such as name, telephone number, e‑mail address
- Supplier data such as name, telephone number, e‑mail address
- Applicant data such as name, address, e‑mail address, marital status, religious affiliation
Right of appeal
If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/, as well as with any other data protection supervisory authority.
purposes of processing
1. Customer data/interested parties
purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive the data directly from you. Either in the case of inquiries from interested parties and contacts, the placing of orders or order processing (see point “Information on data collection and processing”).
Legal basis:
The data collection and data processing is necessary for the performance of the contract and is based on Article 6 para. 1 b) GDPR. The use for direct advertising is based on Art. 6 para. 1 f) GDPR. It is our legitimate interest to draw your attention to special offers by means of direct advertising. Data will not be passed on to third parties unless required by law, such as to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods, such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).
You have the right to object to the use of your data for the purpose of direct marketing at any time. In addition, you are entitled to request information about the data we have stored about you and, if the data is incorrect, to request that it be corrected or, in the case of unauthorized data storage, that it be deleted. You also have the right to lodge a complaint with a supervisory authority (see right to lodge a complaint).
2. Suppliers
purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive the data directly from you when placing an order or processing an order (see item “Information on data collection and processing”).
Legal basis:
The data collection and data processing is necessary for the performance of the contract and is based on Article 6 para. 1 b) GDPR. Data will not be passed on to third parties unless required by law, such as to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods, such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).
You are entitled to request information about the data we have stored about you and, if the data is incorrect, to request that it be corrected or, in the case of unauthorized data storage, that it be deleted. You also have the right to lodge a complaint with a supervisory authority (see right to lodge a complaint).
3. Newsletter
purpose of processing
If you would like to receive the newsletter offered on the website, we require an e‑mail address from you. The registration for the newsletter takes place in the double opt-in procedure. This means that after registration you will receive an e‑mail with which you must confirm your registration. This procedure prevents someone unauthorized from registering with your e‑mail address. Your registration for the newsletter will be logged (storage of the registration and confirmation time and the IP address). With the help of logging, the registration process can be proven in accordance with legal requirements.
You can revoke your consent to the storage of the e‑mail address (and optionally first name and surname for the purpose of addressing you personally) and its use to send the newsletter with the associated success measurement at any time. There is a cancellation link at the end of every newsletter. In order for us to be able to prove a previously given consent for an unsubscribed e‑mail address, we may store it for up to 2 years before we delete it.
Legal basisfor sending newsletters and the associated measurement of success: This is based on the consent of the recipient in accordance with Art. 6 I (a) GDPR, Art. 7 GDPR together with Section 7 Para. 2 No. 3 UWG or on the basis of the legal permission according to § 7 Para. 3 UWG.
And Art. 6 1 (f): Our legitimate interest in measuring success results from recognizing the reading habits of our users based on the opening of the newsletter, opening hours and the links clicked on, in order to be able to create and send them interest-based and useful content.
The legal basis for logging is Art. 6 l (f) GDPR. Our legitimate interest results from the fact that we use a secure and user-friendly newsletter system that is useful for sending and protects the personal data of newsletter subscribers. Furthermore, it allows us to prove consent.
You are entitled to request information about the data we have stored about you and, if the data is incorrect, to request that it be corrected or, in the case of unauthorized data storage, that it be deleted. You also have the right to lodge a complaint with a supervisory authority (see right to lodge a complaint).
4. Applicant
purpose of processing
If you apply to us based on a job advertisement, we will collect your personal data such as first name, last name, address, telephone number, e‑mail address, attachments (cover letter, curriculum vitae, certificates, photo) and save them for the duration of the selection process.
By submitting the form, you expressly agree that we can process the data you have transmitted to us, in particular sensitive information about mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in a trade union or political Party or sex life, for the purpose of the application, may collect, process and use.
Your data will only be used by authorized persons in the human resources department or management for processing as part of the selection process. Your personal data will not be passed on to third parties.
The legal basis is Art. 6 I (b) GDPR for the processing of pre-contractual measures.
Unless you inform us otherwise, the data will be deleted 6 months after the end of the application process or, in the case of applications by post, destroyed. Due to the long application and selection periods for trainees, we store their data in Germany for up to 18 months.
If the respective legal requirements are met, you have the following rights: Right to information about your data stored by us; Correction, deletion, restriction of the processing of your data or objection to the processing, as well as data portability. Of course, you also have the option of having all your application documents deleted or destroyed at any time by sending us an email to: karriere@postuning.de .
data subject rights
In accordance with Art. 15 GDPR, you have the right to receive information about the data stored about you, including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 DS-GVO. If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Articles 17, 18 and 21 GDPR).
If you want your data to be deleted, but we are still legally obliged to store it, access to your data will be restricted (blocked). The same applies in the event of a contradiction. You can exercise your right to data portability as long as the technical possibilities are available to the recipient and to us.
Our data protection officer is available to you as a contact person for your rights as a data subject at teamDatenschutz@werning.com.
Actuality and change of this mandatory information
We reserve the right to adjust the content of this mandatory information at any time. This is usually done in the event of further development or legal adaptation. You can access the current mandatory information via a link (which is inserted in e‑mails, offers, order confirmations, invoices, etc.) to our website.
Status of this declaration: 30.12.2019
For further information on the handling of personal data, please refer to Data protection on the website