DATA PROTECTION INFORMATION FOR CUSTOMERS
DATA PROTECTION INFORMATION FOR CUSTOMERS/OTHER CONTRACTUAL PARTNERS AND INTERESTED PARTIES
Information on data protection regarding our processing of customer and prospective customer data in accordance with Articles 13, 14 and 21 of the European General Data Protection Regulation (GDPR)
Wgroup GmbH
Dear customer, dear interested party, dear contractual partner In accordance with the provisions of Articles 13, 14 and 21 of the European General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the services requested or agreed. To ensure that you are fully informed about the processing of your personal data in the context of the fulfillment of a contract or the implementation of pre-contractual measures, please take note of the following information.
- RESPONSIBLE PARTY WITHIN THE MEANING OF DATA PROTECTION LAW
Wgroup GmbH
Fasanenstrasse 85,
10623 Berlin
+49 174 177 78 79
info@wgroupgmbh.eu
- CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
Wgroup GmbH
Algan Alper Şen
Fasanenstrasse 85,
10623 Berlin
alper.sen@wgroupgmbh.eu
If you have any questions or concerns about data protection, you can contact our data protection officer at any time.
- PURPOSES AND LEGAL BASES OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (“Bundesdatenschutzgesetz”, BDSG), insofar as this is necessary for the establishment, execution and fulfillment of a contract and for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or execution of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Article 6(1)(b) GDPR.
If you give us your express consent to process personal data for specific purposes (e.g. disclosure to third parties, evaluation for marketing purposes or advertising by email), the lawfulness of this processing is given on the basis of your consent in accordance with Article 6(1)(a) GDPR. Any consent given can be revoked at any time with effect for the future (see Clause 9 of this data protection information).
If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfill legal obligations in accordance with Article 6 (1) (c) GDPR. In addition, processing may be carried out to protect our legitimate interests or those of third parties and to defend and assert legal claims in accordance with Article 6(1)(f) GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
- CATEGORIES OF PERSONAL DATA
We only process data that is related to the establishment of the contract or pre-contractual measures. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of establishing the contract.
- SOURCES OF THE DATA
We process personal data that we receive from you or that you provide via our website in the context of establishing contact or a contractual relationship or in the context of pre-contractual measures.
- RECIPIENTS OF THE DATA
We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interest.
We may transfer your personal data to companies affiliated with us insofar as this is permitted within the scope of the purposes and legal bases set out in Clause 3 of this data protection information sheet.
Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Article 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet service providers and providers of customer management systems and software.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the performance of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
- External tax consultant
- Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) if there is a legal or official obligation,
- Other data recipients for whom you have given us your consent to transfer data.
- DATA TRANSFER TO A THIRD COUNTRY
A data transfer to a third country is not intended.
A data transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization will only take place if this is necessary for the processing and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent.
- DURATION OF DATA STORAGE
Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This also includes the initiation and execution of a contract.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (“Handelsgesetzbuch”, HGB) and the German Fiscal Code (“Abgabenordnung”, AO). The retention and documentation periods stipulated there are two to ten years.
Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (“Bürgerliches Gesetzbuch”, BGB), are generally three years, but in certain cases can be up to thirty years.
- YOUR RIGHTS
Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to notification under Article 19 GDPR and the right to data portability under Article 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled under Article 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements (see Clause 8 of this data protection information).
Right to object
If your personal data is processed in accordance with Article 6(1)(f) GDPR to protect legitimate interests, you have the right under Article 21 GDPR to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to processing for the purpose of such advertising. This also applies to profiling insofar as it is associated with this direct advertising. If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.
To exercise your rights, you can contact us using the contact details provided in Clause 1.
- NECESSITY OF THE PROVISION OF PERSONAL DATA
The provision of personal data for the decision on the conclusion of a contract, the fulfillment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.