Data protection information for customers
(Klicken Sie hier für die deutsche Version)
We, the Datenschutzberatung Moers GmbH, Neue Straße 22, 34369 Hofgeismar, 05671 749 25 0, info@dsb-moers.de, would like to explain to you the extent to which we process your data as a customer. If you have any questions about data protection, please contact us at datenschutz@dsb-moers.de.
Purpose and legal basis of data processing
Contract fulfilment
The purpose of data processing is the initiation and fulfilment of contractual obligations on the basis of Art. 6 (1) (b) GDPR.
Customer satisfaction survey
In order to continuously improve our services, our customers can take part in a written online satisfaction survey. We process the data collected through the survey solely for the purpose of analysing the results. We receive the survey results by e-mail. It is only possible for us to identify the sender if they have expressly included their contact details and name in the form. The survey is always anonymous. The messages generated from the survey forms are deleted from the e-mail archive in accordance with the regular deletion periods.
Newsletter
We inform our customers about current developments in data protection and our services via an e-mail newsletter. The legal basis for this is Art. 6 (1) (f) GDPR, our legitimate interest in offering our services to customers. If the interests of our customers‘ contact persons outweigh our legitimate interests, we are happy to accept objections to the use of contact data for sending newsletters.
Use of our customer data room
We provide our customers with a data room for the secure exchange of documents and other files. For this purpose, we use names and email addresses to create and assign access authorisations on the basis of contract fulfilment in accordance with Art. 6 (1) (b) GDPR. To ensure system security, log files about the login and system usage are generated and processed on the basis of Art. 6 (1) (c) combined with Art. 32 GDPR.
Your data will be stored for as long as you have access to the system. The log files are stored for six months and then deleted unless legal provisions take precedence (e.g. in the case of forensic analyses).
Sanction list screening
We are legally obliged to carry out a sanction list screening. The legal basis for data processing is Art. 6 (1) (c) GDPR in conjunction with recital Nr. 881/2002, Nr. 753/2011 and Nr. 2580/2001. For this purpose, your contact data will be transmitted to a service provider, who is separately bound to maintain confidentiality and protect data, for comparison with the sanction lists. Your data will only be processed for the purpose of the sanction lists screening and will be deleted after the statutory retention period has expired.
Categories of recipients
We use service providers who are separately bound to confidentiality and data protection in the context of providing services for specific areas in which access to personal data cannot be ruled out. These categories of recipients are hosting, IT and software service providers, data centres and consulting companies. Data will only be passed on to authorities if overriding legal provisions apply.
Duration of storage and deletion of data
Your data will be stored for the duration of the contract; after the end of the contractual relationship, we are obliged to retain the tax-relevant documents for 10 years after the end of the annual financial statements and calendar year. The data will then be deleted.
Your right to information, rectification, erasure, objection and data portability
You can exercise your right to information, rectification, and erasure of data at any time. To do so, please contact us using the contact details provided above. If you request data erasure but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority at any time.
Obligation to provide information
It is not possible to conclude a contract without correct information from you.
