Mandatory information

Mandatory information according to Art. 12 et seq. GDPR

Contact details of the person responsible (e.g. management)

KURZ Karkassenhandel GmbH
Heinrich-Otto-Str. 19
73240 Wendlingen

Telephone: +49 7024/94180
Fax: +49 7024/941820
Email: info@reifen-kurz.de

Where do we get your personal data from?

In principle, your data is collected from you. The processing of the personal data you provide is necessary to fulfill the contractual obligations resulting from the contract concluded with us. Due to your obligation to cooperate, it is essential to provide the personal data requested by us, otherwise we will not be able to meet our contractual obligations. Accounting and/or tax disadvantages for you can otherwise no longer be ruled out.

As part of pre-contractual measures (e.g. master data collection in the process of interested parties), the provision of your personal data is necessary. If you do not provide the requested data, a contract cannot be concluded.

In order to provide our services, it may be necessary to process personal data that we receive from other companies or other third parties, e.g. B. tax offices, your business partner, etc. lawfully and for the respective purpose.

Furthermore, we may process personal data from publicly accessible sources, e.g. websites, which we use legitimately and only for the respective contractual purpose.

Purposes and legal bases of processing

The personal data you provide will be processed in accordance with the provisions of the European Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

Due to legal requirements (according to Art. 6 Para.1 Lit.c DS-GVO) or in the public interest (according to Art. 6 Para.1 Lit. e DS-GVO)

The purposes of data processing result from legal requirements or are in the public interest (e.g. compliance with storage obligations, proof of compliance with notification and information obligations of the company).

To fulfill contractual obligations (according to Art. 6 Para. 1 lit. b DS-GVO)

The purposes of data processing result on the one hand from the initiation of pre-contractual measures that precede a contractually regulated business relationship and on the other hand to fulfill the obligations arising from the contract concluded with you.

Based on consent (according to Art. 6 Para. 1 lit. aDS-GVO)

The purposes of processing personal data result from the granting of consent. You can revoke your consent at any time with effect for the future. Consent that was given before the GDPR came into force (May 25, 2018) can also be revoked. Processing that took place before the revocation remains unaffected by the revocation. Example: Sending a newsletter, release from professional secrecy to pass on the data you have provided to third parties (e.g. banks, insurance companies, shareholders, etc.) at your request.

As part of the balancing of interests (according to Art. 6 Para. 1Lit. f DS-GVO)

The purposes of the processing result from safeguarding our legitimate interests. It may be necessary to process the data you have provided beyond the actual fulfillment of the contract. Our legitimate interest can be used to justify further processing of the data you have provided, provided your interests or fundamental rights and freedoms do not prevail. In individual cases, our legitimate interest may be: assertion of legal claims, defense against liability claims, prevention of criminal offenses.

Special features for employees and applicants

For the establishment, implementation and termination of the employment relationship (according to § 26 paragraph 1 sentence 1 BDSG)

The purposes of data processing result from the initiation of pre-contractual measures that precede a contractually regulated employment relationship and, on the other hand, to fulfill the obligations arising from the employment contract concluded with you.

To uncover criminal offenses (according to § 26 paragraph 1 sentence 2BDSG)

Your personal data may be processed to uncover criminal offenses if documented factual indications give rise to the suspicion that you have committed a criminal offense in the employment relationship, the processing is necessary to uncover it and your legitimate interest in the exclusion of the processing does not outweigh it, in particular the type and extent are not disproportionate to the occasion.

Based on a consent (according to § 26 paragraph 2 BDSG)

The purposes of processing personal data result from the granting of consent. You can revoke your consent at any time with effect for the future. Consent that was given before the GDPR came into force (May 25, 2018) can also be revoked. Processing that took place before the revocation remains unaffected by the revocation. Example: publication of your picture on our website.

Who receives the personal data you provide?

Within our company, those areas that need access to the personal data you have provided to fulfill contractual and legal obligations and that are authorized to process this data are given access to it.

In fulfillment of the contract concluded with you, only those departments that require the data for legal reasons will receive the data you have provided, e.g. tax authorities, social security institutions, competent authorities and courts.

As a carrier of professional secrecy, we are obliged to observe and implement professional secrecy. Other recipients will only receive the data you have provided at your request if you release us from professional secrecy.

As part of our service provision, we commission processors who contribute to the fulfillment of the contractual obligations, e.g .

Are the data you provide transferred to third countries or international organizations?

Under no circumstances will the data you provide be transferred to a third country or an international organization. If, in individual cases, you wish the data you have provided to be transferred to a third country or an international organization, we will only do this after your written consent and release from professional secrecy.

Does automated decision-making including profiling take place?

No fully automated decision-making (including profiling) pursuant to Art. 22 GDPR is used to process the data you have provided.

Duration of processing (criteria for deletion)

The processing of the data provided by you takes place for as long as it is necessary to achieve the contractually agreed purpose, in principle for as long as the contractual relationship with you exists. After the end of the contractual relationship, the data you have provided will be processed to comply with statutory retention requirements or based on our legitimate interests. After the statutory retention periods have expired and/or our legitimate interests no longer apply, the data you have provided will be deleted.

Estimated deadlines for our storage obligations and our legitimate interests:

• Compliance with commercial, tax and professional retention periods. The storage and documentation periods specified there are two to ten years.
• Preservation of evidence under the statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.

Special features of the application process

If you apply to us, we will only use the information you provide. In addition to the above-mentioned legal bases, this is done to carry out pre-contractual measures in accordance with Article 6 Paragraph 1 Letter b) GDPR and to decide on the establishment of an employment relationship in accordance with Article 26 Paragraph 1 sentence 1 BDSG.

As part of the application process, only those people who are involved in the application process within our company have access to your data. If your application leads to the establishment of an employment relationship, your personal data will continue to be processed for the purpose of carrying out the employment relationship.

If your application does not lead to the establishment of an employment relationship, your personal data will still be processed after the end of the application process on the basis of legitimate interests, e.g. to assert or defend against claims for damages, and will be deleted after our legitimate interests have ceased to exist and after the statutory retention periods have expired. This is usually the case three months after a rejection, unless you have given us your consent to longer storage.

Information about your rights

• Right to Access according to Art. 15 GDPR:‍
  • data about you is stored and for what purpose it is stored.

• Right to Right to rectification according to Art. 16 GDPR:‍
  • You have the right to request the person responsible to correct your incorrect personal data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

• Right to erasure ("right to be forgotten") according to Art. 17 GDPR:
  • You have the right to demand that the person responsible delete your data immediately. The person responsible is obliged to delete personal data immediately if one of the following reasons applies:
    
    1. The purposes for which the personal data were collected are no longer applicable
    2. You revoke your consent to the processing. There is no other legal basis for the processing.
    3. You object to the processing. There is no other legal basis for the processing.
    4. The personal data were processed unlawfully.
    5. The erasure of personal data is necessary to fulfill a legal obligation under Union or national law to which the controller is subject.
    6. The personal data were collected in relation to information society services offered pursuant to Article 8(1).

• Right to Restriction of processing according to Art. 18 GDPR &. § 35 BDSG:
  • You have the right to request the restriction of processing if one of the following conditions is met:
    
    1. You have doubts about the correctness of the personal data.
    2. The processing is unlawful; However, they refuse to delete it.
    3. Personal data are no longer needed for the purposes of processing; However, you need the data to assert, exercise or defend legal claims.
    4. You have lodged an objection to the processing pursuant to Article 21 (1) GDPR. As long as it is not certain whether the legitimate reasons of the person responsible outweigh you, the processing will be restricted.

• Right to Data portability according to Art.20 GDPR:
  • You have the right to receive the data you have provided from the person responsible in a structured, common and machine-readable format. A forwarding to another responsible person must not be prevented by us.

• Right of objection according to Art. 21 GDPR:
  • To do this, please contact the person responsible for processing (see above).

• Right of appeal at the supervisory authority according to Art. 13 Para. 2 lit. d, 77 DS-GVO i. V. m § 19 BDSG:
  • If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. To do this, please contact the responsible supervisory authority

• withdrawal of consent according to Art. 7 Para. 3DS-GVO:
  • If the processing is based on your consent in accordance with Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a (processing of special categories of personal data), you are entitled at any time to use the appropriately bound withdraw consent, without affecting the legality of the processing carried out on the basis of the consent until the revocation.