Data protection information pursuant to Article 13 of the EU General Data Protection Regulation (GDPR): Purchase and delivery contract

 

We process your personal data. You should know what happens to these data and why this is done. Therefore we inform you about it.

 

Who we are

Bochumer Verein Verkehrstechnik GmbH
represented by Mr. Dr. Baoli Wang and Mr. Harald Müller (CFO)
Alleestr. 70
D-44793 Bochum
E-Mail: datenschutz_bvv@bochumer-verein.de
Tel: 0234 / 6891-0

 

Data protection officer

We have appointed a data protection officer.
You can reach the data protection officer via these contact details:

Bochumer Verein Verkehrstechnik GmbH
Datenschutzbeauftragter
Alleestr. 70
D-44793 Bochum
E-Mail: datenschutz_bvv@bochumer-verein.de

 

Why do we process your data

We process your data in order to fulfil these purposes:

Purpose 1: Fulfilment of the purchase and delivery contract
Purpose 2: Internal administration
Purpose 3: Fulfilment of storage obligations
Purpose 4: Assertion, exercise, defence of legal claims
Purpose 5: Advertising and customer care

 

Why are we allowed to process the data

We may process your data because these legal bases exist:

– for the purpose „Fulfilment of the purchase and delivery contract“ is the legal basis Art. 6 I lit. b) GDPR
– for the purpose „Internal administration“ is the legal basis Art. 6 I lit. f) GDPR
– for the purpose „Fulfilment of storage obligations“ is the legal basis Art. 6 I lit. c) GDPR, § 257 I, IV, V HGB, § 147 I, III, IV AO, § 14b UStG
– for the purpose „Assertion, exercise, defence of legal claims“ is the legal basis Art. 6 I lit. f) GDPR
– for the purpose „Advertising and customer care“ is the legal basis Art. 6 I lit. f) GDPR

 

Which of your data we process

We receive the data directly from you. We therefore process all data that you provide to us for the aforementioned purpose.
We receive data from third parties.
We process the following data:

– Name and contactdetails, Purchasing data such as goods on offer and goods purchased
– If necessary, bank data for bank collection
– If necessary, Creditworthiness data for purchase on account

 

Data transfer

We forward your data to the following recipients:

If necessary, Processor on behalf for settlement
If necessary. Processor on behalf of the accounting department
If necessary, Service provider for shipping

 

Transfer of data to a third country

We do not intend to transfer your data to a third country, i.e. a country in which the GDPR does not apply, or to an international organisation.

 

Duration of data storage

Your personal data will be stored for the duration specified below or the storage duration is based on the criteria specified below:

Data, relevant to the financial statements, shall be retained for a period of ten years. The period begins at the end of the calendar year which the data were collected (§ 257 Abs. 1, 4, 5 HGB, § 147 Abs. 1, 3, 4 AO).

Invoices must be kept for 10 years (§ 14b UStG).

Furthermore, the data will be stored for as long as is necessary to fulfil the contract (Art. 6 I b) DSGVO).

In addition, if our company has a legitimate interest in you, we will store the data for an indefinite period of time, e.g. to procure spare parts or to assert claims within the scope of the statute of limitations. This storage can be contradicted. In the event of objection, the data will be deleted immediately unless they are subject to a retention obligation or we have a predominant interest.

 

Information on the legitimate interest

We process your personal data because the processing is necessary to protect our legitimate interests or the legitimate interests of a third party. Your interest or fundamental rights and freedoms, which require the protection personal data, do not outweigh our interest.

The concrete interest pursued is:
The processing of data such as name and address as well as invoice data is necessary to pursue civil law claims.
Processing is also necessary in order to reorder spare parts.
Storage is required for customer care and advertising purposes.

You can object to the processing. If you file such an objection, we ask you to explain the reasons why wie should not process your personal data as we have done. In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

 

Your rights

You have the following rights with respect to personal data concerning you:
– the right of access (Details can be found in Article 15 of the GDPR),
– the right of rectifikation (Details can be found in Article 16 of the GDPR),
– the right of deletion (Details can be found in Article 17 of the GDPR),
– the right to limitation of processing (Details can be found in Article 18 of the GDPR),
– the right to data tranferability (Details can be found in Article 20 of the GDPR).

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf
Kavalleriestraße 2-4, 40213 Düsseldorf
Telefon: 0211 38424 – 0, Telefax: 0211 38424 – 10
E-Mail: poststelle@ldi.nrw.de, Internet: http://www.ldi.nrw.de

You may object to the processing based on a balancing of interests pursuant to Article 6 (1)lit.f). If you file an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis which we will continue the processing.

 

Origin of data

We have received your personal data from the following source(s): Scoring and payment behavior are supplied by credit agencies.

 

Automatic decisions making including profiling

There is no automatic decision making including profiling.

 

Necessity oft he data specification

The indication of the data by you is not legally prescribed.
The indication of the data by you is contractually prescribed.
You are required to enter the data in order to conclude a contract with us.
You are obliged to provide the personal data.

 

Anticipated consequences of non-delivery

Without the data, we cannot conclude a contract with the data subject. The person concerned will then not receive any benefits from us.

Amendments

Legal, economic and technical developments may make it necessary to adapt this data protection infomation. We will make the updated version available to you promptly on our website.