Information regarding the collection of personal data
When you use our website, the protection of your personal data is very important to us. Below, we explain how we collect, process and use your personal data within our group of companies.
The controller responsible for the processing of this data is:
ASSMANN BÜROMÖBEL GMBH & CO. KG
49324 Melle, Germany
Contact person: Mr Reibeholz
Phone: 05422 706 0
Our company's data protection officer is Mr Claus Wissing. You can reach our external data protection officer at the following address:
Sachverständigenbüro Mülot GmbH
Grüner Weg 80
48268 Greven, Germany
Fax: +49-2571 5402 199
Information regarding the collection of personal data as per the GDPR specifically for...
1. General information regarding your rights
A "data subject" as per the EU General Data Protection Regulation (GDPR) is any natural person whose data is processed by the company or someone else on behalf of the company.
As a data subject, you have the following rights, on application:
- The right to obtain confirmation from us as to whether we process any data concerning you, and if so, the right to ask for information regarding the data we store as well as further, additional information about the purposes of the processing, the data categories, the data recipients, the retention period, the data origin, the use of automated decision-making and, if the data is transmitted to a country that does not belong to the European Union, the right to be informed about the appropriate guarantees, as well as the right to ask us to provide you with a copy of the stored data free of charge (Art. 15 GDPR)
- The right to the rectification of incorrect data (Art. 16 GDPR)
- The right to the erasure of the data, provided that no other legal basis for its retention applies (Art. 17 GDPR)
- The right to restrict the data processing to specific purposes (Art. 18 GDPR)
- The right to data portability (Art. 20 GDPR) and
- The right to object to the processing of your data (Art. 21 GDPR).
All data processing is only legal if it is permitted by law and the legal regulations are complied with. These consist of the EU General Data Protection Regulation in conjunction with the respective national laws. On request, we will inform you of the respective legal basis. We would like to explicitly point out that it is conceivable for the processing to be lawful on the basis of several, concurrently applicable laws.
If the processing of your data is consent-based, you have the right to withdraw your previously given consent at any time. Such a withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of your consent.
2. Separate information regarding your right to object in accordance with Article 21 GDPR
According to Art. 21 (1) GDPR, you have the right, for reasons resulting from your specific situation, to object at any time to the processing of personal data that concerns you and is processed on the basis of Article 6 (1) (f) of the GDPR (processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party).
If you object, we will no longer process your personal data, unless we can provide compelling and legitimate reasons for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
According to Art. 21 (2) GDPR, if your personal data is processed for direct marketing purposes, you have the right to object to its processing for the purposes of such marketing at any time.
3. Right to lodge a complaint
Finally, you have the right to approach the external data protection officer responsible for our company at any time to ask for their support or more information. This external data protection officer is legally obliged to maintain absolute confidentiality with regard to your request, in as far as this is related to the processing of your data, and provided you have not consented to the disclosure of this information.
Please see above for our data protection officer's contact details.
Furthermore, according to Art. 77 of the GDPR, you also have the right to lodge a complaint with a supervisory authority if you believe that the processing of the personal data relating to you does not comply with the GDPR. You may also contact your home country's data protection supervisory authority or, in Germany, the responsible supervisory authority of the federal state you live in. You can find an up to date overview of the contact details here: www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html
However, you can also contact the supervisory authority that is responsible for us directly:
State Representative for Data Protection in Lower Saxony
Prinzenstrasse 5, 30159 Hanover, Germany
Phone: +49 (0511) 120 45 00
4. Transmission and international aspects
Under consideration of the legal regulations regarding the processing of personal data, ASSMANN BÜROMÖBEL GMBH & CO KG may use authorised processors as per Art. 4 (10) of the GDPR for the processing of some of the personal data. A transfer to and processing of the data by such authorised processors does therefore not represent a transmission as per Art. 4 (2) GDPR. Otherwise, the data will only be transmitted to third parties for the legally permitted purposes.
ASSMANN BÜROMÖBEL GMBH & CO. KG has agreed a service contract with each of the authorised processors that meets the requirements of Art. 28 GDPR.
5. Data retention period
The personal data collected by us will be retained until the end of the retention period stipulated by law and subsequently erased, particularly if we are legally obliged to this retention and documentation for tax and commercial law reasons (German commercial code (HGB), German criminal code (StGB) or German fiscal code (AO)) as per Article 6 (1) (1c) of the GDPR, or if the employment law regulations oblige us to store the data for a longer period, or if you have consented to its storage for a longer period as per Art.6 (1) (1a) of the GDPR.
Unless we are obliged to its retention as described above, the data will be erased when the purpose for which it was collected no longer applies.