Information regarding the collection of personal data
When you use our website, the protection of your personal data is very important to us. Below, we explain how we collect, process and use your personal data within our group of companies.
The controller responsible for the processing of this data is:
ASSMANN BÜROMÖBEL GMBH & CO. KG
49324 Melle, Germany
Contact person: Mr Reibeholz
Phone: +49 (0) 5422 706-0
Our company's data protection officer is Mr Claus Wissing. You can reach our external data protection officer at the following address:
Sachverständigenbüro Mülot GmbH
Grüner Weg 80
48268 Greven, Germany
Fax: +49-2571 5402 199
The representative for data protection in Switzerland can be reached at the following contact details:
c/o gbf Rechtsanwälte AG
Phone: 031 506 60 66
Information regarding the collection of personal data as per the GDPR specifically for...
1. General information regarding your rights
A "data subject" as per the EU General Data Protection Regulation (GDPR) is any natural person whose data is processed by the company or someone else on behalf of the company.
As a data subject, you have the following rights, on application:
- The right to obtain confirmation from us as to whether we process any data concerning you, and if so, the right to ask for information regarding the data we store as well as further, additional information about the purposes of the processing, the data categories, the data recipients, the retention period, the data origin, the use of automated decision-making and, if the data is transmitted to a country that does not belong to the European Union, the right to be informed about the appropriate guarantees, as well as the right to ask us to provide you with a copy of the stored data free of charge (Art. 15 GDPR)
- The right to the rectification of incorrect data (Art. 16 GDPR)
- The right to the erasure of the data, provided that no other legal basis for its retention applies (Art. 17 GDPR)
- The right to restrict the data processing to specific purposes (Art. 18 GDPR)
- The right to data portability (Art. 20 GDPR) and
- The right to object to the processing of your data (Art. 21 GDPR).
All data processing is only legal if it is permitted by law and the legal regulations are complied with. These consist of the EU General Data Protection Regulation in conjunction with the respective national laws. On request, we will inform you of the respective legal basis. We would like to explicitly point out that it is conceivable for the processing to be lawful on the basis of several, concurrently applicable laws.
If the processing of your data is consent-based, you have the right to withdraw your previously given consent at any time. Such a withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of your consent.
2. Separate information regarding your right to object in accordance with Article 21 GDPR
According to Art. 21 (1) GDPR, you have the right, for reasons resulting from your specific situation, to object at any time to the processing of personal data that concerns you and is processed on the basis of Article 6 (1) (f) of the GDPR (processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party).
If you object, we will no longer process your personal data, unless we can provide compelling and legitimate reasons for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
According to Art. 21 (2) GDPR, if your personal data is processed for direct marketing purposes, you have the right to object to its processing for the purposes of such marketing at any time.
3. Right to lodge a complaint
Finally, you have the right to approach the external data protection officer responsible for our company at any time to ask for their support or more information. This external data protection officer is legally obliged to maintain absolute confidentiality with regard to your request, in as far as this is related to the processing of your data, and provided you have not consented to the disclosure of this information.
Please see above for our data protection officer's contact details.
Furthermore, according to Art. 77 of the GDPR, you also have the right to lodge a complaint with a supervisory authority if you believe that the processing of the personal data relating to you does not comply with the GDPR. You may also contact your home country's data protection supervisory authority or, in Germany, the responsible supervisory authority of the federal state you live in. You can find an up to date overview of the contact details here: www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html
However, you can also contact the supervisory authority that is responsible for us directly:
State Representative for Data Protection in Lower Saxony
Prinzenstrasse 5, 30159 Hanover, Germany
Phone: +49 (0511) 120 45 00
4. Whistleblowing Hotline/Reporting Offices for Whistleblowers
We, ASSMANN BÜROMÖBEL GMBH & CO. KG, Heinrich-Assmann-Straße 11, D-49324 Melle, with our service provider, Sachverständigenbüro Mülot GmbH, Grüner Weg 80, 48268 Greven, acting on behalf of us as an “external reporting office” pursuant to the German Whistleblower Protection Act (Hinweisgeberschutzgesetz), process your data when a report is filed.
We process the data you provide to us in accordance with the stipulations of the law, complying with confidentiality requirements, in order to
- maintain contact with you
- check the report
- process the report
- launch follow-up measures (investigations) where necessary, and
- complete the process.
- These data may include
- your contact details
- the circumstances of the communication, and
- the reports
that you file to us. We only reveal the data pertaining your identity on the basis of your consent or an official regulation.
Information regarding persons who are the subject of the report is not disclosed, with reference to Section 29 of the BDSG (German Federal Data Protection Act).
Transferring to third countries or profiling pursuant to Article 4(4) of the GDPR (General Data Protection Regulation) is not envisaged. Insofar as data must be transferred to third countries within the context of investigations and implementation of measures, suitable guarantees shall be provided to comply with the data protection level pursuant to Articles 44 et seq. of the GDPR.
Regarding consent to disclosure of your identity, you shall have the right to withdraw your consent in the future. Such a withdrawal of consent may have negative consequences under certain circumstances, but this depends on the individual situation.
You shall have the right to rectification if you can prove to us that the data processed with regard to you are inaccurate.
You have the right to erasure of your data if they have been processed unlawfully.
Pursuant to the conditions stipulated in Article 18 of the GDPR, you have the right to obtain restriction of processing. This shall apply in particular to erasure if the data in question are required for the protection of your own legal interests.
You also have the right to lodge a complaint with the responsible supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Telephone: +49 (0)211/38424-0
Fax: +49 (0)211/38424-999
We process your data until we have finished processing the report, after which they are erased in compliance with data protection legislation.
5. Transmission and international aspects
Under consideration of the legal regulations regarding the processing of personal data, ASSMANN BÜROMÖBEL GMBH & CO KG may use authorised processors as per Art. 4 (10) of the GDPR for the processing of some of the personal data. A transfer to and processing of the data by such authorised processors does therefore not represent a transmission as per Art. 4 (2) GDPR. Otherwise, the data will only be transmitted to third parties for the legally permitted purposes.
ASSMANN BÜROMÖBEL GMBH & CO. KG has agreed a service contract with each of the authorised processors that meets the requirements of Art. 28 GDPR.
5. Data retention period
The personal data collected by us will be retained until the end of the retention period stipulated by law and subsequently erased, particularly if we are legally obliged to this retention and documentation for tax and commercial law reasons (German commercial code (HGB), German criminal code (StGB) or German fiscal code (AO)) as per Article 6 (1) (1c) of the GDPR, or if the employment law regulations oblige us to store the data for a longer period, or if you have consented to its storage for a longer period as per Art.6 (1) (1a) of the GDPR.
Unless we are obliged to its retention as described above, the data will be erased when the purpose for which it was collected no longer applies.