§5 DDG: Information Requirements Pursuant to Art. 13 of the GDPR

The protection of your personal data is of particular importance to us. We therefore process your personal data (referred to as “data” for short) exclusively in accordance with legal requirements. With this Privacy Policy, we aim to provide you with comprehensive information about how your data is processed within our company and about your rights under data protection law, in accordance with Article 13 of the European General Data Protection Regulation (EU GDPR).
 

1. Who is responsible for data processing, and who can you contact?

The controller is:

IGZ Ingenieurgesellschaft für logistische Informationssysteme mbH
Logistikweg 1
95685 Falkenberg
Phone: 09637 92920
Email: info@igz.com

The company’s data protection officer is:

Matthias Haßler (LL.M.)
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Email: anfragen@projekt29.de
Phone: 0941-2986930

 

2. What data is processed, and from what sources does this data originate?

We process the data we have received from you in connection with the initiation or fulfillment of a contract, based on your consent, or in connection with your job application or your employment with us.

 

Personal data includes:

Your basic/contact information; for customers, this includes, for example, first and last name, address, contact information (email address, phone number, fax), and bank information.
For applicants and employees, this includes, for example, first and last name, address, contact information (email address, phone number, fax), date of birth, information from resumes and employment references, bank details, religious affiliation, and photographs.
For business partners, this includes, for example, the names of their legal representatives, company name, commercial register number, VAT ID number, business registration number, address, contact person’s contact information (email address, phone number, fax), and bank details.
For visitors to our company, this includes first and last name.
For journalists, this includes first and last name, email address, and fax number.

In addition, we also process the following other personal data:

  • Information regarding the type and content of contract data, order data, sales and transaction data, customer and supplier history, as well as consulting documents,
  • advertising and sales data,
  • information from your electronic communications with us (e.g., IP address, login data),
  • other data we have received from you in the course of our business relationship (e.g., in customer meetings),
  • data that we generate ourselves from master/contact data and other data, such as through customer needs and customer potential analyses,
  • documentation of your consent to receive, for example, newsletters,
  • Photographs taken during events.

 

3. For what purposes and on what legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act of 2018, as amended:

  • to fulfill (pre-)contractual obligations (Art. 6(1)(b) GDPR):
  • Your data is processed for the purpose of contract fulfillment online or at our company headquarters, as well as for the contract fulfillment of your employees within our company. In particular, the data is processed during the initiation of business relations and during the execution of contracts with you.
  • To fulfill legal obligations (Art. 6(1)(c) GDPR):
  • Processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g., under the German Commercial Code or the German Fiscal Code.
  • To protect legitimate interests (Art. 6(1)(f) GDPR):
  • Based on a balancing of interests, data processing may take place beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Data processing to protect legitimate interests occurs, for example, in the following cases:
    • Advertising or marketing (see No. 4),
    • Measures for business management and the further development of services and products;
    • Maintaining a company-wide customer database to improve customer service
    • in the context of legal proceedings
    • Sending non-promotional information and press releases.
  • within the scope of your consent (Art. 6(1)(a) GDPR):
    If you have given us consent to process your data, e.g., to send you our newsletter or publish photos.


4. Processing of Personal Data for Advertising Purposes

You may object at any time to the use of your personal data for advertising purposes, either in full or with respect to individual measures, without incurring any costs other than the transmission costs according to the standard rates.

We are entitled, under the legal requirements of Section 7(3) of the German Unfair Competition Act (UWG), to use the email address you provided upon entering into a contract for direct marketing of our own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter.
If you do not wish to receive such recommendations from us via email, you may object to the use of your email address for this purpose at any time without incurring any costs other than the standard transmission fees. A written notice is sufficient for this purpose. Of course, every email also contains an unsubscribe link.

 

5. Who receives my data?

Even when we engage a service provider for data processing, we remain responsible for the protection of your data. All data processors are contractually obligated to treat your data confidentially and to process it only to the extent necessary to provide their services. The data processors we engage receive your data to the extent that they need it to fulfill their respective services. These include, for example, IT service providers we require for the operation and security of our IT system, as well as advertising and address publishers for our own promotional campaigns.
This data is made available to our sister companies to the extent necessary for contract fulfillment.
In the event of a legal obligation or in the context of legal proceedings, government agencies, courts, and external auditors may be recipients of your data.
In addition, insurance companies, banks, credit bureaus, and service providers may be recipients of your data for the purpose of initiating and fulfilling contracts.

 

6. How long will my data be stored?

We process your data until the business relationship ends or until the applicable statutory retention periods expire (such as those under the German Commercial Code, the German Fiscal Code, or the Working Hours Act); and beyond that, until the resolution of any legal disputes in which the data is required as evidence.

 

7. Is personal data transferred to a third country?

As a general rule, we do not transfer any data to a third country. In individual cases, a transfer will only take place on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards, or your explicit consent.

 

8. What data protection rights do I have?

You have the right at any time to access, correct, delete, or restrict the processing of your stored data, the right to object to the processing, as well as the right to data portability and the right to file a complaint in accordance with the provisions of data protection law.

 

Right of Access:
You may request information from us regarding whether and to what extent we process your data.

 

Right to rectification:
If we process your data that is incomplete or inaccurate, you may request that we rectify or complete it at any time.

 

Right to erasure:
You may request that we erase your data if we are processing it unlawfully or if the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons that prevent immediate erasure, such as legally mandated retention obligations.
Regardless of whether you exercise your right to erasure, we will erase your data promptly and in full, provided that no contractual or statutory retention obligations prevent us from doing so.

 

Right to Restriction of Processing:
You may request that we restrict the processing of your data if

  • you contest the accuracy of the data, for a period that allows us to verify the accuracy of the data.
  • the processing of the data is unlawful, but you object to erasure and instead request a restriction on the use of the data,
  • we no longer need the data for the intended purpose, but you still need it to assert or defend legal claims, or
  • you have objected to the processing of the data.

 

Right to Data Portability:
You may request that we provide you with the data you have provided to us in a structured, commonly used, and machine-readable format and that you be able to transmit this data to another data controller without hindrance from us, provided that

  • we process this data based on your revocable consent or to fulfill a contract between us, and
  • such processing is carried out using automated means.

If technically feasible, you may request that we transfer your data directly to another data controller.

 

Right to Object:
If we process your data based on a legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

 

Right to File a Complaint:
If you believe that we are violating German or European data protection law in the processing of your data, please contact us so that we can clarify any questions. You also have the right, of course, to contact the supervisory authority responsible for you, namely the respective State Office for Data Protection Supervision.
If you wish to exercise any of the aforementioned rights with us, please contact our Data Protection Officer. In case of doubt, we may request additional information to verify your identity.

 

9. Am I required to provide data?

The processing of your data is necessary for the conclusion or fulfillment of the contract you have entered into with us. If you do not provide us with this data, we will generally have to refuse to enter into the contract or will no longer be able to perform an existing contract and will consequently have to terminate it. However, you are not obligated to give your consent to the processing of data that is not relevant to the performance of the contract or not required by law.