Information to be provided to customers and suppliers

Notification in accordance with Article 13 of the GDPR on customer and supplier data

STABILA takes the protection of your personal data very seriously. As a private company, we are subject to the European General Data Protection Regulation (GDPR) and regulations of the Federal Data Protection Act (BDSG). We have implemented technical and organisational measures to ensure that these provisions relating to data protection are observed by us and our external service providers.

Contact data for the controller

In the context of the European General Data Protection Regulation (GDPR), additional national data protection laws of the member states and other data protection regulations, the controller (hereinafter "STABILA") is:

STABILA Messgeräte Gustav Ullrich GmbH
Landauer Straße 45
76855 Annweiler am Trifels
Germany
Commercial Registration No.: Landau District Court HRB 3217
Tel: +49 (0)6346 3090
E-mail: datenschutz@de.stabila.com

The company is legally represented by its CEO, Dr Ulrich Dähne.

Contact data for data protection officer

CTM-COM GmbH
Marienburgstraße 27
64297 Darmstadt
Germany
Tel: +49 (0)6151 3942 71
E-mail: datenschutz@ctm-com.de

Scope and purpose of the processing of customer and supplier data

When a customer/supplier makes contact with us, the personal data of the customer/supplier (in the case of a company, the contact person's data) that we process is used to process the enquiry. Some data must be provided to enable us to respond to the enquiry. Without this data, an adequate response cannot be given. Personal data is only processed to the extent that is objectively necessary. With respect to contracts, the contractual, master and billing data of the contractual partner, such as name and address, are used for purposes such as addressing the invoices or delivery. STABILA will only process information required to carry out its business activities and to initiate or fulfil a contract.

Legal basis for the processing of personal data

STABILA only processes the personal data of customers and suppliers if the data subject has consented to this [Article 6 (1) (a) GDPR] or if necessary for the performance of a contract, to take steps prior to entering into a contract or for compliance with a legal obligation [Article 6 (1) (b) GDPR], or for the purposes of a legitimate interest [Article 6 (1) (f) GDPR].

Duration of storage

The personal data of customers and suppliers processed by STABILA is erased or made unavailable once there is no longer any reason to store the data and there is no legal obligation to retain it. Such an obligation may arise, for example, from the provisions of commercial and tax law and other legal provisions. Business documents must generally be retained for 6 to 10 years depending on the type of document.

Personal data of potential customers and suppliers who are not yet in a business relationship with STABILA is deleted after an enquiry has been fully answered, if no contract has been concluded as a result of the enquiry and no consent has been given to the continued storage of the data after the processing of the enquiry or if there is no legal obligation to retain the data.

Right to object

Customers and suppliers may object at any time to the processing of their personal data. In this case, the data is erased immediately unless there are legal obligations to retain it. Customers and suppliers may also revoke their consent at any time with future effect. Revoking this consent will impede the performance of a contract and/or steps prior to entering into a contract and mean that the relevant contact person can no longer be contacted.

To revoke your consent, please contact the controller:

Your rights

If you would like to know what personal data we have stored relating to you, we will inform you upon request as you have the right of access in accordance with Article 15 of the GDPR and Section 34 of the Federal Data Protection Act (BDSG).
If you inform us that personal data is incorrect, we must correct it. You have the right to rectification in accordance with Article 16 of the GDPR.
You have the right to have your personal data deleted in accordance with Article 17 of the GDPR and Section 35 of the Federal Data Protection Act (BDSG). You also have the right to restrict the processing of your personal data in accordance with Article 18 of the GDPR.
You have the right to object in accordance with Article 21 of the GDPR. Any consent to the processing of your personal data that you may have granted can be revoked at any time with effect for the future. If you inform us that you object to your personal data being processed, the lawfulness of processing based on your consent is not affected until you submit your objection.
You have the right to data portability in accordance with Article 20 of the GDPR.

In accordance with Article 13 (2) (d) of the GDPR, you also have the right to lodge a complaint with the relevant supervisory authority. The supervisory authority can be contacted at the address below:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz [State representative for data protection and freedom of information for Rhineland-Palatinate]
Postfach 3040, 55020 Mainz
Germany
Tel: +49 (0)6131 8920-0
E-mail: poststelle@datenschutz.rlp.de
Internet: https://www.datenschutz.rlp.de/de/startseite/