TRANSPARENT INFORMATION

ACCORDING TO ART. 12 GDPR

We are aware of the importance of the personal data that you entrust to us. We see it as one of our most important tasks to ensure the confidentiality of your data.
In accordance with the General Data Protection Regulation (GDPR), we would like to comply with our duty to provide information when collecting personal data and inform you transparently about the type, scope and purpose of the personal data we collect and inform you of the rights to which you are entitled.

1. CONTACT DETAILS OF THE PERSON IN CHARGE FOR PROCESSING

In charge within the meaning of the General Data Protection Regulation is:
Aliseo GmbH
Leutkirchstraße 63
77723 Gengenbach
Phone: +49 (0) 7803 60279 0
Email: datenschutz@aliseo.de

The following person has been appointed as data protection officer:
Mr. Stephan Hartinger
Coseco GmbH
Phone: +49 (0) 8232 80988 70
Email: datenschutz@coseco.de

2. WHICH SOURCES ARE USED TO COLLECT PERSONAL DATA?

We process personal data that we receive directly from our customers as part of our business relationship. We also process personal data that we have received from other companies, e.g. to execute orders, to fulfill contracts or on the basis of your consent.

Personal data relevant to us may be

• company
• first name
• last name
• street
• postcode/location
• e-mail
• phone

In addition, it may be necessary to collect the date of birth as part of funded projects.

2.1. NEW CUSTOMER ACQUISITION

In order to carry out customer acquisition, we process personal data that we have legitimately obtained from publicly accessible sources (e.g. commercial and association registers, media, social networks, internet) and are permitted to process.

2.2 CUSTOMER CONTACT INFORMATION

As part of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts initiated by you or by one of our employees, further personal data is generated, e.g. information about the contact channel, date, occasion and result; (electronic) copies of correspondence and information about participation in direct marketing measures.

2.3 TRADE FAIRS/EVENTS

As part of a trade fair/event, we collect data (form of address, title, surname, first name, company, street, zip code, city, e-mail, industry information if applicable), which we use for the purpose individually agreed with you.

2.4 CREDIT REPORT

Business creditworthiness documents: income/surplus statements, balance sheets, business analysis, type and duration of self-employment. We also process data that we have legitimately received from a credit agency for the purpose of obtaining a credit report.

3. WHAT ARE YOUR DATA PROCESSED FOR (PURPOSES) AND ON WHAT LEGAL BASIS?

We process the aforementioned personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

When processing personal data for which we obtain the consent of the data subject, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

Art. 6 para. 1 lit. b) GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This provision also includes processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1, lit. c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.

4. DISCLOSURE OF DATA TO THIRD PARTIES

Within our company, only those persons and departments receive your personal data that need it to fulfill our contractual and legal obligations.

We transmit data to third parties if we need it to fulfill a contractual obligation.

In addition, we transmit data to third parties if there is a legal obligation to do so. This is the case if state institutions (e.g. authorities and offices) request information in writing, a court order exists or a legal basis permits the transfer.

Further transmission to third parties may take place within the framework of the contractual relationship with the respective dealers worldwide.

5. TRANSFER OF DATA TO THIRD COUNTRIES

We transfer personal data to service providers or companies in our group of companies outside the European Economic Area in the following countries:

• USA

The level of data protection is guaranteed as follows:

• Confirmation of the appropriate level of data protection by the EU Commission
• EU standard contractual clauses
• Binding internal company data protection regulations

6. DURATION OF DATA STORAGE/DELETION PERIODS

We process and store your personal data for as long as it is necessary for the fulfillment of our contractual obligations and for all other purposes mentioned under point 3 or as provided for by the retention periods stipulated by law.

If the data is no longer required for the fulfillment of contractual or legal obligations, it will be regularly blocked for further processing or deleted in accordance with the statutory provisions.

7. DATA PROTECTION RIGHTS OF THE DATA SUBJECT

If you have any questions about your personal data, you can contact us in writing at any time.

You have the following rights under the GDPR:

The right of access (subsection Art. 15 GDPR)
The right to rectification (Art. 16 GDPR)
The right to erasure (Art. 17 GDPR)
The right to restriction (Art. 18 GDPR)
The right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG)
Right to withdraw consent under data protection law (Art. 7 (3) GDPR)

8. LEGAL OR CONTRACTUAL REQUIREMENTS FOR THE PROVISION OF PERSONAL DATA AND POSSIBLE CONSEQUENCES OF NON-PROVISION

We hereby point out that the provision of personal data is required by law in certain cases (e.g. tax regulations) or may result from a contractual provision (e.g. details of the contractual partner). For example, in order to conclude a contract, it may be necessary for the data subject/contractual partner to provide their personal data so that we can process their request (e.g. order). An obligation to provide personal data arises above all when concluding a contract. If no personal data is provided in this case, the contract cannot be concluded with the data subject. Before personal data is provided by the data subject, the data subject can contact our data protection officer or the data controller. The data protection officer or the controller will then clarify to the data subject whether the provision of the required personal data is required by law or contract or is necessary for the conclusion of the contract and whether there is an obligation to provide the personal data arising from the data subject’s concerns or what the consequences are for the data subject if the requested data is not provided.

9. LEGAL EXISTENCE OF AUTOMATED DECISION-MAKING (INCLUDING PROFILING)

As a responsible company, we do not use automated decision-making or profiling in our business relationships.