To fulfill our information obligations under Articles 12 et seq. of the General Data Protection Regulation (GDPR), we are pleased to provide you with the following information on data protection:
WHO IS RESPONSIBLE FOR DATA PROCESSING?
The controller within the meaning of data protection law is:
PEMA Vollkorn-Spezialitäten GmbH & Co. KG
Goethestraße 23
95163 Bad Weißenstadt
You can find further information about our company, details of the persons authorized to represent it, and additional contact options in the legal notice ("Impressum") on our website: https://www.pema.de
WHAT DATA OF YOURS DO WE PROCESS? AND FOR WHAT PURPOSES?
If we have received data from you, we will generally only process it for the purposes for which we received or collected it. Processing the data for other purposes will only be considered if the legal requirements pursuant to Art. 6 (4) GDPR are met in this respect. We will of course observe any information obligations under Art. 13 (3) GDPR and Art. 14 (4) GDPR in that case.
ON WHAT LEGAL BASIS IS THIS FOUNDED?
The legal basis for the processing of personal data is generally Art. 6 GDPR, unless there are specific legal provisions. In particular, the following options apply:
If personal data is processed based on your consent, you have the right to withdraw that consent at any time with effect for the future. If we process data based on a balancing of interests, you have the right, as a data subject, to object to the processing of personal data in accordance with the requirements of Art. 21 GDPR.
ARE THERE SPECIAL RULES FOR ONLINE MEETINGS, WEBINARS, OR CONFERENCE CALLS?
Please note our specific privacy notices regarding the conduct of online meetings or conference calls. We use the following tools for this purpose:
Microsoft Teams: You can find the privacy notices for MS Teams here.
HOW LONG IS THE DATA STORED?
We process the data for as long as necessary for the respective purpose, or for as long as statutory retention obligations exist — e.g., under commercial or tax law, or for audit security under GoBD (the German principles for proper bookkeeping and record-keeping) — in which case the relevant personal data is stored for the duration of the retention obligation. After the retention obligation has expired, we check whether further processing is still necessary. If there is no longer a need, the data is deleted.
As a general rule, we review data toward the end of each calendar year with regard to the need for further processing. Due to the volume of data, this review is carried out with respect to specific types of data or purposes of processing. Of course, you may at any time (see below) request information about the data stored about you, and, if there is no longer a need, request deletion of the data or restriction of processing.
TO WHICH RECIPIENTS IS THE DATA DISCLOSED?
Your personal data is generally only disclosed to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible on the basis of a balancing of interests pursuant to Art. 6 (1)(f) GDPR, if we are legally obligated to make the disclosure, or if you have given your consent to do so.
WHERE IS THE DATA PROCESSED?
Your personal data is processed by us exclusively within the Federal Republic of Germany or in data centers located within the Federal Republic of Germany.
YOUR RIGHTS AS A "DATA SUBJECT"
You have the right to information about the personal data we process concerning you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you confirming that you are the person you claim to be. You further have the right to rectification, erasure, or restriction of processing, insofar as you are legally entitled to this. You also have the right to object to processing within the scope of statutory provisions.
You also have a right to data portability within the framework of data protection requirements. In particular, you have a right to object under Art. 21 (1) and (2) GDPR to the processing of your data in connection with direct marketing, if this is based on a balancing of interests. We do not employ any processing based on automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
OUR DATA PROTECTION OFFICER
We have appointed a data protection officer within our company. You can reach them via the following contact options:
ITs Hein GmbH
Kulmbacher Str. 27b
95460 Bad Berneck
We expressly point out that when using this email address, the content is not exclusively received by our data protection officer alone. If you wish to exchange confidential information, we therefore ask you to first contact us via this email address to arrange direct contact with the data protection officer.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a supervisory authority for data protection regarding our processing of personal data.