General information obligation according to Art. 13, 14 DSGVO for customers
1. Who is responsible for data processing and who can you contact?
Company: LuxTek GmbH
Adress: Prof.-Pirlet-Str. 7, 66679 Losheim am See (Niederlosheim)
Phone: +49 (0) 6872 9 65 39 11
Fax: +49 (0) 6872 9 65 39 10
E-Mail: info@luxtek.eu
Our data protection officer can be contacted at the above address, in the name of the data protection officer, or at datenschutzbeauftragter@luxtek.eu.
2. Processing purposes and legal basis
Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and other relevant data protection regulations. Our contractual documents, forms, consent forms and the other information provided to you (e.g. the website or the terms and conditions) can provide you with further details and supplements on the purposes of processing.
2.1 Consent (Art. 6 para. 1 letter a) DSGVO)
If you have given us consent to process personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke consent at any time with effect for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by this.
2.2 Fulfillment of contractual obligations (Art. 6 para. 1 letter b) DSGVO)
We process your personal data to the extent necessary to provide the contractual services. We require the data for the execution of the contract.
2.3 Fulfillment of legal obligations (Art. 6 para. 1 letter c) DSGVO)
We process your personal data when necessary to comply with the following legal obligations:
– Control and reporting obligations under tax law
– enforcement of civil law claims
– other official or judicial measures
3. categories of personal data that we process
The following data are processed:
– Name, first name
– Contact details (such as e-mail address, postal address, telephone number)
– VAT ID
– Tax number
– Bank and payment details
– Order history
4. Who receives your data?
We share your personal information with the following entities:
– Processors used by us (Art. 28 DSGVO).
– Service providers for supporting activities and other data controllers within the meaning of the DSGVO, in particular in the areas of IT services, logistics, courier services, printing services, external data centers, support/maintenance of IT applications, archiving, document processing, accounting and controlling, data destruction, purchasing/procurement, customer management, letter stores, marketing, telephony, website management, tax consultancies, auditing services, credit institutions, insurance companies
– Public authorities and institutions in the event of a legal or official obligation requiring us to provide information, report or pass on data, or if passing on data is in the public interest.
– Offices and institutions on the basis of our legitimate interest or the legitimate interest of the third party (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, appraisers, affiliated companies and committees and supervisory bodies)
– other parties for whom you have given us your consent to the transfer of data
5. Transfer of your data to a third country or an international organization
A transfer of your data to countries outside the EU or EEA (third countries) does not take place and is not planned.
6. How long do we store your data?
We store personal data for as long as it is required for the execution of the respective order or – insofar as your personal data is subject to statutory retention obligations or is part of documents subject to statutory retention obligations – for the duration of the statutory retention period.
Ultimately, the storage period is also assessed according to statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code, can generally be three years, but in certain cases can also be up to 30 years.
7. To what extent is there automated decision-making in individual cases (including profiling)?
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is permitted by legislation of the Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
(3) is done with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases mentioned in (1) and (3), we take reasonable measures to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.
8. Your data subject rights
You have the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR.
In accordance with Article 21 of the GDPR, you have the right to object to the processing of personal data by us. However, this right to object only applies in very special circumstances of your personal situation, whereby rights of our company may conflict with your right to object.
9. Scope of your obligations to provide us with your data
You only need to provide the data that is required to process offers and orders or that we are legally obligated to collect. Without this data, we cannot conclude or execute the contract with you.
If we request additional data from you, you will be informed separately that the information is voluntary.
10. Your right to complain to the competent supervisory authority
You have a right of appeal to the data protection supervisory authority (Art. 77 DSGVO). The supervisory authority responsible for us is:
Independent Data Protection Center Saarland
Fritz-Dobisch-Strasse 12
66111 Saarbrücken
