Principles of data processing at GFI Informationsdesign GmbH
You have come to this page via a link because you want to find out more about how we handle (your) personal data. In order to fulfil our information obligations in accordance with Art. 12 et seq. of the General Data Protection Regulation (GDPR), we would like to present you with the following information about data protection:
Who is responsible for data processing?
Responsible in the sense of the data protection law is:
GFI Informationsdesign GmbH
Benderstr. 31
77815 Bühl
You will find further information about our company, details of the persons authorised to represent us and also other contact options in the imprint of our website: Impressum (kiag.net) " class="linkExtern" target="_blank">Imprint
Which of your data do we process? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes can only be considered if the necessary legal requirements in accordance with Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is generally – unless there are specific legal provisions – Art. 6 GDPR. In particular, the following options are considered:
If personal data is processed on the basis of your consent, you have the right to withdraw your consent to us at any time with effect for the future.
If we process data on the basis of a legitimate interest, you as the data subject have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.
How long will the data be stored?
We process the data for as long as it is necessary for the respective purpose.
Insofar as there are statutory retention obligations – e.g. in commercial law or tax law – the personal data in question will be stored for the duration of the retention period. After expiry of the retention period, it will be checked whether there is any further necessity for the processing. If there is no longer a necessity, the data will be deleted.
As a general rule, towards the end of a calendar year, we carry out a review of data with regard to the need for further processing. Due to the amount of data, this check is carried out with regard to specific types of data or purposes of processing.
Of course, you can request information about the data we have stored about you at any time (see below) and, in the event of a non-existent necessity, request the deletion of the data or restriction of processing.
To which recipients will the data be disclosed?
As a matter of principle, your personal data will only be passed on to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible on the basis of a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, if we are legally obliged to do so or if you have given your consent in this respect.
Where is the data processed?
Your personal data will be processed by us exclusively in data centers in the Federal Republic of Germany.
Your rights as a "data subject"
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require you to provide evidence proving that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to this.
Furthermore, you have the right to object to the processing within the framework of the legal requirements. There is also a right to data portability within the framework of data protection regulations.
In particular, you have the right to object in accordance with Art. 21 (1) and (2) GDPR to the processing of your data in connection with direct marketing if this is carried out on the basis of a legitimate interest.
Our Data Protection Officer
We have appointed a data protection officer in our company. You can reach our data protection officer using the following contact options:
GFI Informationsdesign GmbH
– Datenschutzbeauftragter –
Benderstr. 31
77815 Bühl
E-Mail: dsb@gfi.net
Right to lodge a complaint
You have the right to complain about our processing of personal data to a data protection supervisory authority.
As of: 18.12.2018
You have come to this page via a link because you want to find out more about how we handle (your) personal data. In order to fulfil our information obligations in accordance with Art. 12 et seq. of the General Data Protection Regulation (GDPR), we would like to present you with the following information about data protection:
Who is responsible for data processing?
Responsible in the sense of the data protection law is:
GFI Informationsdesign GmbH
Benderstr. 31
77815 Bühl
You will find further information about our company, details of the persons authorised to represent us and also other contact options in the imprint of our website: Impressum (kiag.net) " class="linkExtern" target="_blank">Imprint
Which of your data do we process? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes can only be considered if the necessary legal requirements in accordance with Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is generally – unless there are specific legal provisions – Art. 6 GDPR. In particular, the following options are considered:
- Consent (Art. 6 para. 1 lit. a) GDPR)
- Data processing for the fulfilment of contracts (Art. 6 para. 1 lit. b) GDPR
- Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
- Data processing for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c) GDPR)Einwilligung (Art. 6 Abs. 1 lit. a) DSGVO)
If personal data is processed on the basis of your consent, you have the right to withdraw your consent to us at any time with effect for the future.
If we process data on the basis of a legitimate interest, you as the data subject have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.
How long will the data be stored?
We process the data for as long as it is necessary for the respective purpose.
Insofar as there are statutory retention obligations – e.g. in commercial law or tax law – the personal data in question will be stored for the duration of the retention period. After expiry of the retention period, it will be checked whether there is any further necessity for the processing. If there is no longer a necessity, the data will be deleted.
As a general rule, towards the end of a calendar year, we carry out a review of data with regard to the need for further processing. Due to the amount of data, this check is carried out with regard to specific types of data or purposes of processing.
Of course, you can request information about the data we have stored about you at any time (see below) and, in the event of a non-existent necessity, request the deletion of the data or restriction of processing.
To which recipients will the data be disclosed?
As a matter of principle, your personal data will only be passed on to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible on the basis of a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, if we are legally obliged to do so or if you have given your consent in this respect.
Where is the data processed?
Your personal data will be processed by us exclusively in data centers in the Federal Republic of Germany.
Your rights as a "data subject"
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require you to provide evidence proving that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to this.
Furthermore, you have the right to object to the processing within the framework of the legal requirements. There is also a right to data portability within the framework of data protection regulations.
In particular, you have the right to object in accordance with Art. 21 (1) and (2) GDPR to the processing of your data in connection with direct marketing if this is carried out on the basis of a legitimate interest.
Our Data Protection Officer
We have appointed a data protection officer in our company. You can reach our data protection officer using the following contact options:
GFI Informationsdesign GmbH
– Datenschutzbeauftragter –
Benderstr. 31
77815 Bühl
E-Mail: dsb@gfi.net
Right to lodge a complaint
You have the right to complain about our processing of personal data to a data protection supervisory authority.
As of: 18.12.2018