Data protection information pursuant to articles 13 and 14 GDPR

For our business partner

The information below is designed to give you an overview of the personal data we process and to provide you with information on your rights under data protection law.

Controller for data processing and contact details for the data protection officer

burster praezisionsmesstechnik gmbh & co. kg
Talstr. 1-5
76593 Gernsbach, Germany
Telefon: +49-7224-645-0
Telefax: +49-7224-645-88

Data protection officer:
xDSB Datenschutz
"der Datenschutzbeauftragte"
Greschbachstr. 6a
76229 Karlsruhe, Germany

Which sources does the personal data originate from?

We process personal data which we have obtained from business relationships (e.g. with customers or suppliers) or from inquiries sent to our company. We generally receive this data directly from the contractual partner or from an individual making an inquiry. Personal data can, however, also originate from public sources (e.g. commercial registers), provided that the processing of this data is permissible. Data may also have been legitimately transmitted to us from other companies. Depending on the case in question, we also store our own information on this data (e.g. as part of an ongoing business relationship).

Depending on the individual case, this may involve master data (e.g. name, address), contact details (e.g. telephone number, e-mail address), contract and billing data to fulfill our contractual obligations or data required to process an inquiry, in some cases also creditworthiness data, advertising and sales data and other data from comparable categories

For what purposes and on which legal basis is the personal data processed?

We process personal data in accordance with the data protection legislation, in particular the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

a.) For the performance of a contract or for the implementation of pre-contractual measures (Article 6 (1) sentence 1b GDPR)

We process personal data primarily to fulfill contractual obligations and to provide the related services or within the context of a corresponding contract initiation process (e.g. contractual negotiations, preparation of offers). The specific purposes are determined by the individual service or product to which the business relationship or contract initiation process relates.

b.) To fulfill a legal obligation (Article 6 (1) sentence 1c GDPR)

In many situations, we are required by law to collect certain pieces of personal data from you and to disclose it or make it available to certain – usually public – entities.

For example, we provide the tax authorities with the personal data required to calculate tax in accordance with the relevant statutory requirements.

c.) Based on the weighing up of interests (Article 6 (1) sentence 1f GDPR)

We also collect and process personal data to safeguard legitimate interests in the following situations:

  • Processing of general inquiries about our products and services
  • Checking creditworthiness using corresponding credit agencies to assess the default risk associated with business relationships
  • Advertising or market research
  • Assertion of legal claims and defense in legal disputes
  • Ensuring IT operations and IT security
  • Measures for building and system security (e.g. access controls)
  • Measures to improve our internal business processes and product optimization measures

d.) Based on consent (Article 6 (1) sentence 1a GDPR)

In some situations, the processing of your personal data is not absolutely necessary and is only permitted with your consent. In these cases, we point this out to you, also pointing out, in particular, that the granting of your consent is voluntary and that it may be revoked at any time with effect for the future.

This is the case, for example, with

  • certain data processing operations via our website (see privacy policy on our website)
  • some situations relating to advertising (advertising consent has been granted, if required by law)

Recipients of personal data

In general, the company only grants access to your data to those entities that have to work with your data ("need-to-know principle"), i.e. require access to this data to fulfill a contractual or legal obligation. These can also include service providers and vicarious agents that are acting on behalf of the company and/or obliged to process the data in a confidential manner.

In certain situations, we may transmit your information to

  • public authorities (e.g. tax authorities) where there is a legal obligation to do so
  • other companies within the context of the execution of the contractual relationship, based on the weighing up of interests or on the basis of your consent. In individual cases, and depending on the business relationship or order, these may include, for example, companies, logistics partners, marketing service providers, credit agencies, banks, tax consultants or lawyers involved in the provision of our services.

Will data be transmitted to a third country or an international organization?

We transfer personal data to other locations in countries outside the European Union (third country), insofar as this is necessary for the implementation of the business relationship, or if this is required by law or you have granted us your consent to do so.

In certain situations, we use, or reserve the right to use, service providers that may either have their registered office in a third country or may, in turn, use service providers with their registered office in a third country.

According to Article 45 GDPR, a transfer of data to a third country is permissible if the European Commission has decided that there is an adequate level of protection in a third country. In the absence of such a decision, data may be transferred to a third country if the controller has provided appropriate safeguards (e.g. standard data protection clauses issued by the European Commission) and enforceable rights and effective remedies are available to the data subject (Article 46 GDPR).

As a matter of principle, we only work with entities in a third country that meet the criteria listed.

Data storage period

We process and store your personal data for as long as is necessary in order to fulfill our contractual and statutory obligations. If the storage of personal data is no longer necessary to fulfill these obligations, the data will be deleted unless there are statutory retention obligations, e.g. commercial and tax law retention obligations under the German Tax Code (Abgabenordnung) and the German Commercial Code (Handelsgesetzbuch) (6 or 10 years) and for the preservation of evidence within the context of the statutory statute of limitations.

Rights of data subjects

You have the following rights with respect to us regarding personal data that pertains to you:


  • Right to information
  • Right to correction or deletion
  • Right to restrict the processing
  • Right to object to the processing
  • Right to data portability

Moreover, you have the right to complain to a data protection supervisory authority about our processing of your personal data.

You also, however, have the option of contacting our company data protection officer (also in confidence).

If you have submitted declarations of consent to us (Article 6 (1) sentence 1a GDPR), you can revoke them at any time with future effect.

If we base the processing of your personal data on the weighing up of interests (Article 6 (1) sentence 1f GDPR), you can object to the processing. When you make such an objection we request that you state the reasons why we should not process your personal data as we do. If your objection is justified, we will review the circumstances and either discontinue or adjust the data processing or notify you of our compelling reasons that merit protection, on the basis of which we will continue processing.

You can object to the processing of your personal data for purposes of advertising at any time.

Obligation to provide data 

Within the context of the execution or initiation of a contract, you must provide the personal data necessary for the performance of the contract or the implementation of pre-contractual measures, and for the associated obligations. You must also provide the personal data that we are legally required to collect. We will not be able to enter into or perform a contract with you if this information is not provided.


Where data is collected based on consent, the provision of data by you is voluntary and not mandatory. If, however, you do not give your consent, we will not be able to provide the services based on data processing by way of consent. You are free to revoke consent that you have granted with future effect at any time.

Does automated decision-making or profiling take place?


Product Inquiry

    Product comparison

      © 2024 // burster präzisionsmesstechnik gmbh & co kg
      nach oben