Data protection information according to Art. 13 and 14 GDPR

For our business partners

The following information is intended to provide you with an overview of the personal data we process and to inform you of your rights under data protection laws

Person responsible for data processing and contact details of the data protection officer

burster präzisionsmesstechnik gmbh & co. kg
Talstraße 1-5
76593 Gernsbach
E-mail: info@burster.de
Telephone: (+49) 07224-645-0
Fax: (+49) 07224-645-88Data protection officer:
xDSB Data Protection
"the data protection officer"
Greschbachstr. 6a
76229 Karlsruhe
E-mail: datenschutzanfragenxdsb.de

From which sources does the personal data originate?

We process personal data that we have obtained from business relationships (e.g. with customers or suppliers) or enquiries to our company. As a rule, we receive this data directly from the contractual partner or an enquiring person. However, personal data may also originate from public sources (e.g. commercial register), provided that the processing of this data is authorised. Data may also have been legitimately transmitted to us by other companies. Depending on the individual case, we may also store our own information (e.g. as part of an ongoing business relationship), which may include master data (e.g. name, address), contact data (e.g. telephone number, email address), contract and billing data to fulfil our contractual obligations or data required to process an enquiry, as well as creditworthiness data, advertising and sales data and other data from comparable categories

For what purposes and on what legal basis is personal data processed?

We process personal data in compliance with data protection laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). a.) In the context of the fulfilment of a contract or for the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR) We process personal data primarily for the fulfilment of contractual obligations and the provision of the associated mechanical services or in the context of the initiation of a contract according to the GDPR (e.g. contract negotiations, preparation of offers). The specific purposes depend on the respective mechanical service or product to which the business relationship or contract initiation relates. b.) In the context of the fulfilment of a legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) In many situations, we are obliged by law to collect certain personal data from you and to forward or make it available to certain - usually public - bodies.

For example, we provide the tax authorities with the personal data required therefor in accordance with the relevant legal requirements for the purpose of tax calculation. c.) In the context of the balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR) We also collect and process personal data to safeguard legitimate interests in the following situations

Processing general enquiries about our products and mechanical services
Checking creditworthiness via credit agencies according to credit agencies to assess the risk of default in business relationships
Advertising or market research
Assertion of legal claims and defence in legal disputes
Ensuring IT operations and IT security
Measures for building and system security (e.g. access authorisations)
Measures to improve our internal business processes and product optimisation

d.) In the context of consent (Art. 6 para. 1 sentence 1 lit. a GDPR) In some situations, the processing of your personal data is not mandatory and is only permitted with your consent. In these cases, we draw your attention to this fact, in particular to the voluntary nature of giving consent and the possibility of revoking it at any time with effect for the future. This is the case, for example, with

some data processing via our website (see privacy policy on our website)
in some advertising situations (existence of advertising consent, if required by law)

Recipients of the personal data

In general, the company only grants access to your data to entities that need to work with your data ("need-to-know principle"), i.e. require access to this data to fulfil a contractual or legal obligation. These may also be service providers and vicarious agents acting on behalf of the company and/or who have been obliged to process the data confidentially.

In certain situations, we transmit your data to

public authorities (e.g. tax authorities) if there is a legal obligation to do so
other companies as part of the implementation of the contractual relationship, as part of a balancing of interests or on the basis of your consent. Depending on the business relationship or order, these may be, for example, companies involved in the provision of our mechanical services, logistics partners, marketing service providers, credit agencies, banks, tax consultants or lawyers.

Is data transferred to a third country or an international organisation?

We transfer personal data to other organisations in countries outside the European Union (third country) if this is necessary to carry out the business relationship, if it is required by law or if you have sourced your consent to do so. In certain situations, we use or reserve the right to use service providers who may either be based in a third country or who may in turn have service providers based in a third country.

Data transfer to a third country is permitted under Art. 45 GDPR if the European Commission has decided that an adequate level of protection exists in a third country. In the absence of such a decision, data transfer to a third country is permitted if the controller has provided appropriate safeguards (e.g. standard data protection clauses issued by the European Commission) and the data subject has enforceable rights and effective legal remedies (Art. 46 GDPR).

As a matter of principle, we only work with entities in a third country that fulfil the criteria listed

Storage duration of the data

We process and store your personal data for as long as is necessary for the fulfilment of our contractual and legal obligations. If the storage of personal data is no longer required to fulfil these obligations, it will be deleted, unless there are statutory retention obligations, such as commercial and tax retention obligations under the German Fiscal Code and the German Commercial Code (6 or 10 years) and for the preservation of evidence within the framework of statutory limitation periods

Rights of data subjects

You have the following rights with regard to the personal data concerning you

Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to the processing
Right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. However, you also have the option of contacting our company data protection officer (also confidentially). If you have given us your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), you can revoke this at any time with effect for the future.

Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR), you can object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing. You can object to the processing of your personal data for advertising purposes at any time.

Obligation to provide data

As part of the execution or initiation of a contract, you must provide the personal data required to fulfil the contract or to carry out pre-contractual measures and the associated obligations. You must also provide the personal data that we are legally obliged to collect. Without providing this data, we will not be able to conclude or fulfil a contract with you. In cases of data collection based on consent, the provision of data by you is voluntary and not mandatory. However, if consent is not given, we will not be able to provide the services or services based on data processing by means of consent. You can revoke your consent at any time with effect for the future, even after you have given it