Introduction
We, SynFlex Elektro GmbH, Auf den Kreuzen 24, 32825 Blomberg, Germany, +49-5235-968-0, info@synflex.de, as the responsible body, would like to explain below which data we process and how.
Data protection officer
If you have any questions regarding data protection, please contact our data protection officer, Mr. Thomas Werning.
His contact details are:
werning.com GmbH, Dieselstraße 12, 32791 Lage, Germany, datenschutz@synflex.de, +49-5232-980-4700
With this mandatory data protection information, we, as the responsible body, fulfill our duty to inform in accordance with Art. 12-14 GDPR.
Information on data collection and processing
Below you will find information about which personal data, this is any data that identifies or makes you identifiable as a natural person (hereinafter "data subject"), is collected and processed.
These are for example:
Customer master data for the execution of the contract / fulfillment of the service, name, address, e-mail address, data in connection with payment processing, correspondence (e.g. correspondence or e-mail correspondence with you), advertising and sales data (e.g. to inform you about new potentially interesting offers by mail or, if you have given your consent, also by e-mail).
Data from contact initiations such as name, telephone number, e-mail address
Supplier data such as name, telephone number, e-mail address
Employee data such as name, address, bank data, religious affiliation
Personnel number, social security number, log data arising from the use of IT systems, as well as other and special categories of personal data
Applicant data such as name, address, e-mail address, marital status, religious affiliation
Data due to video surveillance
Right of appeal
If in your opinion the processing of your personal data violates the General Data Protection Regulation, you have the right to file a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, www.ldi.nrw.de, or with any other data protection supervisory authority.
Processing purposes
1. Customer data/interested parties
Processing purpose
We process data that we receive in the course of handling our business relationship with you. We receive the data directly from you. Either in the case of prospective customer and contact inquiries, the placing of orders or order processing (see item "Information on data collection and processing").
Legal basis
The data collection and data processing is necessary for the performance of the contract and is based on Article 6 para. 1 b) GDPR. The use for direct advertising is based on Art. 6 para. 1 f) GDPR. It is our legitimate interest to draw your attention to special offers by means of direct advertising. The data will not be passed on to third parties unless required by law, such as to the tax authorities within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods, such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years.
You have the right to object to the use of your data for the purpose of direct marketing at any time. In addition, you are entitled to request information about the data we have stored about you and to demand that the data be corrected if it is incorrect or deleted if it has been stored inappropriately. You also have the right to file a complaint with a supervisory authority (see item “Right of complaint”).
Duration of data retention
Your personal data is regularly revised by sales staff. After becoming aware of the dissolution of a company or the departure of a contact person, an archiving note is set immediately.
Data deletion
Your personal data will be deleted in accordance with the statutory retention period under commercial and tax law (usually after 10 years).
2. Suppliers
Processing purpose
We process data that we receive in the course of processing our business relationship with you. We receive the data directly from you when placing an order or processing an order (see item "Information on data collection and processing").
Legal basis
The data collection and data processing is necessary for the execution of the contract and is based on Article 6 para. 1 b) GDPR. A transfer of data to third parties does not take place unless required by law, such as within the framework of tax laws to the tax authorities. The data will be deleted as soon as they are no longer required for the purpose of their processing or after the expiry of the statutory retention periods, such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years.
You are entitled to request information about the data we have stored about you and, if the data is incorrect, to request that it be corrected or, in the case of unauthorized data storage, that it be deleted. You also have the right to file a complaint with a supervisory authority (see item “Right of complaint”).
3. Employee data
See separate draft to be handed out to employees.
4. Newsletter
Processing purpose
If you would like to receive our newsletter, we require your first and last name, your company name and address, an e-mail address, as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter.
You can revoke your consent to the storage of the e-mail address together with the above-mentioned contact data and its use for sending the newsletter at any time. A link for cancellation is provided at the end of each newsletter. In order to be able to prove a formerly given consent in the case of an unsubscribed e-mail address, we may store it for up to 2 years before deleting it.
Legal basis
This is executed on the basis of consent of the recipients according to Art. 6 I (a) GDPR, Art. 7 GDPR together with § 7 para. 2 No. 3 UWG or on the basis of legal permission according to § 7 para. 3 UWG (Act against Unfair Competition).
You are entitled to request information about the data we have stored about you and, if the data is incorrect, to demand that it be corrected or, in the case of unauthorized data storage, that it be deleted. You also have the right to file a complaint with a supervisory authority (see item “Right of complaint”).
5. Applications
Processing purpose
If you apply to us on the basis of a job advertisement by e-mail or post, we will collect your personal data such as first name, last name, address, telephone number, e-mail address, attachments (cover letter, resume, references, photo) and store them for the duration of the selection process.
The collection, selection and evaluation of your data is carried out by the secretariat, the personnel department, the specialist department and the management. Your personal data will not be passed on to third parties.
If the specific position for which you are applying has already been given to someone else, but your profile makes you a suitable candidate for a later position or for working in a partner or subsidiary company, we will obtain your express consent before storing or forwarding your application any further, unless you have already consented to such storage or forwarding in your application.
If you apply to us by e-mail, we would like to ask you to send your application documents exclusively to our special e-mail address karriere@synflex.de so that it is delivered directly to the authorized personnel.
The legal basis is Art. 6 I (b) GDPR, for the processing of pre-contractual measures.
Unless you inform us otherwise, the data will be deleted in the event of rejection after 6 months after the position has been filled. In the event of rejection, postal applications will be destroyed or returned after completion of processing.
Unsolicited applications will be deleted or returned at the latest at the end of the year following the rejection if there is no longer any interest in the application.
You have the following rights, provided that the respective legal requirements are met: the right to information about your data stored by us; correction, deletion, restriction of the processing of your data or objection to the processing, as well as data portability. Furthermore, you naturally have the option at any time to request the deletion or destruction of all your application documents by sending us an e-mail to: karriere@synflex.de
6. Server data collection
Information can be found under data protection information.
7. Video surveillance
Processing purpose
Our purpose of video surveillance is the exercise of domiciliary rights, protection of persons and property, protection against industrial espionage, prevention and clarification of criminal acts and vandalism as well as access control. As the responsible body, we process personal image files that we collect as part of the video surveillance on the company premises. The storage period is 7 days for operational reasons. After that, the data is irrevocably deleted.
The legal basis is Article 6 para. 1 f) GDPR, Section 26 para. 1, 3 and 4 BDSG (Federal Data Protection Act). Our legitimate interest is derived from the purpose description and essentially lies in the protection of property and our rights as the responsible party.
This data is only passed on to investigating authorities in the event of criminal offences.
You have the right to request confirmation by us as the controller as to whether personal data relating to you is being processed. If this is the case, you have the right to request information about this personal data and, if the data is incorrect, to request that it be corrected or, in the case of unauthorized data storage, that the data be deleted. You also have the right to file a complaint with a supervisory authority (see item “Right of complaint”).
If you have any questions, please contact our data protection officer at datenschutz@synflex.de.
Intention to process in third countries
In particular, if the intention is to process personal data in a third country, information must be provided on the existence or absence of an adequacy decision by the Commission. In the absence of such an adequacy decision, the website operator must describe, for example, which adequate and appropriate warranties (especially of a technical organizational nature) are provided for the data transfer. He must offer the possibility of obtaining a copy of the explanations of these warranties. More details can be found in Art. 13 para. 1 (f) GDPR. The described processing reference to a third country will be given in particular if the chosen service provider has its registered office in a third country, the service provider collects the data or stores the data collected via the website on its own servers and can access it or uses servers of a third party and can access the usage data in the process.
Recipient categories
In the course of providing the service, we use service companies separately committed to confidentiality and data protection for special areas, where access to personal data cannot be excluded.
These categories of recipients are:
Processors appointed by us (Art. 28 EU-GDPR), in particular in the area of IT services, taxes, logistics and printing services who process your data for us in accordance with instructions.
Public bodies and institutions (tax authorities) in the event of a legal or official obligation.
Other bodies for which you have given us your consent to the transfer of data.
Data will only be passed on to the authorities in the event of overriding legal provisions.
Advertising and right to object
Name, first name and address are also collected for advertising purposes (sending offers, information about additional services). The processing for advertising purposes can be objected to at any time without giving reasons under the following contact details: datenschutz@synflex.de
Objection to data storage
The processing of data for the purpose of executing follow-up orders (requested at the time of the conclusion of the contract or at a later date) pursues legitimate business interests from the perspective of data protection law. You can object to this processing at any time using the following contact details: datenschutz@synflex.de
Obligation to provide
Without correct information from you, it is usually not possible to conclude a contract.
Data subject rights
According to Art. 15 GDPR, you have the right to receive information about the data stored about you, including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 GDPR. If the legal requirements are met, you can request the deletion or restriction of processing as well as object to processing (Art. 17, 18 and 21 GDPR).
If you wish your data to be deleted but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.
As a contact person for your data protection rights, please contact our data protection officer at datenschutz@synflex.de.
Currentness and change of this data protection obligation information
We reserve the right to adapt the content of this data protection obligation information at any time. This usually occurs in the event of further developments or legal adjustments. You can access the current mandatory data protection information via a link inserted in our e-mails, offers, order confirmations, invoices, etc.
Status of this declaration: 14.04.2022
You can find further information on the handling of personal data under Privacy statement.