Republic Floor GmbH, 82152, Krailling - Munich Phone: +49 02921 6600670, Internet: www.republic-floor.de, Email: info(at)republicflooreu.com
a) The following data may be collected and processed in individual cases: Name, address, internet address, email address, telephone number, fax number, bank details, tax number, names and contact details of contacts within the company. The data we collect is generally provided to us by yourself. Additionally, we obtain information from publicly accessible and public sources such as the internet, commercial and land registers, press, media, SCHUFA, and Creditreform. The data are processed in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (BDSG).
b) We use your data for the following purposes: Contract initiation and performance, billing, management of receivables and liabilities, execution of electronic payments, settlement of payment obligations, performance of contractually agreed deliveries, handling of complaints and claims, warranty management, in the context of product monitoring and product liability, for comprehensive customer care and customer retention measures, for comprehensive supplier management and evaluation, for example as part of quality management, to meet tax law requirements.
c) The processing of your data occurs on the following legal basis: Art. 6 para. 1 b GDPR: Requirement for data collection and processing for contract performance. Art. 6 para. 1 f GDPR: Protection of balancing of interests. Processing may also occur based on consent according to Art. 6 para. 1 a and Art. 9 para. 2 a in conjunction with Art. 7 GDPR.
Within the company, those departments that need your data to fulfill our contractual and legal obligations will have access. Service providers and agents employed by us may also receive data for these purposes. These include companies in the categories of IT services, billing, logistics, suppliers, financial institutions, printing services, telecommunications, debt collection, consulting, and consulting as well as sales, marketing, and address discovery. Under these conditions, recipients of personal data may include: auditors, consultants, lawyers, delivery partners, freight forwarders, other suppliers and service providers, banks, public authorities and institutions when there is a legal or regulatory obligation. Further recipients may be those parties for whom you have given us consent to transmit data.
The data provided by you will not be transferred to a third country or an international organization under any circumstances.
The processing of the data provided by you occurs as long as it is necessary to achieve the purpose agreed upon in the contract, generally as long as the contractual relationship with you exists. After termination of the contractual relationship, the data provided by you are processed to comply with legal retention obligations or due to our legitimate interests. After the expiry of the statutory retention periods and/or the cessation of our legitimate interests, the data provided by you will be deleted. Estimated periods of retention obligations relevant to us and our legitimate interests: Compliance with commercial, tax, and professional retention obligations. The stipulated retention periods can be up to ten years. Preservation of evidence within the scope of the statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereas the regular limitation period is three years.
Right of access by the data subject according to Art. 15 GDPR: You have the right to obtain information free of charge about the data stored about you and the purposes of the storage on request. Right to rectification according to Art. 16 GDPR: You have the right to demand immediate rectification of incorrect personal data by the controller. Taking into account the purposes of processing, you have the right to have incomplete personal data completed – including by means of providing a supplementary statement. Right to erasure ("right to be forgotten") according to Art. 17 GDPR: You have the right to demand that your data be deleted immediately by the controller. The controller is obliged to delete personal data immediately, unless the processing is necessary to fulfil legal obligations, for reasons of public interest, or for the establishment, exercise, or defense of legal claims. Right to restriction of processing according to Art. 18 GDPR & § 35 BDSG: You have the right to request the restriction of processing of your data if you contest the accuracy of the data, the processing is unlawful, you reject their deletion and we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR. Right to data portability according to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, provided the processing is based on consent pursuant to Art. 6 para. 1 a GDPR or Art. 9 para. 2 a GDPR, or on a contract pursuant to Art. 6 para. 1 b GDPR, and the processing is carried out by automated means. Right to object according to Art. 21 GDPR: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 e or f GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR in conjunction with § 19 BDSG: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you is unlawful. Right to withdraw consent according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Within the framework of the business relationship, only those data that are necessary for the establishment, performance, and termination of a business relationship or for which collection is legally mandatory must be provided. We point out that we cannot conclude a contract if the necessary data are not provided. The provision of further data is voluntary.
