(Status as of 11/06/2023)

Information pursuant to Art. 13 GDPR for new contacts

Controller responsible for data processing

Töpfer GmbH

Heisinger Straße 6

87463 Dietmannsried

Germany

Purpose of data processing

We process your personal data only in compliance with the applicable data protection provisions. Your data will be processed only if one of the following legal bases applies:

• to fulfill our contractual obligations,
• where processing is required by law,
• where you have given your consent,
• on the basis of our legitimate interests.

We use your data to respond to inquiries or to contact and communicate with you regarding the relevant matter, as well as for contract execution.

We store and process your data in our ERP system, email program, and office applications. Access to your data is defined by a role- and rights-based concept and is granted only to the group of persons necessary for the respective purpose.

Note regarding complaints:

Your data will be stored and used solely for the purpose of processing your complaint. Beyond that, your personal data—such as postal or email address—will not be further processed, shared, or evaluated in any form. By transmitting your data to us, we assume that you agree to this.

Legal basis for processing

The primary legal basis for processing your personal data is Art. 6(1)(b) GDPR. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract.

Where applicable, we also base processing on Art. 6(1)(f) GDPR. Processing occurs on the basis of legitimate interests. We assume, for example, that processing for communication purposes is likewise in the interest of the data subject.

For certain other processing activities, we also rely on your consent (Art. 6(1)(a) GDPR). In those cases, we obtain your consent separately.

Storage period or criteria for determining the duration

We retain the data you provide only as long as necessary to fulfill the aforementioned purposes or as required by the various statutory retention periods. For example, the retention period for your data may derive from Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO). These require every merchant to retain commercial books for 10 years and commercial correspondence (including contract-relevant emails) for 6 years. The retention period begins at the end of the calendar year in which the last entry was made in the commercial book or the commercial letter was received or sent.

Once the respective purpose ceases to apply and/or after the corresponding periods expire, your data will be routinely blocked or deleted in accordance with legal requirements.

We have established an internal company concept to ensure this procedure.

Disclosure of your data to third parties

We transmit your personal data to third parties only when legally permissible or when you have given consent.

We pass your data to the following service providers for the purposes described:

• SendinBlue – newsletter dispatch (based on consent)
• Umfrageonline – surveys (only when participating)
• versand komplett – for postal advertising and mail processing

Data transfer to a third country or an international organization

“Third countries” are countries where the GDPR does not apply directly. This generally includes all countries outside the EU or the European Economic Area.

A data transfer to a third country or an international organization may take place. In doing so, we consider either an adequacy decision by the EU Commission (stating that it is a safe third country or international organization offering an adequate level of protection) or that appropriate safeguards/adequate guarantees are in place and that you have enforceable rights and effective legal remedies.

Withdrawal

If processing is based on consent, you may withdraw your consent to the internal use of your data at any time with effect for the future. To do so, simply send an email to datenschutz@toepfer-gmbh.de. You may of course also submit your withdrawal in writing by post to: Töpfer GmbH, Heisinger Straße 6, 87463 Dietmannsried, or contact us by telephone at +49 8374 934-0.

Notice of data subject rights

You have the right to obtain information about the personal data concerning you. You may also request the rectification of inaccurate data. In addition, under certain conditions, you have the right to erasure, the right to restriction of processing, and the right to data portability.

Data Protection Officer

IKO Industrie-Kontor GmbH | Matthias Dickmann | Data Protection Officer

Contact the Data Protection Officer by email: dickmann@industrie-kontor.de

Phone: +49 4131 7899 559

Mobile: +49 162 8936 320

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27, 91522 Ansbach, Germany

Phone: +49 981 53-1300

Fax: +49 981 53-981300

You can open the complaint form of the Bavarian Data Protection Authority via the following link: https://www.lda.bayern.de/de/beschwerde.html