Declaration of data protection:

 

Responsible body in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

ERICA'S

 

Your rights as a data subject:

​

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored by us and their processing,

• Correction of incorrect personal data,

• Deletion of your data stored by us,

• Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations,

• Objection to the processing of your data by us and

• Data portability if you have consented to data processing or have concluded a contract with us.

 

If you have given us your consent, you can revoke it at any time with future effect.

 

You can contact the supervisory authority responsible for you at any time with a complaint. The competent supervisory authority depends on the state of your place of residence, your work or the alleged violation. A list of the supervisory authorities (for the non-public area) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .

​

Purposes of data processing by the responsible body and third parties:

 

We only process your personal data for the purposes stated in this data protection declaration. Your personal data will not be passed on to third parties for purposes other than those mentioned. We only pass on your personal data to third parties if:

• You have given your express consent,

• the processing is necessary to process a contract with you,

• the processing is necessary to fulfill a legal obligation,

• the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

 

Deletion or blocking of data:

 

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as it is necessary to achieve the purposes mentioned here or for the various storage periods provided for by law. After the respective purpose ceases to exist or these deadlines have expired, the corresponding data will be routinely blocked or deleted in accordance with the statutory provisions.

 

Provision of our business services:

 

We process the data of our suppliers, customers, interested parties or other persons in accordance with Art. 6 Para. 1 lit. b. GDPR, if we offer contractual services to them or act within the framework of an existing business relationship, e.g. order processing, or are recipients of services and benefits. In addition, we process the data of data subjects in accordance with Art. 6 para. 1 lit. f. GDPR based on our legitimate interests, e.g. when it comes to administrative tasks or public relations.

 

The data processed, the type, scope, purpose and necessity of their processing are determined by the underlying contractual relationship. This basically includes inventory and master data of the people (e.g., name, address, etc.), as well as the contact details (e.g., email address, telephone, etc.), the contract data (e.g., services used, content communicated and information, names of contact persons) and for the offer of payable services or products, payment data (e.g., bank details, payment history, etc.).

 

We delete data that is no longer required to fulfill our business purposes. This is determined according to the respective tasks and contractual relationships. In the case of business processing, we keep the data for as long as it may be relevant for the business transaction, as well as with regard to any warranty or liability obligations. The necessity of storing the data is checked every three years; otherwise the statutory retention requirements apply.

 

Contact:

 

When contacting us (e.g. by e-mail, telephone), the information provided by the user for processing the contact request and processing it in accordance with Art. 6 para. 1 lit. b. (within the framework of contractual / pre-contractual relationships), Art. 6 para. 1 lit. f. (other inquiries) GDPR processed. The information provided by the users can be stored in a customer relationship management system ("CRM system") or a comparable request organization.

 

We delete the requests if they are no longer necessary. We check the necessity every two years; The statutory archiving obligations also apply.

 

Changes to our privacy policy:

 

We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration then applies to your next visit.

 

Questions to the data protection officer:

 

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

​

info@ericas.de