Customer information on data protection

In order to fulfill our information obligations in accordance with Art. 12 ff. of the General Data Protection Regulation (GDPR), we are pleased to provide you with our information on data protection below:

Who is responsible for data processing?
The controller within the meaning of data protection law is
Novabit Informationssysteme GmbH
represented by the managing directors Ramin Göttlich and Klaus Röder
Mühlweg 2
82054 Sauerlach
Tel.: 08104 / 6473 – 0
Fax: 08104 / 6473 – 99
E-mail: info@nuclos.de
Web: http://www.nuclos.de

You can find further information about our company, details of the authorized representatives and other contact options in the legal notice on our website: https://www.nuclos.de/impressum/

For what purposes is the processing carried out and on what legal basis is it based?

If we have received personal data (hereinafter also referred to as “data”) from you, we will only process it for the purposes for which we received or collected it.

a) Collection and processing in the context of the fulfillment of contractual obligations

We collect and process personal data when you contact us and to fulfill our contractual obligations towards you. We process this data on the legal basis pursuant to Art. 6 para. 1 lit. b) GDPR and thus for the implementation of pre-contractual measures and the fulfillment of contracts.

b) Processing due to legal obligations or in the public interest

Our company is also subject to legal and regulatory requirements and obligations which we must comply with and which require the processing of personal data. The fulfillment of the legal requirements arising in detail requires the processing of personal data, which is permitted in accordance with Art. 6 para. 1 lit. c) GDPR. In addition, the processing of personal data may be

data are in the public interest (Art. 6 para. 1 lit. e) GDPR), for example to avert danger or to protect public safety and health.

c) Processing on the basis of a legitimate interest

In addition, we process personal data insofar as this is necessary to protect our legitimate interests or the legitimate interests of a third party, unless the interests or fundamental rights and freedoms of the data subjects, which require the protection of personal data, prevail (Art. 6 para. 1 lit. f) GDPR). Third parties are natural or legal persons, authorities, institutions or other bodies other than you, us, our processors and persons who are authorized to process personal data under our direct responsibility or by processors. Data is processed on the basis of a legitimate interest, in particular if this is necessary for the assertion of legal claims and defense in legal disputes; in this respect, we assume that our interests outweigh your fundamental rights and freedoms that require the protection of your data.
If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

d) Processing on the basis of consent

In addition, personal data will be collected and processed if this processing has been expressly consented to in advance (consent, Art. 6 para. 1 lit. a) GDPR). If personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future by contacting us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

How long will the data be stored?

In principle, personal data will be processed for as long as is necessary to achieve the contractual purposes, i.e. as long as the contractual relationship exists (Art. 6 (1) (b) GDPR). If the processing of personal data is based on consent, this will continue as long as you have not revoked the corresponding consent for processing.

After termination of the contractual relationship, the data provided by you may be stored and thus processed in order to comply with statutory retention obligations (Art. 6 para. 1 lit. c) GDPR) or on the basis of legitimate interests (Art. 6 para. 1 lit. f) GDPR). Legitimate interests may arise in particular from the fact that we have to legally defend ourselves against legal claims or wish to assert or exercise legal claims ourselves or wish to be in a position to check the existence, content and scope as well as the enforceability of such claims (in these cases, the retention period is based on the longest limitation period for the respective possible claims); this may also apply to the processing of health data (see Art. 9 para. 2 lit. f) in conjunction with Art. 6 para. 1 lit. f) GDPR). Art. 6 para. 1 lit. f) GDPR). Once the statutory retention periods have expired and/or the legitimate interests no longer apply, the data provided will be deleted.

To which recipients is the data forwarded?

Within the company, those departments that need your data to fulfill our contractual and legal obligations will receive it. Processors employed by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, advice and consulting as well as sales and marketing and address research.

With regard to the transfer of data to recipients outside the company, please note that we only pass on your data if this is permitted or required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example

Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities) in the event of a legal or official obligation.
Other companies to which we transfer personal data in order to carry out the business relationship with you (depending on the contract: e.g.
banks, credit agencies, suppliers, commercial agents).
Other data recipients may be those bodies for which you have given us your consent to transfer data.

Where is the data processed?

Your personal data will be processed by us exclusively in data centers in the Federal Republic of Germany.
Your rights as a “data subject” Every identified or identifiable natural person to whom the data processed by us relates (“data subject”) has the following rights:

a) Right to information pursuant to Art. 15 GDPR:

You have the right to receive information free of charge upon request, in particular whether and what data is stored about you and for what purpose the storage takes place, to which categories of recipients your personal data has been disclosed or will be disclosed, as well as the planned duration for which your personal data will be stored.

b) Right to rectification pursuant to Art. 16 GDPR:

You have the right to request the rectification of your inaccurate personal data without undue delay. Taking into account the purposes of the processing,
you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c) Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR:
You have the right to demand that your data be deleted immediately. We are obliged to delete personal data immediately if one of the following reasons applies:

a. The purposes for which the personal data was collected no longer apply.
b. You withdraw your consent to the processing and there is no other legal basis for the processing.
c. You object to the processing and there is no other legal basis for the processing.
d. The personal data was processed unlawfully.
e. The deletion of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which I am subject.
f. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

d) Right to restriction of processing pursuant to Art. 18 GDPR, Section 35 BDSG:
You have the right to request the restriction of processing if one of the following conditions is met:

a. You contest the accuracy of the personal data.
b. The processing is unlawful, but you oppose the erasure of the personal data.
c. The personal data are no longer required for the purposes of the processing, but you require the data for the establishment, exercise or defense of legal claims.
d. You have objected to processing pursuant to Art. 21 (1) GDPR. As long as it has not yet been determined whether my legitimate reasons outweigh yours, processing will be restricted.

e) Right to data portability pursuant to Art. 20 GDPR:

You have the right to receive the data provided by you in a structured, commonly used and machine-readable format. Forwarding to another controller may not be obstructed by me.

f) Right to object pursuant to Art. 21 GDPR:

You have the right to object to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e) or lit. f) GDPR, if applicable in conjunction with Art. 9 para. 2 lit. f) GDPR. Art. 9 para. 2 lit. f) GDPR, for reasons arising from your particular situation. The processing of personal data will cease unless there are compelling legitimate grounds for further processing or the processing serves the establishment, exercise or defense of legal claims. In the case of direct marketing, if you have objected to processing pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (processing of special categories of personal data), you may object at any time to the processing of your personal data for these purposes.
.

g) Right to lodge a complaint with the supervisory authority pursuant to Art. 13 para. 2 lit. d), Art. 77 GDPR in conjunction with Section 19 BDSG:

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. To do so, please contact the competent supervisory authority.
The Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach, phone: 0981 / 53 1300, fax: 0981 / 53 98 1300, email:
poststelle@lda.bayern.de is generally responsible for us.

h) Withdrawal of consent pursuant to Art. 7 (3) GDPR:

If the processing is based on your consent in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to withdraw your consent without affecting the lawfulness of processing based on consent before its withdrawal.

consent until the revocation is affected. The declaration of revocation does not result in any further disadvantages for you.

Our data protection officer

We have appointed a data protection officer in our company. You can reach him under the following contact options:

Mr. Sascha Weller, lawyer, IDR – Institute for Data Protection Law
Ziegelbräustraße 7
85049 Ingolstadt
Tel.: 0841 – 885 167 15
Fax: 0841 – 885 167 22
E-mail: ra-weller@idr-datenschutz.de
Web: http://www.idr-datenschutz.de