The protection of your personal data is very important to us. For that reason we process your personal data (“data” for short) exclusively on the basis of the legal regulations. With this data protection declaration we wish to inform you about the processing of your data within our company and the claims and rights to which you are entitled under data protection laws as defined in Article 13 of the European General Data Protection Regulations (EU GDPR).
1. Who is responsible for the processing of the data and who can you contact?
The responsible entity is
metron eging GmbH
Grafenauer Str. 16-+18
94535 Eging am See
E-mail: info@metron-eging.com
Phone: +49 8544-9626-0
The company Data Protection Officer is
Mr Robert Heindl
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
E-mail: r.heindl@projekt29.de
Phone: 0941-2986930
2. What data are processed and from which sources do these data come?
We process the data that we have received from you within the context of the initiation and conclusion of a contract, on the basis of your consent or within the context of your job application to us or your employment with us.
Personal data include:
Your master/contact data, which in the case of customers include, for example, forename and surname, address, contact data (e-mail address, telephone number, fax) and bank data.
In the case of job applicants and employees they include, for example, forename and surname, address, contact data (e-mail address, telephone number, fax), date of birth, data from curriculum vitae and references, bank data and religious confession.
In the case of business partners they include, for example, the designation of their legal representatives, company, commercial register number, VAT Reg. ID, company number, address, contact data (e-mail address, telephone number, fax) and bank data.
In addition to that we also process the following additional personal data:
- information about the type and contents of contract data, order data, turnover and document data, customer and supplier history, and consultation documents,
- advertising and sales data,
- information from your electronic correspondence with us (e.g. IP address, login data),
- other data that we have received from you within the context of our business relationship (e.g. in customer meetings),
- data that we generate ourselves from master/contact data and other data, such as through customer requirement and potential analyses,
- the documentation of your declaration of consent to receive newsletters, for example.
3. For what purpose and on what legal basis are the data processed?
We process your data in accordance with the regulations of the General Data Protection Regulations (GDPR) and the German Federal Data Protection Act 2018, each in their valid edition:
- for the fulfilment of (pre)contractual obligations (Art. 6 Sect. 1 b) GDPR):
The processing of your data for the conclusion of your employment contract in our company takes place online or in one of our branch offices The data are processed in particular when initiating business and the implementation of contracts with you. - for the fulfilment of legal obligations (Art. 6 Sect. 1 c) GDPR):
The processing of your data is necessary for the purpose of fulfilling different legal obligations, e.g. from the German Commercial Code or Fiscal Code. - for the protection of justified interests (Art. 6 Section 1 f) GDPR):
On account of a weighing up of interests, data processing may extend beyond the actual fulfilment of the contract to the protection of our justified interests or those of third parties. The processing of data for the protection of justified interests takes place, for example, in the following cases:- advertising or marketing (see no. 4),
- measures for business steering and the further development of services and products;
- maintenance of a group-wide customer database for the improvement of customer service
- within the scope of prosecution.
- in the context of your consent (Art. 6 Section 1 a) GDPR):
If you have given us your consent to the processing of your data, for example for the sending of our newsletter.
4. Processing of personal data for advertising purposes
You can object to the use of your personal data for advertising purposes at any time in general or just for individual measures without incurring any costs other than the transmission costs according to the base tariffs.
In accordance with the legal requirements arising from Art. 7 Section 3 UWG (German Unfair Competition Act), we are entitled to use the e-mail address specified by you when concluding the contract for direct advertising for our own similar goods or services. You will receive these product recommendations from us irrespective of whether or not you have subscribed to a newsletter.
If you do not wish to receive this kind of recommendation from us by e-mail, you can object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs according to the base tariffs. A notification in text form is sufficient for this. Naturally an unsubscribe link is contained in every e-mail.
5. Who receives my data?
If we make use of a service provider for the processing of an order, we nevertheless remain responsible for the protection of your data. All order processors are contractually obligated to treat your data confidentially and only to process them within the context of rendering the performance. The order processors contracted to us receive your data if they require the data in order to provide their respective service. These are, for example, IT service providers, who we need for the operation and security of our IT system, as well as advertising and address publishers for our own advertising campaigns.
Your data are processed in our customer database. The customer database supports the increasing of the quality of the existing customer data (removal of duplicate entries, moved/deceased marking, address correction) and enables its enrichment with data from public sources.
These data are provided to the group companies if necessary for conclusion of the contract. The customer data are stored in a company-related manner and separately, in the process of which our parent group acts as a service provider for the individual participating companies.
In the case of a legal obligation and within the scope of prosecution, your data may be received by authorities, courts of law and external auditors.
In addition, your data may be received by insurance companies, banks, credit enquiry agencies and service providers for the purpose of contract initiation and fulfilment.
6. How long will my data be stored?
We process your data until the end of the business relationship or until the expiry of the applicable legal retention periods (arising for instance from the German Commercial Code, Fiscal Code, Care Home Act or Working Hours Act) and beyond that until the end of any legal disputes in which the data are required as evidence.
7. Are personal data transmitted to a third-party country?
As a matter of principle, we do not transmit any data to third-party countries. A transmission takes place in an individual case only on the basis of an appropriateness resolution of the European Commission, standard contract provisions, suitable guarantees or your explicit consent.
8. What data protection rights do I have?
You have at any time the right to information, correction, deletion or restriction of the processing of your stored data, a right to object to the processing, a right to data transmissibility and a right to complain in accordance with the provisions of data protection laws.
Right to information:
You can demand information from us regarding whether and to what extent we process your data.
Right to correction:
If we process your data and they are incomplete or incorrect, you can demand at any time that we correct or complete the data.
Right to deletion:
You can demand at any time that we delete your data if we illegally process them or if the processing interferes unreasonably in your justified protection interests. Please note that there may be reasons to prevent immediate deletion, e.g. in the case of legally regulated retention periods.
Irrespective of the exercising of your right to deletion, we will delete your data immediately and completely as soon as this is not opposed by a contractual or legal retention obligation.
Right to restriction of the processing:
You can demand the restriction of the processing of your data by us if
- you dispute the correctness of the data; the restriction then applies for the length of time that it takes us to check the correctness of the data,
- the processing of the data is illegal, but you reject deletion and demand a restriction in the use of the data instead,
- we no longer require the data for the intended purpose, but you still need these data to assert or defend legal claims, or
- you have objected to the processing of the data.
Right to data transmissibility:
You can demand that we make the data, which you have provided to us, available to you in a structured, common and machine-readable format and that you can transmit these data to another responsible entity without hindrance by us if
- we process these data on the basis of a revocable consent given by you or for the fulfilment of a contract between us and
- this processing takes place with the help of an automated process.
If technically feasible, you can demand that we directly transmit your data to another responsible entity.
Right to object:
If we process your data on the basis of a justified interest, you can object to this data processing at any time; this would also apply to any profiling based on these provisions. We will then no longer process your data unless we can provide compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedom, or where the processing is for the assertion, exercising or defence of legal claims. You can object to the processing of your data for the purpose of direct advertising at any time and without giving a reason.
Right to complain:
If you are of the opinion that we are violating German or European data protection laws in processing your data, we would ask that you contact us in order to clarify any questions. Naturally you also have the right to contact the supervisory authority responsible for you. In Germany this would be the respective State Data Protection Supervisory Office.
If you wish to assert one of the above-mentioned rights against us, please contact our Data Protection Officer. In case of doubt we can request additional information in order to confirm your identity.
9. Am I obligated to provide data?
The processing of your data is necessary in order to conclude or fulfil any contract into which you enter with us. If you do not make the data available we will normally have to reject the conclusion of the contract or, in the case of an existing contract, we will no longer be able to implement it and, consequently, we will have to terminate it. However, you are under no obligation to consent to the processing of data that are irrelevant to the fulfilment of the contract or not legally required.