Fundamental principles for data processing at AMEPA GmbH

You have visited this page via a link because you want to be informed about how we handle (your) personal data. In order to fulfil our duty to inform you in accordance with Art. 12 et seq. of the General Data Protection Regulation (German DSGVO), we are very pleased to present our information regarding data protection below:

Who is responsible for data processing?

The responsible party in terms of data protection law in this case is considered to be AMEPA GmbH Karl-Carstens-Str. 12 52146 Würselen-Aachen, Germany. Additional information about our company, details relating to the people who are authorised to represent us and also additional contact options in the imprint of our website: https://amepa.de/de/impressum

Which of your data do we process and for what purpose?

If we have received data from you, then we will only process it for the purposes for which we received it or collected it for. Data processing for any other purposes can only be considered when the necessary legal requirements pursuant to Art. 6) Para. 4 DSGVO exist. In this case, we will of course comply with any information obligations pursuant to Art. 13) Para. 3 DSGVO and Art. 14) Para. 4 DSGVO.

What legal basis is this based on?

The legal basis for processing of personal data is in principle that, unless there are other specific legal provisions, then Art. 6 DSGVO applies. The following possibilities particularly come into consideration here:

• Consent (Art. 6) Para. 1 lit. a) DSGVO)
• Data processing required for the fulfilment of contracts (Art. 6) Para. 1 lit. b) DSGVO
• Data processing required for the fulfilment of contracts (Art. 6) Para. 1 lit. F) DSGVO)
• Data processing required for the fulfilment of contracts (Art. 6) Para. 1 lit. b) DSGVO)

When personal data is processed on the basis of a consent which has been submitted by you, then you always retain the right to revoke your consent at any time with effect for the future by contacting our company. When we process the data on the basis of a balance of interests , then you as the data subject always retain the right to object to the processing of the personal data, taking into account the requirements of Art. 21 of the DSGVO.

How long is the data stored for?

We process the data for as long as this is necessary for the respective purpose. Insofar as any statutory retention obligations exist, e.g. under commercial law or tax law, then the personal data concerned will only be stored for the duration of the retention obligation. Once the obligation for retention has expired, then it will be reviewed for whether there is a further need for processing. If there is no additional requirement for this, then data is deleted. As a matter of principle and towards the end of a calendar year, we always execute a review of the data with regard to the need for further processing. Due to the volume of data involved in such cases, this review is only executed with regard to specific types of data or purposes of processing. You can, of course, request information at any time (refer to below) Request information about the data which we have stored about you and, if it is not necessary, request deletion of the data or restriction for processing it.

To which recipients is the data passed on to?

Your personal data will only be passed on to third parties when this is considered necessary for the execution of the contract with you, if the passing on is based on a weighing of interests within the meaning of Art. 6) Para. 1 lit. f) DSGVO, then we are always legally obliged to pass on the data or when you have given your consent to do so.

Where is the data processed?

Your personal data is processed by us exclusively in data centres in the Federal Republic of Germany.

Your rights as a “data subject

You always retain the right to information about the personal data which we process about you. In the case of a request for information which is not made in writing, we ask for your understanding that we may then require evidence from you in order to verify that you are the person you claim to be. Furthermore, you also still retain a right to correction or deletion or to restriction of processing, insofar as you are entitled to this by law. Furthermore, you retain a right to object to processing within the scope of the law. The same applies to a right to data transferability. In particular, you retain a right to object to the processing of your data in connection with direct marketing in accordance with Article 21 (1) and (2) of the General Data Protection Regulation (DSGVO), when this is implemented on the basis of a balancing of interests. Our data protection officer. We have appointed a data protection officer in our company. You can contact them as follows: AMEPA GmbH –Data Protection Officer – Karl-Carstens-Str. 12 52146 Würselen-Aachen, Germany Email: datenschutz@amepa.de Right of complaint. You also retain the right to complain about the processing of personal data by us to a data protection supervisory authority. Status: 10.09.2018