The company Hertel & Co. GmbH undertakes to protect the privacy of its business partners when processing personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR).
Business partner means any natural person with whom Hertel & Co. GmbH has a business relationship with, in particular representatives and employees of customers, suppliers, service providers and competitors. The purpose of this letter is to inform future and current business partners in Europe about the processing of personal data by Hertel & Co. GmbH's processing of personal data.
1. responsibilities and contact details
The person responsible for your personal data is
Hertel & Co. GmbH, Carl-Kolb-Str. 10, 95448 Bayreuth
Phone: +49 921 78440, e-mail: kontakt@hertel-kartonagen.de
2. use of your personal data
The collection and use of your personal data takes place insofar as this is necessary to safeguard the legitimate interests of Hertel & Co. GmbH (Art. 6 para. 1 lit. f GDPR), among other things
- to enter into or perform contracts and other business relationships or payments or in connection with complaints in warranty cases or to prepare requests for quotations, to determine the terms of the contractual relationship and with regard to product development activities, in each case with our customers, suppliers, service providers and competitors for whom you may be acting as an agent or employee;
- to transfer your personal data within the company for internal administrative purposes (e.g. for accounting);
- to ensure IT security and IT operations;
- on the use of service providers, in particular internal and external IT service providers, who support our business processes;
- to ensure building security (this includes video surveillance where necessary to protect our premises).
Personal data is also processed for the purpose of fulfilling contracts with individuals (natural persons) with whom we maintain business relationships, for example to process purchase contracts, deliveries or payments, or in connection with complaints in warranty cases, or to prepare and respond to requests for quotations from individuals, to determine the terms of the contractual relationship and with regard to production development activities (Art. 6 para. 1 lit. b GDPR). In addition, Hertel & Co. GmbH is also subject to various legal obligations (Art. 6 para. 1 lit. c GDPR), which may require the processing of your personal data. These legal obligations may arise, for example, from tax, foreign trade or sanction regulations.
3. recipient of your personal data
- Within our company, only authorised employees with the appropriate responsibilities have access to your personal data.
- We are authorised to commission third parties to provide certain services, such as IT services. We also use legal advisors, management consultants, auditors and the like. These third parties provide services to us under our supervision and in accordance with our instructions and may have access to personal data to the extent necessary to provide their services.
- In addition, to the extent permitted by law, we may transfer your personal data to authorities (e.g. social security institutions, tax authorities or law enforcement agencies) and courts in Germany and abroad in order to fulfil legal obligations or in the interests of the company.
4. your rights
5. confidentiality and storage of data
Each of our employees and those employees of external service providers who have access to and/or process personal data are obliged to treat this data confidentially. The storage of data depends on the type and duration of the business relationship, the contractual obligations and the statutory provisions. In general, however, if you exercise your right to have your data deleted, this will be complied with, provided that the statutory retention obligations are not affected.
