General data protection information acc. Art. 13 and 14 GDPR
1. name and contact details of the controller
This data protection information applies to data processing by:
Responsible: ZMI GmbH
Address: Adolf-Kolping-Straße 11, 97725 Elfershausen
Phone: +49 9704 60392 – 0
E-mail: datenschutz@ZMI.de
2. contact details of the data protection officer
You can contact our data protection officer at the following address:
Email: info@sidit.de
SiDIT GmbH, Langgasse 20, 97261 Güntersleben
3. collection and storage of personal data as well as type and purpose and their use
a.) Collection and storage
When you contact us for the first time and/or conclude a contract with us, we generally collect the following information:
- Company name
- Title, first name, surname of the named contact persons
- Address (if different: billing address)
- a valid e-mail address,
- Telephone number (landline and/or mobile)
- Bank details
We will assign you a customer number in our system.
b.) What do we process your data for (purpose of processing) and on what legal basis?
In the following, we will inform you what we process your data for and on what legal basis.
aa.) For the fulfillment of contractual obligations and/or implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b) GDPR)
We process your personal data for the fulfillment of contractual obligations and/or implementation of pre-contractual measures that take place on the basis of your request, i.e. in particular
- for the fulfillment of the contract;
- for correspondence with you;
- for invoicing;
- for the processing of warranty claims;
- for the settlement of any liability claims and the assertion of any claims against you.
bb.) Based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)
If you have given us your consent to process personal data, the respective consent is the legal basis for the processing mentioned there.
This applies in particular to
- Collection and storage of further personal data
- Promotional speeches by telephone, e-mail or via social media
- Publication of photos to you (e.g. website or social media)
You can revoke your consent at any time with effect for the future. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
cc.) In the context of the balancing of interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
We may also use your data on the basis of a balancing of interests to protect our legitimate interests or those of third parties. This is done, for example for the following purposes:
- Maintaining an order history for our future services
- For customer advice and support and sales
- General business management and further development of services and products
- Advertising, market and opinion research
Our interest in the respective processing arises from the respective purposes and is otherwise of an economic nature. Where possible and appropriate, we process your data in pseudonymized or anonymized form.
dd) Due to legal requirements (Art. 6 para. 1 sentence 1 lit. c) GDPR)
We are subject to various legal obligations, such as statutory retention and documentation obligations under commercial law (from HGB, StGB or AO).
4. the processing of special categories of personal data ( 9 para. 2 lit. a GDPR)
The processing of your special category of personal data is based on your consent in accordance with Art. 9 para. (2) (a) GDPR. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent that you gave us before the GDPR came into force, i.e. before May 25, 2018. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. transfer of data to third parties and processors
The disclosure of personal data also constitutes processing within the meaning of the previous section 3. However, we would like to inform you separately about the issue of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
Your personal data is generally transferred to third parties for the following purposes:
- Processors with whom we have concluded an agreement in accordance with Art. 28 GDPR
- Shipping (e.g. shipping service provider)
- Payment (e.g. payment service provider)
- Accounting (e.g. tax consultant)
- Legal disputes (e.g. lawyer)
- Communication platform (e.g. e-mail, WhatsApp, other messenger services)
- Authorities
- Professional associations
- Accident insurance
Data processing takes place exclusively in a member state of the European Union or in another state party to the Agreement on the European Economic Area. Any transfer to a third country will only take place if the special requirements of Art. 44 et seq. GDPR are met.
6. deletion
Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
7. rights of data subjects
You have the right:
- pursuant to Art. 7 para. 3 GDPR to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, insofar as these are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and
- to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.
8. right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation. If you would like to exercise your right to object, simply send an e-mail to datenschutz@ZMI.de
Status: 08.11.2023