Privacy Information Obligations

INFORMATION OBLIGATIONS PURSUANT TO ART. 13 GDPR

 Download privacy Information obligations ask GmbH

The protection of your personal data is of particular concern to us. We therefore process your personal data (hereinafter referred to as "data") exclusively based on legal provisions. With this privacy policy, we aim to comprehensively inform you about the processing of your data in our company and the data protection rights to which you are entitled under Article 13 of the European General Data Protection Regulation (EU GDPR).

1. Who is responsible for data processing and whom can you contact?
1.1. ASK GmbH
Shareholders: Mr. Stefan Kelsch, Mr. Thomas Rubenbauer, and Mr. Robert Prechtl
Represented by: Johannes Schweiger
Mailing address: ASK GmbH, Robert-Bosch-Straße 5, D-92249 Vilseck
Contact details: Phone +49 (0) 9662 70019 - 0, Email infoATaskgmbh.com

1.2. The company data protection officer is Mr. Stefan Wistuba
Mailing address: Bayerwald Media GmbH, Kirchplatz 10, D-93485 Pemfling
Contact details: Phone +49 (0) 9662 70019 - 216, Email datenschutzaskATaskgmbh.com

2. What data is processed, and from what sources does this data originate?
2.1. We process the data that we receive from you during contract initiation or execution, based on consent, during your application process, or during your employment with us.

2.2. Personal data includes:

• Basic/contact details: For customers, this includes first and last name, address, contact details (email, phone, fax), bank details.
• For applicants and employees: First and last name, address, contact details (email, phone, fax), date of birth, CV and reference data, bank details, religious affiliation, health data.
• For business partners: Legal representative names, company, commercial register number, VAT ID, company registration number, address, contact details (email, phone, fax), bank details.

2.3. Additionally, we process the following personal data:

• Contract-related information, order data, revenue and document data, customer and supplier history, and consultation records.
• Advertising and sales data.
• Information from your electronic communication with us (e.g., IP address, login data).
• Other data received during our business relationship (e.g., in customer meetings).
• Data generated from basic/contact data and other sources (e.g., customer demand and potential analyses).
• Documentation of your consent for receiving newsletters, etc.

3. For what purposes and on what legal basis is the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG 2018) as amended:

3.1. To fulfill (pre-)contractual obligations (Art. 6(1)(b) GDPR): Data processing occurs to handle contracts online or in one of our branches, and for managing your employment with our company. Data processing also takes place during business initiation and contract execution.
 
3.2. To fulfill legal obligations (Art. 6(1)(c) GDPR): Processing is necessary to comply with legal obligations, e.g., from the Commercial Code or the Tax Code.

3.3. To safeguard legitimate interests (Art. 6(1)(f) GDPR): Data processing may extend beyond contractual fulfillment to safeguard our legitimate interests or those of third parties, for example:

• Advertising or marketing (see section 4).
• Business management measures and service/product development.
• Maintaining a company-wide customer database to enhance customer service.
• Legal enforcement.

3.4. Based on your consent (Art. 6(1)(a) GDPR): If you have given us consent to process your data, e.g., for receiving newsletters.

4. Processing personal data for advertising purposes
4.1. You may object to the use of your personal data for advertising purposes at any time, without incurring any costs beyond basic transmission costs.

4.2. According to § 7(3) UWG, we are entitled to use the email address you provided during contract conclusion for direct advertising of similar goods or services. These product recommendations are sent regardless of whether you have subscribed to a newsletter.

4.3. If you do not wish to receive such recommendations via email, you can object at any time. A simple text message is sufficient, and each email contains an unsubscribe link.

5. Who receives my data?
5.1. If we use a service provider for order processing, we remain responsible for your data protection. All processors are contractually obliged to handle your data confidentially and only process it as necessary for service provision.

5.2. Your data is processed in our customer database to improve data quality, detect duplicates, update addresses, and enhance customer service.

5.3. If necessary for contract fulfillment, data may be shared with affiliated companies.

5.4. Authorities, courts, or external auditors may receive your data if legally required.

5.5. Insurance companies, banks, credit agencies, and service providers may receive data for contract initiation and fulfillment.
 
6. How long is my data stored?
6.1. Data is processed until the business relationship ends or until the expiration of statutory retention periods (e.g., Commercial Code, Tax Code, Labor Laws). Further storage occurs if required for legal disputes where data is needed as evidence.

7. Is personal data transferred to a third country?
7.1. Data is generally not transferred to a third country. Any transfer would occur only based on a European Commission adequacy decision, standard contractual clauses, appropriate guarantees, or explicit consent.

8. What data protection rights do I have?
8.1. You have the right to information, correction, deletion, restriction of processing, objection, data portability, and complaint according to data protection regulations.

8.2. Right to access: You can request information on whether and to what extent we process your data.

8.3. Right to correction: If we process incomplete or incorrect data, you may request correction.

8.4. Right to deletion: You can request deletion of your data if processing is unlawful or disproportionately infringes your protection interests.

8.5. Right to restriction of processing: You may request processing restrictions under certain conditions (e.g., if you contest data accuracy).

8.6. Right to data portability: You can request that we provide your data in a structured, machine-readable format or transfer it directly to another controller.

8.7. Right to object: You can object to data processing based on legitimate interests. In such cases, we will stop processing unless there are overriding legitimate grounds or legal claims.
 
8.8. Right to complain: If you believe we have violated data protection laws, please contact us. You also have the right to complain to the relevant supervisory authority.

9. Am I required to provide data?
Providing data is necessary for contract initiation or fulfillment. Without it, contract conclusion or continuation may not be possible.

10. Changes
We revise this privacy policy when necessary due to changes in data processing. The latest version is always available on this website.

Last updated: 2022/07/01