Datenverarbeitung | P.M.DESIGNINGPROCESS

NOTICE ON DATA PROCESSING

This notice on data processing clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) when you commission or contact us. The data protection declaration for the use of our online offers can be found at www.pmdesigningprocess.com

With regard to the terminology used, e.g. “Processing” or “Controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

1. Name and contact details of the controller

This data protection notice applies to data processing by:

P.M.DESIGNINGPROCESS

Peter Mertes

Heisterweg 5

Germany

21635 Jork

Tel: + 49 171 6464857

Mail: pm@pmdesigningprocess.com

2. Collection and storage of personal data as well as type and purpose and their use or transfer to third parties

a. What data we collect

If you commission us or contact us about an order, we collect the following data:

Salutation, first name, last name, possibly company data
a valid email address, address, telephone number (landline and / or mobile)
Contract data (content of the order, fees, terms, information on provided services)
Payment data (bank details, payment history, etc.)

b. Why we collect this data and to whom we pass it on

- Provision of services

We process the data of our customers, clients and interested parties (uniformly referred to as "customers") in accordance with Art. 6 Para. 1 lit. b. GDPR to provide you with our contractual or pre-contractual services. The data processed in this context, the type, scope and purpose and the necessity of processing them are determined by the underlying order.

If required for the fulfilment of the contract or required by law, we disclose or transmit the customer data to technical service providers and other service providers as part of our service provision.

Furthermore, we can involve Processors on the basis of Art. 28 GDPR to perform the services. Processors process the data based on our instructions. This applies to technical service providers such as the cloud service provider Tresorit AG, Minervastr. 3, 8032 Zurich, Switzerland (www.tresorit.com). The transmission of the data in this context to Switzerland is permitted under Art. 45 GDPR based on an adequacy decision by the European Commission.

The data will be deleted after expiry of statutory warranty and comparable obligations, with the necessity of storing the data being checked every two years. Otherwise, the statutory retention requirements apply. In the case of statutory archiving obligations, deletion takes place after its expiration. According to German law, a storage obligation of 6 years for documents under commercial law and 10 years for documents under tax law exists.- Administration, financial accounting, office organization

We process data in the context of administrative tasks as well as the organization of our company, financial accounting and compliance with legal obligations, such as archiving. We process the same data that we process as part of the provision of our contractual services. The processing is based on Art. 6 Para. 1 lit. c. GDPR, Art. 6 Para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in processing lies in administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information mentioned for these processing activities.

We disclose or transmit data to the financial administration and to consultants such as tax advisors or auditors as well as payment service providers.

3. Data subject rights

You have the following rights towards us regarding your personal data:

- Right to information according to Art. 15 GDPR,

- Right to correction or deletion according to Art. 16 & 17 GDPR,

- Right to restrict the processing according to Art. 18 GDPR,

- Right to object to processing in accordance with Art. 21 GDPR,

- Right to data portability according to Art. 20 GDPR.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

4. Right of revocation and objection

Insofar as the processing of your personal data is based on consent, you can revoke it at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we are no longer allowed to continue processing the data based on this consent in the future.

The processing of your personal data based on statutory provisions (e.g. Art. 6 Para. 1 S. 1 lit. b) remains unaffected by a revocation. If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation.

If you would like to exercise your right to object, simply send an email to pm@pmdesigningprocess.com.

These notes on data collection are valid as of April 2019. Due to the further development of our offers and changed legal and official requirements, it may be necessary to change these notes on data collection.