Data protection is an important concern for CNP CYCLES GmbH. Below we inform you how we process your data and what rights you have.
1. Who is responsible for data processing and who can you contact?
Responsible party:
CNP CYCLES GmbH
Am Sportplatz 11
63791 Karlstein am Main
Phone: +49 6188 99 276 0
E-Mail: info@cnp-cycles.de
Data protection officer:
Mr. Bernhard Ortwein
Am Sportplatz 11
63791 Karlstein am Main
E-Mail: datenschutz@cnp-cycles.de
2. What sources do we use for the data?
We process data that we receive from the business relationship with you. We receive the data directly from you, for example in the context of a pre-contractual inquiry, a contract conclusion or order placement.
3. Processing purposes and legal bases
In accordance with Art. 6 (1) a) GDPR, we process your personal data if you have given us consent to do so. You can revoke consent at any time without giving reasons with effect for the future.
Pursuant to Art. 6 (1) (b) GDPR, we process your personal data for the purpose of fulfilling a contract to which you are a party, or for carrying out pre-contractual measures in response to your request.
You can find further details and additions to the processing purposes in our contract documents and the other information provided.
Pursuant to Art. 6 (1) lit. c) GDPR, we process your personal data to fulfill our legal obligations, in particular under tax and commercial law your master data and payment data.
Pursuant to Art. 6 (1) f) GDPR, we may process your master data, payment data as well as performance-related data in connection with the following purposes for the fulfillment of the aforementioned legitimate interests of the responsible entity mentioned under 1, e.g. for the assertion of legal claims and defense in legal disputes.
Advertising
We process your data for the purpose of direct advertising, in particular for sending our advertising by mail. The data processing is based on Art. 6 para. 1 lit. f) GDPR and in the interest of informing you about new products and services. Each customer has his or her own right to object to this processing, the exercise of which leads to the termination of processing for the purpose of direct advertising. If data is stored exclusively for direct advertising, it will be deleted after the objection has been made.
In the case of business customers, we use the e-mail address of the contact person in accordance with Section 7 (3) of the German Unfair Competition Act (UWG) for the electronic sending of advertising for our own similar goods or services, unless you object. You have the right to object to the use of your e-mail address for direct advertising at any time.
Reference to a right of objection in accordance with Article 21 GDPR in the case of direct advertising.
You have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Credit assessment
Our company is entitled to obtain credit information about its contractual partners. For this purpose, our company transmits your name, address to a credit agency. In the event of a negative credit rating, our company may refuse a contractual relationship with you. The legal basis for the processing is a balancing of interests. Our legitimate interest is the assessment of your creditworthiness and reduction of the risk of non-payment.
4. Categories of personal data processed by us
- Customer master data (such as first and last name)
- Contact data (such as e-mail address, address, telephone no.)
- Billing and payment data (such as bank data, invoice data)
- Contract data (e.g. subject matter of the contract, delivery address, method of payment)
- Correspondence (e.g. correspondence with you)
- Advertising and sales data (e.g. products of interest to you)
5. Who receives your data?
We pass on your personal data within our company to the departments that need this data to fulfill contractual and legal obligations or to perform their respective tasks (e.g. sales and marketing).
On the basis of a balancing of interests to safeguard our legitimate interests, service providers and vicarious agents employed by us to support us in the processing of contracts may receive data for this purpose. These are service providers from the categories IT services, logistics, and printing services.
In addition, data may be disclosed to third parties for the assertion of legal claims and defense in legal disputes, as well as for the prevention and investigation of criminal offenses to appropriate agencies.
6. Transfer of your data to a third country or an international organization
We do not plan to transfer your data to a third country or to an international organization.
7. How long do we store your data?
Your personal data will be deleted as soon as it is no longer required for the purposes stated. As far as necessary, we process your personal data for the duration of our business relationship.
In addition, we are subject to various storage and verification obligations, which result, among other things, from the legal framework. The periods specified there for storage or proof result, among other things, from the German Commercial Code (Handelsgesetzbuch), the German Fiscal Code (Abgabenordnung) and the German Money Laundering Act (Geldwäschegesetz). These can be up to ten years.
Ultimately, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years, but can also be longer in certain cases. In cases where we store the data due to legal obligations, after termination of the processing purpose, the processing as such is restricted in such a way that only the retention purpose from the aforementioned exemplary laws can be achieved. Furthermore, there may be individual retention interests that specify deletion obligations. Also in such cases, after termination of the processing purpose, the processing as such is restricted in such a way that only the retention purpose can still be achieved.
8. Profiling
Is not applied here.
9. Your data protection rights
You have the right to information according to Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR and the right to data portability according to Article 20 GDPR.
In principle, the right to object to the processing of personal data by us exists under Article 21 GDPR. However, this right of objection only applies in the case of very special circumstances of your personal situation, whereby rights of our company may possibly conflict with your right of objection. If you wish to assert one of these rights, please contact the responsible persons mentioned under 1.
10. Scope of your obligations to provide us with your data
Within the scope of our business relationship, you are only required to provide us with the personal data that is necessary for the establishment and implementation of the business relationship and the fulfillment of the associated contractual obligations, or which we are legally obligated to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or will no longer be able to perform an existing contract and may have to terminate it.
11. Your right to complain to the competent supervisory authority
You have a right of appeal to the data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
PO Box 1349
91504 Ansbach
Telephone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800