Basic principles of data processing

LAMILUX Heinrich Strunz Holding GmbH & Co. KG


You have arrived at this page via a link because you want to find out about how we handle (your) personal data. In order to fulfil our information obligations according to Art. 12 et seq. of the General Data Protection Regulation (GDPR), we would like to provide you with the following information about data protection:

Who is responsible for data processing?

LAMILUX Heinrich Strunz Holding GmbH & Co. KG
Zehstraße 2
95111 Rehau
Germany

is responsible for the purpose of data protection law.

You will find further information about our company, details about the authorised representatives and other contact details in the legal notice on our website https://www.lamilux.com/company/legal-notice.html

Which of your data do we process? And for what purpose?

If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes can only be considered if the necessary legal requirements pursuant to Art. 6 Para. 4 GDPR have been met. In this case, we will of course comply with any information obligations under Art. 13 Para. 3 GDPR and Art. 14 Para. 4 GDPR.

What is the legal basis for this?

The legal basis for the processing of personal data is in principle Art. 6 GDPR, unless there are specific legal provisions. In particular, the following options can be considered here:

  • Consent (Art. 6 Para. 1 (a) GDPR)
  • Data processing for the performance of contracts (Art. 6 Para. 1 (b) GDPR)
  • Data processing on the basis of a balancing of interests (Art. 6 Para. 1 (f) GDPR)
  • Data processing to fulfil a legal obligation (Art. 6 Para. 1 (c) GDPR)

If personal data is processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

How long is the data stored?

We process the data as long as this is necessary for the respective purpose.

Insofar as legal storage obligations exist – e.g. in commercial law or tax law – the relevant personal data will be stored for the duration of the storage obligation. After expiration of the storage obligation, it is checked whether there is a further necessity for processing. If a requirement no longer exists, the data is deleted.

As a matter of principle, we carry out an assessment of data towards the end of a calendar year with regard to the need for further processing. Due to the quantity of data, this check is carried out with regard to specific types of data or purposes of processing.

Of course, you can at any time (see below) request information about your personal data stored by us and, in the event that there is no need for the data to be stored, demand the deletion of said data or the restriction of processing.

Which recipients will the data be passed on to?

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the passing on is permissible on the basis of a balancing of interests within the sense of Art. 6 Para. 1 (f) GDPR, if we are legally obliged to pass it on or if you have given your consent to this.

Where is the data processed?

Your personal data will be processed by us exclusively in computer centres of the European Union.

Your rights as a "data subject"

You have the right to information about the personal data processed by us about you.

In the event of a request for information which is not made in writing, we ask for your understanding that we may then demand proof from you that you are the person that you claim to be.

Furthermore, you have the right to correction or deletion or to restriction of processing to the extent to which you are legally entitled to do so.

Furthermore, you have the right to object to processing within the scope of the statutory provisions. The same applies to a right to data portability.

In particular, you have a right of objection under Art. 21 Para. 1 and 2 GDPR against the processing of your data in connection with direct advertising if this is done on the basis of a balancing of interests.

Our data protection officer

We have appointed a data protection officer at our company. You can contact us via the following contact options:

LAMILUX Heinrich Strunz Holding GmbH & Co. KG
Data protection officer
Zehstraße 2
95111 Rehau
Germany
E-mail: datenschutz(at)lamilux.de

Complaint law

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

 

 

Last updated: 15/08/2018