Privacy Policy

Purpose

Our company collects and processes personal data for the purpose of establishing and fulfilling business relationships in accordance with specific orders. This covers all categories of data required to fulfil pre-contractual and contractual obligations.

Disclosure of data to third parties

Personal data will only be disclosed to third parties if this is necessary to fulfil the business purpose. Personal data will not be disclosed to third parties, including those in third countries with an unclear level of data protection (generally countries outside the EU), who are not involved in the business purpose, unless the data subject has given their consent.

Lawfulness of data processing

The collection, processing and use of personal data are carried out within the limits permitted by law in accordance with Articles 5, 6 and 9 of the GDPR. Where personal data is collected from the data subject, the data subject is entitled to transparent information in accordance with Article 13 of the GDPR. In principle, only such information is processed and used as is necessary for the performance of operational tasks and is directly related to the purpose of processing. In doing so, the specific requirements for the collection, processing and use of special categories of personal data in accordance with Article 9 of the GDPR and Section 22 of the BDSG are observed. In accordance with the GDPR, the processing of sensitive data is permitted exclusively under the principle of prior authorisation or where there is a legal basis.

The rights of data subjects

In accordance with Article 15 et seq. of the GDPR, data subjects have the right to access, rectification, erasure, restriction and objection to the processing of their data.

The right of data subjects to withdraw consent

Pursuant to Article 13(2)(c) of the GDPR, data subjects have the right to withdraw their consent to the processing of personal data with effect for the future, provided that the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR. The lawfulness of the processing carried out on the basis of consent up to the point of withdrawal remains unaffected. However, withdrawal of consent or failure to provide the necessary data will generally mean that the purpose for which the data was or would have to be collected cannot be fulfilled. Written form is required to exercise these rights. Please contact us by email at Datenschutz.neuss@snowworld.com.

Deletion of personal data

Personal data is deleted when the purpose for which it was stored no longer applies and no legal provision (e.g. regarding the statutory retention period) requires the data to be retained. The provisions of Article 17 of the GDPR in conjunction with Section 35 of the BDSG apply. If erasure is not possible for legal, contractual, commercial or tax reasons, the processing of the data may be restricted at the request of the data subject. Written notification is required to exercise this right.

The right of data subjects to data portability

The company ensures the right to data portability in accordance with Article 20 of the GDPR. Every data subject has the right to receive a copy of their personal data in a commonly used machine-readable file format.

The right of data subjects to lodge a complaint

In accordance with Article 77 of the GDPR, every data subject has the right to lodge a complaint with the supervisory authority of the state. The State Data Protection Commissioner for North Rhine-Westphalia can be contacted at the following address:

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44, 40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de