General Privacy Policy for Third Parties
We take the protection of your personal data very seriously and shall treat your personal data confidentially and in accordance with the statutory data protection regulations. This privacy policy provides you with more details on this subject.
1. Responsible processors
Pfeiffer Vacuum GmbH
Berliner Straße 43
35614 Asslar/Germany
2. Data protection officers of the responsible processors
gds – Gesellschaft für Datenschutz
Mittelhessen mbH
Auf der Appeling 8
35043 Marburg/Germany
T +49 6421 80413-10
datenschutz@pfeiffer-vacuum.com
3. Processing operations
3.1. Data protection during implementation of pre-contractual measures or for the fulfillment of a contract
3.1.1. Type of data
Relevant personal data we process are:
- Personal master data (name, address and other contact data)
- Communication data (for example: telephone, e-mail)
- Contract master data (contractual relationship, product or contractual interest)
- Customer history
- Contract billing and payment data
- Planning and control data
We process your data for the purpose of handling an inquiry from you or a contractual relationship with you (providing deliveries and services)
We process your personal data for the following purposes:
- Performance of a contract to which you are party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR)
- If the scope of the processing goes beyond this, we will ask you for consent (Art. 6 para. 1 lit. a GDPR).
We shall only process personal data that we receive from you directly or from another person (for example, a colleague) as part of your inquiry or a contractual relationship with you.
In addition, if necessary, we shall process personal data that we legally receive from third parties (for example, from courts, authorities, agencies or insurance companies).
3.1.4. Recipients of personal data
In the course of processing, your data will be transferred to specialist departments within our company as well as within our group or within affiliated companies, in individual cases to group subsidiaries, distributors or affiliated companies in third countries.
Furthermore, data may be transferred outside our company to customers, suppliers, distributors, government agencies, banks, service providers such as service data centers and remote maintenance.
Should data be transferred to third countries, the transfer shall either be allowed by a condition of Art. 49 para. 1 and para. 2 EU-GDPR on the basis of your informed consent or a contract / a pre-contractual measure at the request of the data subject, or we shall have guarantees for the data protection-compliant processing of your data in the third countries (Art. 46 para. 2 & 3 GDPR).
3.1.5. Storage
Data shall be stored for at least the duration of the business relationship (for example, your inquiry / for the duration of the contractual relationship). In most cases, we are bound by the legally prescribed retention periods. After expiry of this maximum storage period, your data will be deleted unless there is another important reason to the contrary.
3.2. Data protection in the context of marketing
3.2.1. Type of data
Relevant personal data we process are:
- Personal master data (name, address and other contact data)
- Communication data (for example: telephone, e-mail)
- Information details (from third parties, for example credit agencies, or from public directories)
- Log data, to ensure the safety and function of IT systems
We shall process your data in the context of existing customer relationships to inform you about similar goods or services, or if we have received your consent to do so
- Data shall therefore be processed either on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR),
- for the performance of a contract to which you are party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR) or
- based on your consent (Art. 6 Abs. 1 lit. a GDPR).
3.2.3. Sources
We shall only process personal data that we receive from you directly as part of your inquiry or a contractual relationship with you.
3.2.4. Recipients of personal data
In the course of processing, your data will be transferred to specialist departments within our company as well as within our group or to affiliated companies, in individual cases to group subsidiaries, distributors or affiliated companies in third countries.
Furthermore, data may be transferred outside our company to service providers such as service data centers and marketing agencies.
Should data be transferred to third countries, the transfer shall either be allowed by a condition of Art. 49 para. 1 and para. 2 EU-GDPR on the basis of your informed consent or a contract / a pre-contractual measure at the request of the data subject, or we shall have guarantees for the data protection-compliant processing of your data in the third countries (Art. 46 para. 2 & 3 GDPR).
3.2.5. Storage
Data shall be stored for at least the duration of the business relationship (for example, your inquiry / for the duration of the contractual relationship). In most cases, we are bound by the legally prescribed retention periods. After expiry of this maximum storage period, your data will be deleted unless there is another important reason to the contrary.
3.3. Data protection in the context of correspondence
Please note that the transmission of data via e-mail can present security gaps and that transmissions are usually carried out encrypted. Should you not want this, please use more powerful encryption methods.
3.3.1. Type of data
Relevant personal data we process are:
- Personal master data (name, address and other contact data)
- Communication data (for example: telephone, e-mail)
- Contract master data (contractual relationship, product or contractual interest)
- Customer history
- Contract billing and payment data
- Planning and control data
We shall process your data in accordance with the legal basis for the content of the correspondence. This can be for example an inquiry, an order, a project reference or something similar.
Data shall therefore be processed
- on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR),
- for the performance of a contract to which you are party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR) or
- on the basis of your (possibly implied) consent (Art. 6 para. 1 lit. a GDPR).
We shall only process personal data that we receive in the course of our correspondence.
3.3.4. Recipients of personal data
In the course of processing, your data will be transferred to specialist departments within our company as well as within our group or to affiliated companies, in individual cases to group subsidiaries, distributors or affiliated companies in third countries.
Furthermore, data may be transferred outside our company to service providers such as service data centers and marketing agencies.
Should data be transferred to third countries, the transfer shall either be allowed by a condition of Art. 49 para. 1 and para. 2 EU-GDPR on the basis of your informed consent or a contract / a pre-contractual measure at the request of the data subject, or we shall have guarantees for the data protection-compliant processing of your data in the third countries (Art. 46 para. 2 & 3 GDPR).
3.3.5. Storage
Data shall be stored for at least the duration of the business relationship (for example, your inquiry / for the duration of the contractual relationship). In most cases, we are bound by the legally prescribed retention periods. After expiry of this maximum storage period, your data will be deleted unless there is another important reason to the contrary.
3.4. Data protection in the context of job applications
We shall process all data that you provide to us as part of an application.
3.4.1. Type of data
Relevant personal data we process are:
- Personal master data (name, address and other contact data)
- Communication data (for example: telephone, e-mail)
- Qualification data
- Resume data
- If applicable, special categories of personal data (religion, trade union membership)
- Other data contained in your application
We shall process your data as part of the application process in preparation for your contractual relationship with us.
Data shall therefore be processed
- in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR in conjunction with Art. 88 GDPR in conjunction with Art. 26 BDSG (Federal Data Protection Act))
We shall only process personal data that we receive in the course of your application.
3.4.4. Recipients of personal data
During processing, your data will be transferred to specialist departments within our company and, under certain circumstances, within our group or to affiliated companies.
3.4.5. Storage
After completion of the application process, the data shall be stored either for the duration of your employment contract or, in the event of an unsuccessful application, for 6 months after rejection. Should we wish to store your data for a longer period of time, we will ask you for your consent. After this maximum storage period has expired, your data will be deleted. The metadata of the application will be stored for another 3 years.
4. Rights of the data subjects
In connection with the processing of your personal data by the processor responsible, you have the following rights:
- The right of access (if we process your personal data, you will receive information regarding the exact circumstances upon request)
- The right to have data deleted (under certain circumstances, which may require clarification)
- The right to be forgotten (if data has been transmitted, we must request the recipient to delete it)
- The right to data transfer (if you wish, we must transfer the data to a third party in computer-readable format)
- The right to correction of data category (if this is incorrect)
- The right to object to the processing activity (under certain circumstances, which may require clarification)
- The right to correction if the data is inaccurate
- The right to complain to supervisory authorities. Complaints are dealt with by the supervisory authority responsible for you, in accordance with the so-called “one-stop shop” principle. This is either the supervisory authority of your country or, in Germany, of your federal state. A list of supervisory authorities responsible for the federal states can be found here: https://gdprhub.eu/Data_Protection_in_Germany#German_State_DPAs_for_the_private_sector
5. Reasons for the provision
Within the scope of our business relationship, you only have to provide us with the personal data required for the processing of the legal transaction. In case that you don’t provide this date, it is not possible to form a business relationship.
6. Miscellaneous
There is no automated decision making. Likewise, we shall not process your data with the purpose of evaluating certain personal aspects (profiling).