In accordance with the principles set out in Article 13, 14, and 21 of the EU General Data Protection Regulation (GDPR), we would like to inform you about the processing of your personal data and your data protection rights. Which data we process and how we use it in your individual case strongly depends on the services requested or agreed. In order to ensure that you are fully informed about the ways in which we process your personal data for the purpose of contract performance or for making necessary preparations before concluding a contract, please take note of the following information on the handling of your data:
Who is responsible for the processing of your personal data?
The Data Controller responsible for the processing of your personal data is Deutsche Saatveredelung AG, with headquarters in Germany, represented by the Executive Board: Dr. Eike Hupe and Clive Krückemeyer. To comply with our legal obligation, we have designated a Data Protection Officer (DPO) who is at your disposal if you have any questions about data protection. The DPO is available at the following address:
Siemens, B.A. Firma: Ecoprotec GmbH, Pamplonastraße 19, 33106 Paderborn.
The data protection team of Deutsche Saatveredelung AG can be contacted at: datenschutz@dsv-saaten.de
What personal data do we process?
We only process personal data that is relevant for the conclusion of a contract or for making necessary preparations before concluding a contract. This includes general data concerning your person or other individuals working at your company (name, address, contact details, etc.), as well as any other data which you provide to us within the scope of contract conclusion.
We process your personal data in compliance with the provisions set out in the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), to the extent necessary for the conclusion, execution, and performance of a contract, as well as for taking necessary steps prior to entering into a contract. Where personal data is required for the initiation or execution of a contract or for taking necessary steps prior to entering into a contract, the processing is in our legitimate interest in accordance with Article 6 Paragraph 1 lit. b GDPR. If you expressly consent to the processing of your personal data for certain purposes (e.g. transfer to a third party, evaluation for marketing purposes or promotional approach by e-mail), your consent is the legal basis for processing pursuant to Article 6 Paragraph 1 lit. a GDPR. You can withdraw your consent with effect for the future at any time. To the extent necessary and legally possible, we process your data beyond the original contractual purposes in order to comply with legal obligations to which we are subject in accordance with Article 6 Paragraph 1 lit. c GDPR. In addition, processing may take place in order to protect our legitimate interests or those of another natural person, as well as to establish, exercise or defend a legal claim in accordance with Article 6 Paragraph 1 lit. f GDPR. If applicable and to the extent prescribed by law, we will inform you separately on the legal basis of legitimate interests.
We process personal data which we receive from you within the scope of establishing contact or the conclusion of a contract, or while taking necessary steps prior to entering into a contract, or personal data which you submit to us e.g. via web contact forms, e-mail addresses used for contacting us, etc.
We only make your personal data available to areas and persons within our company to the extent necessary for ensuring compliance with contractual and legal obligations and exercising our legitimate interests. Furthermore, we may only transfer your personal data to affiliated companies on the legal basis of the purposes stated. Your personal data is processed on our behalf by Data Processors with which we have entered into order processing contracts in accordance with Article 28 GDPR. In these cases, we ensure that your personal data is processed in accordance with the requirements of the GDPR. The following categories of recipients apply in this context: Internet service providers, cloud service providers, as well as print service providers and media agencies. Apart from this, we only transfer data to third-party recipients to the extent permitted by law or prescribed by legal regulations, or if the transfer is necessary for the execution and thus the performance of a contract, or for taking steps at your request prior to entering into a contract, if you have consented to the transfer, or to the extent that we are entitled to provide information. If these requirements are fulfilled, recipients of personal data may include external auditors, public bodies and institutions (e.g. tax and revenue offices, police, supervisory authorities, and prosecuting authorities) in the case of a legal or regulatory obligation; or recipients which require personal data for contract conclusion or performance, such as financial or transport service providers; as well as further data recipients, provided that you have consented to the data transfer.
Furthermore, personal data may only be transferred to recipients outside the European Economic Area (EEA) or an international organisation to the extent necessary for the execution, and thus the performance of the contract; or at your request for taking necessary steps prior to entering into a contract, provided that the transfer is prescribed by law, or you have granted us consent. In these cases, recipients may include, for example, local agencies, airlines, and hotels within the scope of travel management.
In so far as necessary, we process and store your personal data for the duration of our business relationship and for the fulfilment of contractual purposes, including the initiation and execution of a contract. In addition, we are obliged to comply with various retention and documentation obligations set out in laws and regulations, such as the German Commercial Code (Handelsgesetzbuch, HGB) and the German Tax Code (Abgabenordnung, AO). The retention and documentation periods defined in these codes range from two to ten years. The retention period also depends on statutory limitation periods which can vary between the usual three years in accordance with §§ 195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, BGB) and in certain cases up to thirty years.
In accordance with Article 15 GDPR, you have the right to obtain information on the storage of your personal data, on the purposes of the processing, on any transfer to other bodies, and on the duration of storage. If you become aware that any of your personal data is incorrect or inaccurate, or if its storage is no longer required for the purposes for which it was originally collected, you have the right to request the rectification (Article 16 GDPR), erasure (Article 17 GDPR), or restriction of the processing (Article 18 GDPR) of your data. Furthermore, you can exercise your right to data portability in accordance with Article 20 GDPR.
Where your personal data is processed to protect legitimate interests in accordance with Article 6 Paragraph 1 lit. f GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data at any time on grounds relating to your particular situation. In this case, we will no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. In individual cases, we may process your personal data for direct marketing purposes. You have the right to object to the processing of your personal data for such marketing at any time. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. If you have any questions concerning your rights and the exercise of your rights, please do not hesitate to get in touch with your contact partner or the Data Protection Officer of our company.
You provide personal data to us on a voluntary basis in order to enable decisions concerning contract conclusion, as well as for the performance of a contract or for taking necessary steps prior to entering into a contract. However, as a prerequisite for making contractual decisions, it is necessary that you provide all the personal data we require for concluding and performing a contract, or for taking necessary steps prior to entering into a contract.
We do not generally rely on automated decision-making in accordance with Article 22 GDPR when it comes to concluding, performing or executing a business relationship or for taking necessary steps prior to entering into a contract. Should we decide to apply this procedure in individual cases, we will inform you separately and seek your consent if it is required to do so by law.
Complaints about the processing of your personal data
If you have any complaints or questions concerning the processing of your personal data and information, please do not hesitate to contact us. You can write to the Data Protection Officer of our company at the contact address below.
In addition, you have the right to lodge a complaint with the competent data protection supervisory authority: LDI NRW, PO box 200444, D-40102 Düsseldorf
Deutsche Saatveredelung AG, Lippstadt, 22nd September 2021