Privacy Policy

1. Who is responsible for data processing and whom can I turn to?
Responsibility for data processing lies with:
Bamaco Parts Consulting GmbH
Heiligenbaumstrasse 40
47249 Duisburg
Germany
Telephone +49 203 3481883-0
E-Mail: datenschutz@bamaco.de
Contact data of the Data Protection Officer:
Herr Puszamszies
info@bamaco.de
E-Mail: datenschutz@bamaco.de

2. What kind of sources and data do we use?
We only process data received from you within the scope of our business relationship.
In concrete terms this means that we process the following data:
- master data concerning your contract (eg name, address, phone number, fax number, E-mail, customer and/or supplier number, VAT ID number, tax number, bank data)
- Data in the context of executing our contractual relationship

3. For which purposes and on which legal basis is my data processed?
We process your personal data taking into consideration all data-protection-relevant provisions of the General Data Protection Regulation of the EU (GDPR), the Federal Data Protection Act (BDSG) and all relevant laws and Acts.

a. For the fulfilment of contractual obligations
(Art. 6 sec. 1 b GDPR)
We process your data in order to execute our contracts with you. The individual data processing purposes depend upon the contractual basis.

b. Within the framework of the weighing of interests
(Art. 6 sec. 1 f GDPR)
In individual cases we process your data to protect our legitimate interests or those of third parties (eg authorities). This applies in particular in the context with the investigation of criminal offences (legal basis: Art. 6 sec. 1 f GDPR in conjunction with § 26 sec. 1 sentence 2 GDPR) and/or the exchange of data for administration purposes within the corporation.

c. Due to your consent
(Art. 6 sec. 1 a GDPR)
As far as you have consented to us processing your personal data, your relevant declaration of consent forms the legal basis for the processing tasks mentioned therein.
Information on the implementation of the General Data Protection Regulation of the EU (GDPR)
You can withdraw your declarations of consent at any time with effect for the future. This also applies to any declarations of consent you have issued prior to the coming into force of the GDPR, ie prior to 25 May 2018. Such revocations only have effect for the future.

d. Due to legal requirements
(Art. 6 sec. 1 c GDPR)
We are subject to various legal obligations, ie legal requirements.
In so far as personal data is processed in accordance with Art. 9 sec. 1 GDPR, this serves the right of social security and social protection within the scope of exercising rights and/or the fulfilment of legal obligations.

4. Whom is my data passed on to?
Within our company only such persons and functions receive your personal data that require them for the completion of our contractual and legal obligations.
Moreover, the following persons/functions may receive your data:
Processors used by us (Art. 28 GDPR), in particular in the fields of IT services, credit checks, logistics and printing services who process your data for us in accordance with our instructions.

5. How long is my data stored?
Your personal data is deleted as soon as it is no longer required for the fulfilment of our contractual relationship.
As far as necessary we process your personal data for the duration of our business relationships which also comprises the initiation and execution of a contract.
In addition, we are subject to a number of storage and documentation obligations (eg German Commercial Code, German Civil Code). The limitation periods regarding storage and documentation specified therein are up to ten years, in some cases even up to thirty years.

6. What kind of data is transferred to a third country?
Your personal data is not transferred to a third country (states outside the European Economic Region) unless this is required for the fulfilment of the contract.

7. Are you obliged to provide any data?
Within the scope of our business relationship we have to provide such personal data as is required for the initiation and execution of a business relationship and the fulfilment of the duties connected thereto or as is required by law.
Without such data we will regularly have to refuse the conclusion of a contract or execution of an order or we will be unable to execute an existing contract and have to cancel it if necessary.

8. Would you like to raise a complaint in connection with the way your data is handled?
You can contact our Data Protection Officer or a Data Protection Supervisory Authority. Your competent Data Protection Authority is:
Die Landesbeauftragte für Datenschutz
NRW Kavalleriestraße 2-4
40213 Düsseldorf

9. What are my data protection rights?
According to the relevant legal conditions of the GDPR, valid in the version of 25 May, you are entitled to the correction, deletion and limitation of the distribution and transferability of your personal data. In addition, you have a right of appeal with the data protection authorities.
You are entitled to object (right of objection) to the processing of your personal data for the purpose of direct advertising at any time without having to give any reason.
You are entitled to demand being informed at any time (right to information) about the data on your person stored by us.
If we process your data to safeguard justified interests, you can object to such processing for reasons which may arise from your special situation.
In this event we shall no longer process your personal data unless we can prove that compelling reasons exist which demand the processing of personal data and which prevail over your interests, rights and freedoms, or unless processing your personal data serves to assertion, exercising or defence of legal claims.