Customer Relation Management (CRM) - Obligation to inform when collecting personal data acc. to Art. 13 and Art. 14 GDPR


Data Processor

Responsible:

Herbert Waldmann GmbH & Co. KG

Address:

Peter-Henlein-Str. 5
78056 Villingen-Schwenningen

Phone:

+49 7720-601-0

Fax:

+49 7720-601-290

E-Mail:

info@waldmann.com

Web:

www.waldmann.com

CEO:

Christoph Waldmann
Daniel Hug
Ronny Lindskog

Data Protection Officer:

vimopro GmbH, E-mail: datenschutz@waldmann.com




Scope of processing

Within our CRM system, the following categories of personal data are processed:

  • Address data (name, street, house number, postal code, city, country)

  • Contact data (name, telephone, fax, mobile, e-mail, department, function, role)

  • Data of business transactions (correspondence, e-mails, inquiries, offers, project data, conditions, turnover, evaluations, comments)

The personal data is collected either from the data subject or it originates from the data rented from Bisnode. Bisnode is an economic information service, the personal data comes from publicly available sources.

The data will be archived for 2 years following inactivity. The data will be available in the archive for another 5 years, after which it will be deleted.

The personal data is processed for the following purposes:

  • Managing customer files / prospect files / project files

  • Recording of customer / prospect requests

  • Handling of correspondence with customers / prospects and project participants, especially in the pre-sales process up to the placement of orders

The legal basis for the processing are contracts or the implementation of pre-contractual measures as well as legitimate interest.

Disclosure and foreign elements

In order to be able to provide professional sales support to international companies and groups, the data of these customers is transmitted to the subsidiaries in the EU and Switzerland.


Rights of data subjects

You have the right to information, correction, deletion, limitation of processing or a right to object to processing. You also have the right to complain to the data protection supervisory authority if you believe that the processing of your personal data is unlawful.