principles of data processing at pvwerk GmbH
You have come to this page via a link because you would like to find out about our handling of (your) personal data. In order to comply with our information obligations under Art. 12 et seq. of the General Data Protection Regulation (DSGVO), we are pleased to provide you below with our information on data protection:
We assure you that our data processing systems are secured by technical and organizational measures against access, alteration or dissemination of your data by unauthorized persons, as well as against loss and destruction.
Who is responsible for data processing?
The responsible party in terms of data protection law is
pvwerk GmbH
Kirchenpauerstraße 26
20457 Hamburg
Contact: Florian Gösch, Managing Director
Phone: +49 (0)40 75 66 449-945
Fax: +49 (0)40 75 66 449-949
E-mail: info@pvwerk.de
You can find more information about our company, details of the persons authorized to represent us and also other contact options in our imprint on our website: https://www.pvwerk.de/datenschutz
What data of yours is processed by us? And for what purposes?
If we have received data from you, then we will process them in principle only for the purposes for which we have received or collected them.
A data processing for other purposes is only considered if the legal requirements necessary in this respect in accordance with Art. 6 para 4 DSGVO. Any information obligations under Art. 13 (3) DSGVO and Art. 14 (4) DSGVO, we will of course comply in the case.
If you instruct us/we instruct you, we collect the following information:
- Address, title, first name, last name
- Address
- Email address
- Phone number (landline and/or mobile, if desired)
- if applicable. Fax number (if available & desired)
- Account data
In addition, all information is collected that is necessary for the performance of the contract with you.
The collection of personal data takes place,
- in order to be able to identify you as a customer/supplier/service provider;
- in order to be able to fulfill our contractual obligations to you;
- in order to be able to meet our legal obligations;
- for correspondence with you;
- for invoicing or. if necessary, within the framework of the dunning process;
- to enforce any claims against you.
On what legal basis is this based?
The legal basis for the processing of personal data is in principle - unless there are still specific legal provisions - Art. 6 DSGVO. In particular, the following possibilities come into consideration here:
- Consent (Art. 6 para. 1 lit. a) DSGVO)
- Data processing for the performance of contracts (Art. 6 para. 1 lit. b) DSGVO)
- Data processing on the basis of a balance of interests (Art. 6 para. 1 lit. f) DSGVO)
- Data processing for compliance with a legal obligation (Art. 6 para. 1 lit. c) DSGVO)
If personal data is processed on the basis of consent from you, you have the right to revoke consent at any time with effect for the future to us.
If we process data on the basis of a balancing of interests, you have the right as a data subject to object to the processing of personal data, taking into account the requirements of Art. 21 DSGVO.
If you wish to exercise your right to object, a notification in text form is sufficient. You are therefore welcome to write to us, send a fax or contact us by e-mail. You can find our contact details at the top of this privacy policy or in our website imprint.
How long is the data stored?
We process the data as long as this is necessary for the respective purpose.
In so far as there are statutory retention obligations, the personal data concerned is stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether there is a further necessity for processing. If there is no longer a necessity, the data is deleted.
In principle, we carry out an examination of data towards the end of a calendar year with regard to the need for further processing. Due to the amount of data, this check is carried out with regard to specific types of data or purposes of processing.
Of course, you can request information about the data we have stored about you at any time (see below) and, in the case of non-existing necessity, request deletion of the data or restriction of processing.
To which recipients is the data disclosed?
In addition to pvwerk GmbH as the responsible party, other recipients of your data include, for example, affiliated companies, postal service providers, tax advisors, providers of software and service solutions, cloud providers, etc. Recipients of your data. Where necessary, order processing contracts have been concluded with the recipients in accordance with Art. 28 DSGVO. We will be happy to inform you about the specific recipients of your data.
A transfer of your personal or personal data will only take place if
- you have given us your express consent pursuant to Art. 6 para. 1 sentence 1a) DSGVO for this,
- this pursuant to Art. 6 para. 1 sentence 1b) DSGVO for the settlement or fulfillment of our obligations under a contract with you is required,
- we are obliged under the provision of Art. 6 sentence 1c) DSGVO,
- the disclosure is necessary for the assertion, exercise or defense of legal claims (Art. 6 para 1 sentence 1f) DSGVO). The prerequisite is that there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
Where is the data processed?
In principle, the processing of your data takes place in Germany as well as in other countries within the EU. If your personal data is processed in a country outside the EU or if recipients of your personal data are located outside the EU where the level of data protection may not be the same as in the EU, the following applies: we ensure that these are only countries for which the EU Commission has decided that they have an adequate level of data protection. In cases where the recipient country's level of data protection is not comparable to that of the EU, we comply with the requirements developed by the EU and use so-called standard contractual clauses. These are available on request via one of the above-mentioned contact options.
Automated decision-making, implementation of profiling
For the establishment and implementation of the business relationship, we generally do not use exclusively automated decision-making in the sense of Art. 22 DSGVO.
Your rights as a "data subject"
You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to correction or deletion or to restriction of the processing, insofar as you are entitled to this by law.
Furthermore, you have a right of objection against the processing within the framework of the legal requirements. The same applies to a right to data portability.
Right of objection
As far as we process personal data to protect our legitimate interests that prevail in the context of a balancing of interests, you can object to this processing with effect for the future:
- If the processing is for direct marketing purposes, you can exercise this right at any time.
- If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.
Right to complain
You have the right to complain about the processing of personal data by us to a data protection supervisory authority.
Our data protection officer
We have appointed an external data protection officer. This person can be reached at the above address of the person responsible with the address addition "personal - confidential for the data protection officer" as well as at datenschutz@enerparc.com.
Hamburg, 01.11.2022