Below, we inform you about our processing of your personal data and your rights, which you can assert against us according to the GDPR.

1. Responsible body

Trading as: MUNK GmbH

Address: Rudolf-Diesel-Str. 23

Postcode / town: 89312, Günzburg, Germany

Telephone:          +49 (0)8221/361601

E-mail: info@munk-group.com
URL: www.steigtechnik.de

You will find further information on our company, details of the persons authorised to represent us and also further contact details in the Legal Notices section of our website: www.steigtechnik.de

The contact details of our data protection officer:

Stefan Keller
E-mail: stefan.keller@machcon.com

1. Purposes and legal basis of the processing

    

The data we receive from you will only be processed for the purposes for which you have transmitted it to us. Processing for any other purposes will only be considered if the legal requirements as specified in Article 6 (4) GDPR are met. We will of course comply with the resulting information obligations under Art. 13 (3) and Art. 14 (4) GDPR.

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG).

If you give us your express consent to process your personal data for specific purposes, the lawfulness of the processing is based on Art. 6 (1) lit. a GDPR. A given consent can be revoked at any time, with effect for the future. Should the consent also relate to the processing of special categories of personal data in accordance with Art. 9 GDPR, we will expressly inform you of this in advance. If it is necessary to provide personal data in the context of the initiation or execution of a contractual relationship or in the context of the implementation of pre-contractual measures, this is legitimised by Art. 6 (1) lit. b GDPR.

If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations in accordance with Art. 6 (1) lit. c DSGVO. In addition, processing may be carried out to protect our legitimate interests or the legitimate interests of third parties in accordance with Art. 6 (1) lit. f GDPR. We shall inform you separately of this stating the legitimate interest, if this is required by law. If the processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR in order to safeguard legitimate interests, you have the right, pursuant to Art. 21 GDPR, to object to the processing of such data at any time for reasons arising from your particular situation. In this case we will no longer process this data, unless we can prove compelling reasons for processing worthy of protection. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.

1. Duration of data storage

We process the data as long as this is necessary for the purpose in question.

As soon as your data is no longer required for the above-mentioned purposes or you revoke your consent, we will delete the data.

Storage of your data beyond the mentioned purposes is only carried out in those cases in which we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The time limits for storage or documentation prescribed therein are two to ten years.

Ultimately, the period of storage is also based on the statutory periods of limitation, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), generally amount to three years, but can be up to thirty years in certain cases.

In principle, we carry out an examination of data towards the end of a calendar year with regard to the need for further processing. Given the volume of data, this check is carried out with regard to specific types of data or purposes of processing.

1. Recipients of the data

We pass on your personal data within our company exclusively to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.

Furthermore, your personal data will be processed on our behalf on the basis of contracted data processing agreements in accordance with Art. 28 GDPR. In this case, we guarantee that the processing of personal data shall occur in accordance with the provisions of the GDPR. In this case, the categories of recipients are: dealers, logistics service providers, software suppliers, lawyers as well as employees from our company.

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information.

1. Categories of personal data

Only data relating to the establishment of the contract or pre-contractual measures is processed. This may be general data about you or people within your company, as well as any other data that you communicate to us in the context of establishing the contract.

1. Your rights

Every data subject has the following rights:

• Right to information pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to deletion pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to notification pursuant to Art. 19
• Right to the transferability of data pursuant to Art. 20 GDPR

To exercise these rights, please contact: datenschutz@steigtechnik.de

According to Art. 77 GDPR, you also have the right to complain to the data protection supervisory authority. This right is without prejudice to any other administrative or judicial recourse.

In particular, you have a right of objection under Art. 21 (1) and (2) GDPR against the processing of your data in connection with a direct advertising campaign, if this is based on a balancing of interests.

1. Transmission to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary or legally required for the execution of the contractual relationship or if you have given us your consent.

1. Sources of data

The processing of personal data is carried out on the basis of information which you have given us when contacting us or establishing a contractual relationship or within the framework of pre-contractual measures or which you have provided through participation in Internet portals (OXOMI, nexMart, pCon, Meplato).

1. Provision of personal data

As a rule, the provision of personal data for the purpose of establishing, implementing or fulfilling a contract
or for pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide information regarding personal data. Please be aware, however, that this information is generally required for reaching a decision concerning conclusion of a contract, for fulfilment of a contract or for pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision in the context of contractual measures.

1. Automated decision-making

We do not use purely automated processing to make a decision.