Name and Address of the Responsible Company
The entity responsible for the purposes of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
INTERMAIL AG
Flughafenstraße 9
64347 Griesheim
+49-6155-8225–0
info@intermail.ag
www.intermail.ag
Contact Details of the Data Protection Officer
The data protection officer of the responsible entity is:
Mr. Jürgen Rosenow
All-in-Media GmbH Company for Data Protection and Data Security
Markwaldstrasse 11
63073 Offenbach am Main
Tel. +49 69 5699922-0
www.all-in-media.com
datenschutz@intermail.ag
Purpose of Data Collection, Data Processing, or Data Use
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG-neu).
We would like to point out that for better readability, the generic masculine might be used more frequently. No discrimination, of any kind, against employees is intended in this respect.
As long as you have given us direct or implied consent (e.g., contract) to process personal data for specified, previously mentioned purposes, the legality of this processing is based on the given consent.
The collection, processing, and storage of your personal data are carried out only for the following stated purposes and conditions:
- As far as necessary, we process personal data beyond the actual fulfillment of the purpose to safeguard legitimate interests of ours or based on legal requirements.
Examples of Processing Purposes:
- Customer, supplier, prospect, and order management
- Creditor and debtor customer, supplier, prospect, and order management
- Creditor and debtor accounting
- Communication with our customers, prospects, and suppliers
- Tax-related requirements
- Newsletter registration (e.g., on the website)
- Registration form for an event, registration form for further training, response card for competitions
- Video surveillance of sensitive areas to maintain our property rights
Right to Object
This consent to the use and storage is voluntary or implied and can be revoked at any time in the future in writing, in accordance with Art. 21 Para. 4 in conjunction with Para. 1 and 2 of the GDPR, unless there are contractual or legal requirements that contradict this.
Revoking consent does not affect the legality of the data processed up to the point of revocation. You can find the contact details for submitting the revocation at the top under the details of the responsible entity.
Data Transfer to Recipients
We use the support of service providers bound to us by a data processing agreement according to Art. 28 GDPR, such as IT service providers, software suppliers. When conducting video conferences, we use providers that comply with the GDPR. Their video servers are located in the EU or in countries within the scope of the GDPR. However, due to technical reasons, it can occasionally happen that data is transferred to third countries through the video conference provider's management. By participating in the video conferences, you accept these rules.
If video conferences are initiated by customers/suppliers to us, the customers/suppliers are the responsible entities under the GDPR.
Otherwise, there is no transmission to third parties, unless they are bound to us by a data processing agreement according to Art. 28 GDPR or there is a legal basis for this.
Duration of Storage
Unless a given consent is revoked, storage is considered indefinite in time according to Art. 6 Para. 1 a, b, c, f GDPR.
Once the respective processing and usage purpose has ceased, the relevant legal retention periods apply.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the aforementioned interest, then Art. 6 Para. 1 f GDPR serves as the legal basis for further processing.
Legal Basis for Processing Personal Data
Whenever we obtain the consent of the data subject for personal data processing activities, Art. 6 Para. 1 a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 Para. 1 b GDPR serves as the legal basis. This also applies to processing operations required for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 (1) c GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the aforementioned interest, Article 6 (1) f GDPR serves as the legal basis for the processing.
What rights do you have?
If personal data concerning you is processed, you are a data subject as defined by the GDPR and you have the following rights vis-à-vis the controller:
Right to Information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information from the controller:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
- the planned duration of the storage of the personal data concerning you or, if specific details are not possible, criteria for determining the duration of storage;
- the existence of a right to rectification or deletion of personal data concerning you, a right to limit the processing by the controller, or a right to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- all available information on the source of the data if the personal data is not collected from the data subject;
You have the right to request information on whether personal data concerning you is transferred to a third country or an international organisation. In this context, you can request to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
Right to Correction
You have the right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.
Right to Restrict Processing
Under the following conditions, you can request the restriction of the processing of personal data concerning you:
- if you dispute the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
- the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
- the controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
- if you have objected to the processing pursuant to Article 21(1) GDPR and it is not yet clear whether the controller's legitimate reasons outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be processed – apart from its storage – with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the processing has been restricted under the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
Right to Deletion
Obligation to Delete
You can request the controller to delete personal data concerning you immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based according to Art. 6 para. 1 a or Art. 9 para. 2 a GDPR, and there is no other legal basis for the processing.
- You object to the processing according to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing according to Art. 21 para. 2 GDPR.
- The personal data concerning you were processed unlawfully.
- The deletion of the personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the member states to which the controller is subject.
- The personal data concerning you were collected in relation to information society services offered according to Art. 8 para. 1 GDPR.
Deletion of Information with Third Parties
If the controller has made the personal data concerning you public and is obliged to delete them according to Art. 17 para. 1 GDPR, he shall take reasonable measures, taking into account available technology and implementation costs, including technical measures, to inform those responsible for data processing who process the personal data, that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
Exceptions to Deletions
The right to deletion does not apply insofar as the processing is necessary
- for the exercise of the right to freedom of expression and information;
- to fulfil a legal obligation that requires processing under the law of the Union or the member states to which the controller is subject, or to perform a task that is in the public interest or is carried out in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health according to Art. 9 para. 2 h and i and Art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 para. 1 GDPR, insofar as the right mentioned in section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
- for the establishment, exercise or defence of legal claims.
Right to be Informed
If you have asserted the right to correction, deletion or restriction of processing against the controller, he is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed by the controller about these recipients.
Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without interference from the controller to whom the personal data was provided, provided that
- the processing is based on consent according to Art. 6 para. 1 a GDPR or Art. 9 para. 2 a GDPR or on a contract according to Art. 6 para. 1 b GDPR and
- the processing is carried out using automated methods.
In exercising this right, you also have the right to ensure that the personal data concerning you is transmitted directly from one responsible party to another, insofar as this is technically feasible. The freedoms and rights of other people must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.
Right to Object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of information society services – regardless of Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.
Right to Revoke the Data Protection Declaration of Consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Automated Decision in Individual Cases Including Profiling
As a rule, no automated decision-making within the meaning of Art. 22 DSGVO takes place.
Right to Complain to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the DSGVO.
The supervisory authority with which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.