Data protection notice for clients, contractual partners, and interested parties
The purpose of the following data protection notice is to outline how your personal information is collected and processed by our company. Moreover, we would like to explain why we collect what data, and what rights you have in this context.
Data collection is the responsibility of KDA Marktforschung GmbH (see address in the site notice).
Method and purpose of using personal information
Within the scope of our collaboration, we process the following information:
All personal information that you transmit to us in the context of a collaboration or future collaboration, or that we require for a collaboration and request from you. These include e.g. your contact details and your bank details, if applicable.
Legitimacy of data processing and period of storage
In accordance with Art. 6 paragraph 1, letter b of GDPR, data processing is carried out on your request and is required for the mentioned purpose for adequate processing and mutual fulfilment of our business relationship.
The personal data that we collect are stored until the legal record retention period expires (10 years max. after the end of the calendar year in which the collaboration was terminated) and then deleted, unless we are obligated to store them for a longer period due to retention obligations and documentation requirements relating to fiscal and commercial law.
Insofar as the processing of personal data is required for the fulfilment of a legal obligation of our company – especially if statutory – the legal basis is provided by Art. 6 paragraph 1, letter c of GDPR.
We also process your data in order to protect our legitimate interest or that of third parties, in accordance with Art. 6 paragraph 1, letter f of GDPR. This includes e.g. enforcing a claim in legal disputes.
Transmission of data to third parties
Within our company, access to your data is only granted to those members of staff who require it to fulfil our contractual and/or legal obligations, i.e. to those who oversee the processing of the contract.
In accordance with the legal basis provided by Art. 6 of GDPR, your personal data are passed on to third parties insofar as this is required for fulfilling our business relationship and contractual obligations within the scope of our business purpose with you. In this context, these third parties may also include service providers and freelance collaborators (e.g. tax consultants) commissioned by us.
Transferred data may only be used by third parties for the mentioned purposes.
Furthermore, it may be necessary to transmit your personal data to additional recipients in exceptional cases, insofar as this is required for the fulfilment of legal obligations.
You have the following rights under the EU’s General Data Protection Regulation:
- You may withdraw your given consent at any time by contacting the responsible project manager. In case of a revocation, we may still process the concerned data insofar as this is required in order to fulfil legal obligations.
- You may request information about your personal data processed by us, particularly about the purpose of processing, the category of personal data and the categories of recipients to whom your data have been disclosed.
- You may immediately request the rectification or completion of your personal data stored by us.
- You may request that we delete your personal data stored by us.
- You may request that we restrict our use of your personal data.
- You have the right to receive the personal data that you have provided us with in a structured, standard, and machine-readable format, and to request a transfer to another responsible party.
- You have the right to contact our data protection officer Hans Dethlefsen (email@example.com, Tel.: 069-973077-0) or to file a complaint with the competent regulatory authority for data protection.
- You have the right of objection. Provided that your personal data are processed based on a legitimate interest pursuant to Art. 6 paragraph 1, letter f of GDPR, you have the right to file an objection against the processing of your personal data, as per Art. 21 of GDPR, insofar as there are reasons arising from your particular situation.