Information to be provided in accordance with Art. 13 GDPR – prospective and existing customers

Name and contact details of the data protection officer (Art. 13 Par. 1 b GDPR)
ENSECUR GmbH
Sophienstr. 25
70178 Stuttgart, Germany

Person responsible: Mr Julian Häcker
E-Mail: dsb-nexmart@ensecur.de

Purposes of and legal basis for the data processing (Art. 13 Par. 1 c GDPR)

• Handling and processing of inquiries from prospective customers (Art. 6 Par. 1 f GDPR*)
• Checking of sanction lists (Art. 6 Par. 1 c GFPR in connection with Council Regulation (EC) No 2580/2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism and Council Regulation (EC) No 881/2002 imposing certain specific restrictive measures directed against certain persons and entities associated with Usama bin Laden, the Al-Qaida network and the Taliban)
• Preparation of quotations for prospective customers (Art. 6 Par. 1 f GDPR*)
• Conclusion of sales contracts (Art. 6 Par. 1 f GDPR*)
• Compliance with a legal obligation (Art. 6 Par. 1 c GDPR)
• Support of operational processes by service providers (Art. 28 GDPR)
• Order processing and delivery (Art. 6 Par. 1 c GDPR)
• Handling of complaints (Art. 6 Par. 1 c GDPR)
• Where necessary, the submission of an inquiry to a credit reference agency (Art 6 Par. 1 f GDPR)

Interests of the controller in the balance of interests (Art. 13 Par. 1 d GDPR*)

• Fulfilling legal obligations, in particular in accordance with Section 147 Par. 1 of the German Tax Code
• Exercising legal rights and defending legal rights in the event of legal disputes
• Guaranteeing the company’s IT security and IT operations
• Preventing criminal offences
• Taking measures for the purpose of business management and the further development of services and products

Recipients or categories of recipients of the personal data (Art. 13 Par. 1 e GDPR)
Authorities, banks, public auditors, software manufacturers, associated companies, disposal service providers.

Transfer to a third country (Art. 13 Par. 1 f GDPR)
No data is transferred to a third country.

Period for which data is stored in accordance with legal data storage obligations (Art. 13 Par. 2 a GDPR)
Personal data is normally deleted within a period of ten years from the termination of the contractual relationship, or earlier if the prospective customer does not become an actual customer.

Right to request access to and rectification or erasure of personal data or restriction of processing, or to object to processing as well as the right to data portability (Art. 13 Par. 2 b GDPR)
As a data subject, you have the right, at all times, to access, correct and delete your data and to restrict its processing. You also have the right to data portability. Please contact the data controller using the contact details provided for this purpose.

Existence of a requirement in relation to the provision of personal data (Art. 13 Par. 2 e GDPR)
The data collected is required for the purpose of processing inquiries from prospective customers, preparing quotations, concluding sales contracts and conducting business operations.