Since 1981 | 3,500 Trade Partners | 35 Countries | 180 Employees Internationally
Data protection For our customers and suppliers
Information about the processing of your personal data
Care and transparency form the basis for a trusting cooperation with our customers and suppliers. Therefore, we inform you about how we process your data and how you can exercise your rights under the General Data Protection Regulation. Which personal data we process and for what purpose depends on the respective contractual relationship.
1. Who is responsible for data processing?
The controller is:
killtec Sport- und Freizeit GmbH
Zimmererstraße 5
21244 Buchholz
Germany
Managing Directors: Marcus Killer, Sven Killer
2. How can you reach the data protection officer?
You can reach our data protection officer at:
killtec Sport- und Freizeit GmbH
Data Protection Officer
Zimmererstraße 5
21244 Buchholz
Germany
datenschutz@killtec.de
3. Which of your personal data do we use?
Inquiries, the creation or obtaining of offers, and the conclusion of contracts involve the processing of your personal data. In addition, we process your personal data for purposes such as fulfilling legal obligations, safeguarding a legitimate interest, or based on your given consent.
Depending on the legal basis, these include the following categories of personal data:
– First name, last name
– Address
– Communication data (telephone, email address)
– Contract master data, in particular contract number, term, notice period, type of contract
– Billing data / Sales data
– Creditworthiness data
– Payment data / Account information
– Account information, in particular registration and logins
In the context of contract initiation and/or an existing business relationship, we also access data provided to us by third parties. Depending on the type of contract, these include the following categories of personal data:
– Creditworthiness information (from credit agencies)
4. From what sources do the data originate?
We process personal data that we receive from our customers, service providers, and suppliers. We also receive personal data from the following sources:
– Credit agencies
– Publicly accessible sources: commercial or association registers, debtor directories, land registers
– Other group companies
5. For what purposes do we process your data and on what legal basis?
We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as all other relevant laws.
5.1 Based on your consent (Art. 6 para. 1 a GDPR)
If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, this consent forms the legal basis for the processing of this data.
In the following cases, we process your personal data based on your given consent:
– Sending an email newsletter
– Personalized newsletter tracking
– Market research (e.g., customer satisfaction surveys)
– Marketing and advertising – creation of customer profiles
– Publication of a customer / supplier reference (name and image)
5.2 For the fulfillment of a contract (Art. 6 para. 1 b GDPR)
We use your personal data for the performance of the purchase contract / order.
Within this contractual relationship, we will process your data in particular for the performance of the following activities:
– Contract-related contact
– Contract management
– Customer support / customer service
– Customer and supplier management
– Warranty management
– Accounts receivable management
– Contract termination management.
Further information on the purposes of data processing can be found in the respective contract documents and general terms and conditions.
5.3 For the fulfillment of legal obligations (Art. 6 para. 1 c GDPR)
As a company, we are subject to various legal obligations. The processing of personal data may be necessary to fulfill, in particular, the following obligations:
– Control and reporting obligations
– Creditworthiness, age, and identity checks
– Prevention / defense against criminal acts
5.4 Based on a legitimate interest (Art. 6 para. 1 f GDPR)
In certain cases, we process your data to safeguard a legitimate interest of ours or of third parties.
– Direct marketing or market and opinion research
– Central customer data management within the group
– Measures for building and facility security
– Video surveillance to enforce house rules
– Consultation with and data exchange with credit agencies to determine creditworthiness or default risks
– Ensuring IT security and IT operations
6. To whom will your data be passed on?
To fulfill our contractual and legal obligations, your personal data will be disclosed to various public or internal bodies, as well as external service providers.
– Companies within the group
– External service providers:
– IT service providers
– Service providers for file and data destruction
– Printing services
– Telecommunications
– Payment service providers
– Consulting
– Marketing or sales service providers
– Credit agencies
– Dealers
– Telephone support service providers
– Web hosting service providers
– Letter shops
– Auditors
– Public bodies:
Furthermore, we may be obliged to transfer your personal data to other recipients, such as authorities for the fulfillment of legal notification obligations:
– Tax authorities
– Customs authorities
– Social security institutions
7. Will your data be transferred to countries outside the European Union (so-called third countries)?
For the processing of your data, we do not use service providers located in third countries outside the European Union.
8. How long will my data be stored?
We store your personal data for as long as it is necessary to fulfill our legal and contractual obligations.
Should the storage of data no longer be required for the fulfillment of contractual or legal obligations, your data will be deleted, unless further processing is necessary for the following purposes:
– Fulfillment of commercial and tax retention obligations. This includes retention periods from the German Commercial Code (HGB) or the German Tax Code (AO).
The retention periods are up to 10 years.
– Preservation of evidence within the framework of statutory limitation periods. According to the limitation periods of the German Civil Code (BGB), these limitation periods can in some cases be up to 30 years; the regular limitation period is three years.
9. What rights do you have in connection with the processing of your data?
Every data subject has the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to object according to Art. 21 GDPR, and the right to data portability according to Art. 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to erasure.
9.1 Right to object
You can object to the use of your data for advertising using electronic mail at any time, without incurring any costs other than the transmission costs according to the basic tariffs.
What right do you have in the case of data processing based on a legitimate or public interest?
According to Art. 21 para. 1 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 e GDPR (data processing in the public interest) or Art. 6 para. 1 f GDPR (data processing for the safeguarding of a legitimate interest), including profiling based on these provisions.
In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
What right do you have in the case of data processing for direct marketing purposes?
If we process your personal data for direct marketing purposes, you have the right, according to Art. 21 para. 2 GDPR, to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
9.2 Withdrawal of consent
You can withdraw your consent to the processing of personal data at any time. Please note that the withdrawal is only effective for the future.
9.3 Right to information
You can request information on whether we have stored personal data about you. If you wish, we will inform you what data it is, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored, and what other rights you have with regard to this data.
9.4 Further rights
In addition, you have the right to rectification of inaccurate data or to erasure of your data. If there is no reason for further storage, we will delete your data; otherwise, we will restrict processing. You can also request that we provide all personal data that you have provided to us in a structured, commonly used and machine-readable format either to you or to a person or company of your choice.
Furthermore, there is a right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
9.5 Exercise of your rights
To exercise your rights, you can contact the controller or the data protection officer using the contact details provided.
10. Is there an obligation to provide your personal data?
To enter into a business relationship, you must provide us with the personal data that is necessary for the performance of the contractual relationship or that we are legally obliged to collect. If you do not provide us with this data, we will not be able to carry out and process the contractual relationship.
11. Is automated decision-making or automated profiling carried out?
No automated decision-making or automated profiling takes place.
12. Changes to this information
Should the purpose or the manner of processing your personal data change significantly, we will update this information in good time and inform you of the changes in good time.