Information obligation according to GDPR - online store
Information of data subjects (internet visitors and customers) in the case of direct collection (Art. 13 GDPR)
Responsible party:
elektro-plus GmbH, Emil-Eigner-Straße 1, 86720 Nördlingen (Germany)
(09081) 78 991 - 0, [email protected] , www.elektro-plus.de
Legal representative:
Martin Graf, Tel: (09081) 78 991 - 11, E-Mail: [email protected]
Data protection officer:
Thomas Steiner, Tel: +49 (0)7161-3544800, E-Mail: [email protected]
Information on the processing activity:
Purposes of the processing activity:
Processing customer orders, managing payment information, information about order and delivery data.
Legal basis of the processing activity:
The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
Categories of recipients:
Internal (internal department (marketing, IT department))
Data transfer to a third country:
There is no planned transfer to third countries.
Additional information obligations:
Storage period of personal data:
3 years (legitimate interest of the employer)
Payment data:
- 6 months for guest orders
- for customer account until revoked
Rights of the data subject:
You have a right of access (pursuant to Art. 15 GDPR) on the part of the controller to the personal data concerning you as well as to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and to restriction of processing (Art. 18 (1) GDPR). Furthermore, you have the right to object to the processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR).
If you would like to exercise your rights, please contact the data protection officer named above.
Right to lodge a complaint:
You have the right to lodge a complaint with the competent supervisory authority.
Obligation to provide personal data:
The provision of personal data about the data subject is partly required by law or contract and is necessary for the conclusion of an employment contract.
Consequences of non-provision:
No order processing possible.
Automated decision making:
There is no automated decision-making or profiling.
