Information obligation according to GDPR - Enterprise resource planning program (ERP)
Information for data subjects (customers) in the case of direct collection (Art. 13 GDPR)
Responsible party:
elektro-plus GmbH, Emil-Eigner-Straße 1, 86720 Nördlingen (Germany)
(09081) 78 991 - 0, [email protected] , www.elektro-plus.de
Legal representative:
Martin Graf, Tel: (09081) 78 991 - 11, E-Mail: [email protected]
Data protection officer:
Thomas Steiner, Tel: +49 (0)7161-3544800, E-Mail: [email protected]
Information on the processing activity:
Purposes of the processing activity:
Recording and managing orders with customer data such as name, street, postal code, city, country, e-mail address and, if applicable, telephone number.
The collection of customer data is necessary for the execution of the order.
Legal basis of the processing activity:
The processing is necessary for the performance of a contract or a pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party in accordance with Article 6(1)(f) GDPR and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject (please document the balancing of interests!).
Categories of recipients:
Processor (Processor within the meaning of Art. 4 in conjunction with Art. 28 GDPR).
Third parties (Any person or body outside the controller who is not themselves a data subject or processor within the EEA Necessary data for the execution of an order (e.g. customer address) will be forwarded to executing companies such as logistics partners, forwarding agents, suppliers).
Data transfer to a third country:
There is no planned transfer to third countries.
Additional information obligations:
Storage period of personal data:
10 years (AO) (Deletion after 10 years. Retention period according to § 147 AO for tax-relevant documents).
Rights of the data subject:
You have a right of access (pursuant to Art. 15 GDPR) on the part of the controller to the personal data concerning you as well as to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and to restriction of processing (Art. 18 (1) GDPR). Furthermore, you have the right to object to the processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR).
If you would like to exercise your rights, please contact the data protection officer named above.
Right to lodge a complaint:
You have the right to lodge a complaint with the competent supervisory authority.
Obligation to provide personal data:
The data subject is obliged to provide the personal data.
Consequences of non-provisioning:
No working with ERP possible
Automated decision making:
There is no automated decision-making or profiling.
