Principles of Data Processing

Information in accordance with Articles 13, 14 and 21 General Data Protection Regulation (GDPR)
‍You came to this page via a link because you want to find out more about how we handle (your) personal data. In order to comply with our information requirements in accordance with Art. 12 et seq. of the General Data Protection Regulation (GDPR), we are happy to provide you with our information on data protection below.

‍Content:
1. Who is responsible for data processing and who can I contact?
2. What data is collected, for what purpose and for how long is it stored?
3. Who receives the data?
4. What rights do you have when it comes to processing your data?

The person responsible within the meaning of the General Data Protection Regulation is: I

NTERNORM Plastics Technology GmbH
Robert-Bosch-Strasse 5
D-49401 damme
‍
email: info@internorm.de
Impressum: https://www.internorm.de/impressum/

(also referred to as “INTERNORM Kunststofftechnik GmbH” or “we”)

If you have any questions about this data protection policy or about the protection of your data by INTERNORM Kunststofftechnik GmbH, you can also contact our data protection officer at any time:
Carla Holterhus
Email: datenschutz@internorm.de

If we have received data from you, then we will generally only process it for the purposes for which we received or collected it.
Data processing for other purposes is only considered if the necessary legal requirements in accordance with Article 6 (4) GDPR are met. In this case, we will of course comply with any information requirements under Article 13 (3) GDPR and Article 14 (4) GDPR.
The legal basis for processing personal data is in principle — unless there is still specific legislation — Article 6 GDPR. In particular, the following options are considered here:
‍
• Consent (Art. 6 para. 1 lit. a) GDPR)
• Data processing to fulfill contracts (Art. 6 para. 1 lit. b) GDPR
• Data processing based on a balance of interests (Art. 6 para. 1 lit. f) GDPR)
• Data processing to fulfill a legal obligation (Art. 6 para. 1 lit. c) GDPR)
‍
If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.
If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the requirements of Article 21 GDPR.
We process the data as long as this is necessary for the respective purpose.
Insofar as there are legal storage obligations — e.g. in commercial law or tax law — the relevant personal data will be stored for the duration of the storage obligation. After expiry of the storage obligation, it is checked whether there is a further need for processing. If a requirement is no longer available, the data is deleted.
In principle, we review data towards the end of a calendar year with regard to the need for further processing. Due to the volume of data, this check is carried out with regard to specific types of data or purposes of processing.
Of course, you can at any time (see below) Request information about the data we have stored about you and, if necessary, request the deletion of the data or restriction of processing.

Data will only be passed on to third parties if you have given your consent or if there is a legal obligation to do so. Under these conditions, recipients of personal data may in particular be:
‍
• Contract processors (Art. 28 GDPR): Service providers commissioned by INTERNORM Kunststofftechnik GmbH who support INTERNORM Kunststofftechnik GmbH in carrying out the business relationship have access to the data. These are companies in the categories of hosting providers, tracking service providers, web agencies, IT services, consulting, service providers as part of first, second and third level support, call center services, customer administration, letter shops, marketing, media technology, compliance, telecommunications, CRM and lead management. If other categories of contract processors are also used, please refer to the respective data protection notices.
‍
• Transfer to third parties: In addition, we will share your data with third parties if legal or contractual provisions permit this and/or you have given your consent. Under this condition, the data may be passed on to the following categories of recipients: Public bodies and institutions (e.g. public prosecutor's office, police, tax authority, data protection supervisory authority) to process official inquiries, insofar as this is in your interest or we are required to do so by law. The legal basis is Art. 6 (1) (f) or c GDPR.
‍
• Data transfers within GRIMME Groupe: We transfer your data to other companies within the GRIMME Groupe or grant them access to your data. Insofar as this is done for administrative purposes, this is based on our legitimate interest in internal administrative purposes and group reporting. The legal basis is Art. 6 (1) (f) GDPR. Insofar as this is necessary to initiate a contract on your initiative or to fulfill contract-related obligations or is based on your consent, the legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (a) GDPR. Insofar as we are legally entitled to do so, the legal basis is Article 6 (1) (c) GDPR. For further transfer to third parties, we refer to the respective data protection notices.
‍
• Third parties with whom we have an ongoing business relationship: Insofar as this is necessary to initiate a contract or fulfill contract-related obligations or is made with your consent, the legal basis is Art. 6 (1) (b) GDPR or Art. 6 (1) (a) GDPR. Insofar as we are legally obliged to do so, the legal basis is Article 6 (1) (c) GDPR.
‍
You may find further information in the respective data protection notices.
Data is transferred to third countries (countries outside the EU or the European Economic Area — EEA), for example, insofar as this:

• is necessary to fulfill a contract to which you are a party or your inquiries.
• is necessary to protect our legitimate interests.
• is required by law or you have given consent.
• is carried out as part of order processing when service providers are involved.
‍
Insofar as there is no decision by the EU Commission on a level of data protection appropriate to European data protection requirements for the country concerned, we ensure that your rights and freedoms are adequately protected through appropriate contracts. Such an agreement ensures that the recipient of the data has an appropriate level of data protection, in particular by agreeing so-called EU standard contractual clauses of the European Union with the recipient. Otherwise, we can also transfer data based on your express consent. You can withdraw your consent at any time with effect for the future, cf. section “What rights do you have when it comes to processing your data? ”. We will provide you with more detailed information free of charge on request using the contact details above. If we base data processing by recipients without an adequate level of data protection on your consent alone, we would like to point out that the following risks exist: There may be insufficient regulations to adequately protect your personal data, there is no data protection supervisory authority, the enforcement of your data subject rights under data protection law is difficult or is disregarded, there is no control over the further processing and transfer of data to third parties. You may find further information in our respective data protection information.

You have the following rights vis-à-vis INTERNORM Kunststofftechnik GmbH with regard to personal data concerning you:

In accordance with Article 15 GDPR, you have the right to obtain information about the data stored about you. If incorrect personal data has been processed, you have the right to correct it in accordance with Article 16 GDPR. If the legal requirements are met, you can request the deletion or restriction of processing and file an objection to data processing (Articles 17, 18 and 21 GDPR). According to Art. 20 GDPR, you can assert the right to data portability for data that is processed automatically on the basis of your consent or a contract with you.

Information about your right to object in accordance with Art. 21 GDPR
1. For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) (f) GDPR (data processing based on a balance of interests).
If you file an objection, INTERNORM Kunststofftechnik GmbH will no longer process your personal data, unless INTERNORM Kunststofftechnik GmbH can demonstrate compelling legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. INTERNORM Kunststofftechnik GmbH processes your personal data for direct marketing purposes. You have the right to object at any time to the processing of data concerning you for the purpose of such advertising.
If you object to processing for direct marketing purposes, INTERNORM Kunststofftechnik GmbH will no longer process your personal data for these purposes.
‍
The objection can be made informally and should, if possible, be addressed to:
INTERNORM Plastics Technology GmbH
data protection officer
Robert-Bosch-Strasse 5
D-49401 damme
Email: datenschutz@internorm.de

Right to withdraw your consent in accordance with Article 7 (3) GDPR
If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of your consent up to the withdrawal.
The revocation can be made informally. You can contact us using the contact details set out in Section 1. Should INTERNORM Kunststofftechnik GmbH provide further options for withdrawing (e.g. unsubscribe link in every newsletter email), you will be informed of this in the respective privacy policy.
You also have the right to lodge a complaint with a supervisory authority for data protection in connection with the processing of your personal data:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
‍
telephone: 0511 120-450
email: poststelle@lfd.niedersachsen.de

Status: June 2023