Data Privacy Notice
The following Data Privacy Notice is intended to inform you about the processing of your personal data by Wilhelm Ewe GmbH & Co. KG (hereinafter referred to as Ewe) and your rights as a data subject under the new EU General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG) as of 25th May 2018.
The data controller responsible for processing your personal data
Wilhelm Ewe GmbH & Co. KG
Volkmaroder Str. 19
38104 Braunschweig
Phone +49 531 37005-0
Fax +49 531 37005-55
Data Protection Officer
Our Data Protection Officer is available at:
Anna Bauer
c/o BEL NET GmbH
Christian-Pommer-Str. 23
38112 Braunschweig
Or via E-Mail
Purpose and legal basis for processing
We process your personal data exclusively in accordance with the legal specifications of the EU General Data Privacy Regulation (GDPR), the new German Federal Data Protection Act (BDSG) and any relevant sector-specific laws. Therefore, we only process your data if we have a contractual basis to do so, if you have given us your consent to process your data, or if a law allows or requires us to process your data.
Data processing for the purpose of fulfilling a contract or carrying out pre-contractual measures
We process your personal data which you have provided to us in an inquiry, on a notification sheet, or on an order form if this is necessary to conclude, carry out, or end a contractual relationship with you. In addition to data on the service requested or goods ordered by you, this includes your first name, last name, and customer number.
To ensure we can carry out our contract with you and contact you as quickly as possible if there are any questions or problems, for instance, we also process your address and/or phone number or cell phone number, and/or your e-mail address if you have provided it to us for this purpose.
The legal basis for data processing to fulfil a contract and carry out pre-contractual measures is typically Art. 6 para. 1 lit. b GDPR.
Data processing for the purpose of safeguarding the legitimate interests of the data controller or a third party
We also process your data if this is necessary to safeguard our legitimate interests or the legitimate interests of a third party. We regularly process information under our legitimate interest for the purpose of direct advertisement of our own products, preparing internal statistics, clarifying criminal offences, and taking measures to ensure the proper operation of our IT infrastructure.
The legal basis for data processing to safeguard the legitimate interests of the data controller or a third party is Art. 6 para. 1 lit. f GDPR.
Data processing to fulfil a legal obligation
We also process your data if this is necessary to fulfil a legal obligation that applies to us. The obligations we must fulfil include, in particular, retention periods under tax and commercial law and the Product Liability Act.
The legal basis for processing to fulfil a legal obligation is Art. 6 para. 1 lit. c GDPR in conjunction with the respective relevant legal standard.
Data processing based on consent and for other purposes
We may also process your personal data if you have granted us express consent to do so (cf. Art. 6 para. 1 lit. a GDPR). In such cases, we will provide you additional data privacy law information separately. You can revoke your consent at any time using the contact information above.
If we process your personal data in the future for other purposes not listed under this Data Privacy Notice, we will inform you separately of this in accordance with legal regulations.
Categories of recipients of your personal data
Data processing within the corporate group
In the course of completing our administrative work and carrying out the contract, it may be necessary for us to transmit your personal data to the company in our corporate group responsible for the respective data processing task.
External service providers
Our external service providers who process data on our behalf are contractually obligated in the sense of Art. 28 GDPR to handle your personal data in accordance with applicable regulations. If these companies access your personal data, we have taken legal, technical, and organizational measures and carry out regular controls to ensure that they comply with the regulations of data privacy law.
Official agencies
We will provide your personal data to official agencies if necessary as part of our legal notification obligations.
Data transmission to a third country
In general, we do not transmit your personal data to third countries or international organisations outside of the European Economic Area (EEA). If we do transmit your data to such countries in an individual case, we only transmit data to those third countries for which the European Commission has reached a suitability resolution, or whose level of data privacy is confirmed through suitable or appropriate guarantees (e.g. Binding Corporate Rules or EU standard contractual clauses).
Duration of data storage
We save your personal data only for as long as necessary to carry out the purposes indicated above and for the time period in which we could potentially expect legal claims to be asserted against us. The statute of limitations for such claims may be between three and thirty years in individual cases.
In addition, we save your personal data for as long as we are obligated to do so under statutory certification and retention periods (such as according to the Commercial Code, Tax Law, or Money Laundering Act). Statutory retention periods may be up to ten years. Furthermore, in exceptional cases there may be specialised certification obligations that require us to store your personal data for a longer period of time.
Rights of data subjects
As a data subject, you have the following rights towards us under Art. 15 et seqq. GDPR:
Right to information
You have the right to request information from us as to whether we process your personal information. If so, you have the right to obtain information from us on this personal data.
Right to rectification
You have the right to request that any incorrect personal data on you be rectified
Right to deletion
In certain cases, you have the right to request that your personal data be deleted immediately.
Right to restrict processing
In certain cases, you have the right to request that we restrict processing of your personal data
Right to data portability
You have the right to receive your personal data you have provided to us in a structured, usable, and machine-readable format.
Right to object to processing
You have the right to object to the processing of your personal data for reasons governed by Article 6 para. 1 lit. e or f DSGVO at any time for reasons related to your individual situation. If we use your data for direct advertisement, you can object to this use at any time.
Right to revocation
If you have given us consent to use your personal data, you can revoke this consent at any time.
Data privacy supervising authority
In addition, you can submit a complaint regarding our processing of your personal data to a data privacy supervising authority. The responsible data privacy authority is:
The State Officer for Data Privacy of Lower Saxony
Prinzenstraße 5
30159 Hannover
If you have further questions or remarks, you can contact our Data Protection Officer at any time.
Date: 25/05/2018