Data Protection Declaration

We place great importance on protecting personal data. The company ("SMA") mentioned in the publication details therefore processes personal data in conformity with the applicable legal regulations for the protection of personal data and data security. 

1. Processing personal data

Data categories, purpose of processing and legal basis

  • Personal data that you yourself enter voluntarily (for example when registering, making contact or participating in surveys, etc.), such as forename and surname, e-mail address, telephone number, information given in connection with an enquiry, comments or similar, and
  • Information sent automatically to us from your web browser or terminal device, such as your IP address, device type, browser type, previously visited web sites, sub-sites visited, and date and time of the particular visitor enquiry.

We process your personal data for the following purposes:

  • To process your enquiry, and
  • To enforce our conditions of use, to enforce and defend legal rights, and to ward off and stop fraudulent and similar actions, including attacks on our IT infrastructure.

The processing of personal data is necessary in order to achieve the stated goals. In as far as not expressly specified otherwise for the collection of personal data, the legal bases for the data processing are:

  • The performance and fulfilment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
  • The fulfilment of legal obligations to which SMA is subject (Article 6 (1) (c) of the General Data Protection Regulation), or
  • The safeguarding of the legitimate interests of SMA (Article 6 (1) (f) of the General Data Protection Regulation). The legitimate interests of SMA lie in the processing of your personal data for the purposes of the offer.

In some cases, we ask you expressly for your consent to the processing of the personal data. In this case, the legal basis for processing the personal data is the consent you have given (Article 6 (1) (a) of the General Data Protection Regulation).

2. Processing of personal data of business partners

Data categories, purpose of processing and legal basis

As part of the cooperation with business partners, SMA processes personal data of customer contacts, interested parties, sales partners, suppliers and partners (each of which is a "business partner"):

  • Contact information, such as forename and surname, business address, business telephone number, business mobile phone number, business fax number and business e-mail address
  • Payment data, such as information needed for the processing of payments and fraud prevention
  • Additional information that has to be processed within the scope of a project or for handling a contractual relationship with SMA, or is given voluntarily by business partners, for example in connection with enquiries, orders and project details
  • Personal data that are collected from publicly available sources, information databases or credit agencies, and
  • To the extent legally required within the scope of compliance screenings: Data of birth, identity document and ID numbers, information about relevant legal proceedings and other legal disputes in which business partners are involved.

SMA processes the personal data for the following purposes:

  • Communication with business partners about products, services and projects, for example to process the enquiries of the business partner, or to provide technical information.
  • Planning, performance and management of (contractual) business relationships between SMA and the business partner, for example to deal with the ordering of products and services, collect payments, for bookkeeping and invoicing purposes, and to perform deliveries, maintenance activities and repairs
  • Performance of customer surveys, marketing campaigns, market analyses, competitions and similar actions and events.
  • Maintenance and protection of the safety of our products and services and our web site, preventing and detecting safety and security risks, fraudulent procedures and other criminal activities and actions intended to cause damage
  • Compliance with legal requirements (e.g. retention requirements under tax and commercial law, existing obligations to perform compliance screenings (to prevent business crime and money laundering), and
  • Settlement of legal disputes, enforcement of existing agreements, and for the enforcement, exercise and defence of legal rights.

The processing of personal data is necessary in order to achieve the stated goals. In as far as not expressly specified otherwise for the collection of personal data, the legal bases for the data processing are:

  • The performance and fulfilment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
  • The fulfilment of legal obligations to which SMA is subject (Article 6 (1) (c) of the General Data Protection Regulation), or
  • The safeguarding of the legitimate interests of SMA (Article 6 (1) (f) of the General Data Protection Regulation). The legitimate interests of SMA lie in the initiation, performance and processing of the business relationship.  

In some cases we ask you expressly for your consent to the processing of the personal data. In this case, the legal basis for processing personal data is the consent you have given (Article 6 (1) (a) of the General Data Protection Regulation).

If, in an individual case, you have expressly given your consent to the processing of your personal data, this consent shall form the legal basis for the processing (Article 6 (1) (a) of the General Data Protection Regulation).

3. Disclosure and transfer of personal data

If necessary, SMA transmits your personal data to:

  • Other companies, if this is necessary in conjunction with the offer or the initiation, performance or processing of the business relationship
  • IT service providers that process data as part of their service performance (such as service providers for IT maintenance activities), or
  • Courts, courts of arbitration, authorities or legal advisors if this is necessary for compliance with applicable law, or to enforce, exercise or defend legal rights. 

4. Data retention periods

In as far as no express period of retention is stated for the collection (for example as part of a declaration of consent), your personal data will be deleted, in as far as it is no longer needed to fulfil the purpose of the storage, unless statutory retention requirements (for example retention requirements under commercial and tax law) are contrary to deletion.

5. Revocability of declarations of consent given

If you have given us consent to process your personal data, you have the right to revoke your consent at any time with effect for the future. The revocation is not based on the legality of the processing performed on the basis of the consent before the revocation. After revocation, SMA may only further process the personal data to the extent that SMA can justify the processing on another legal basis.

6. Your rights

According to applicable data protection law, you may have the right:

  • To demand confirmation of whether SMA processes personal data about yourself and to obtain information about the personal data and other information processed by SMA
  • To demand the correction of incorrect personal data
  • To demand the deletion of personal data processed by SMA
  • To demand the restriction of the processing of personal data by SMA.
  • To demand the transfer of data, or
  • To object to the processing of personal data by SMA.

 

7. Contact person

Our data protection officer is available to you as a contact person for all data-protection-related issues and for the exercise of your rights. Please send your submissions to:

SMA Sächsische Maschinen- und Anlagenbau GmbH

Data protection officer

Kopernikusstr. 58

08056 Zwickau

SMA Sächsische Maschinen- und Anlagenbau GmbH always strives to address your queries and redress your complaints. However, after contacting the data protection officer, you have the option of contacting the responsible data protection authority at all times.

Please find further contact possibilities on the web site of the regulatory authority. Internet: https://www.datenschutz.sachsen.de.