Customer Information on Data Protection
In order to create more transparency in the processing of personal data by companies, the European legislator has introduced a new obligation to provide information. Already at the time of data collection, you as a customer should know what happens to your personal data and for what purposes they are processed. The following information is provided in accordance with Art. 13 General Data Protection Regulation (GDPR).
1. Responsible person (Controller) and data protection officer
Responsible for the processing of personal data is HENRY´s Auktionshaus AG, An der Fohlenweide 10-14, 67112 Mutterstadt, Germany, Phone +49 (0) 6234 - 80110, E-Mail: firstname.lastname@example.org. You can contact the data protection officer at email@example.com.
2. Purposes, legal basis and provision of your data
2.1 Initiation and processing of contracts
Your personal data is processed for the initiation and conclusion of contracts, communication within the framework of contract processing, invoicing and payment processing. The admissibility of the processing depends on Art. 6 para. 1 b) GDPR (implementation of a contract or a pre-contractual measure). The admissibility of the processing is also governed by Art. 6 para. 1 f) GDPR (legitimate interest). Our legitimate interests lie, for example, in the electronic and more efficient processing of data and the optimization of work processes as a whole.
The provision of your personal data is necessary for the conclusion of a contract with us. Non-provision has the consequence that no contract can be concluded and carried out.
2.2 Direct mail and internal analysis
We process your personal data in order to send you information about our offers. Furthermore, your data will be used for internal analyses and supplemented by publicly available socio-demographic data in order to enable an individual approach with tailor-made offers. Further analyses for the purpose of improving and developing our offers are only carried out with anonymised data. The admissibility of the processing is governed by Art. 6 para. 1 a) GDPR (consent). The admissibility of the processing is also governed by Art. 6 para. 1 f) GDPR (legitimate interest). We have a legitimate interest in actively offering our services, attracting customers and designing the advertising approach as individually as possible.
2.3 Credit check
We reserve the right to obtain appropriate information about you prior to conclusion of the contract or in the event of circumstances affecting your creditworthiness becoming known. If this is negative, we can refuse to conclude a contract with you. The admissibility of the processing depends on Art. 6 para. 1 f) GDPR (legitimate interest). Our legitimate interest lies in assessing your creditworthiness and reducing the risk of non-payment.
As part of the service provision, your personal data is forwarded and processed to the respective HENRY’s divisions and may also be passed on to other companies (e.g. shipping service providers, tax consultants, cooperation partners, computer centres). In these cases, the transfer is covered by a legal basis or takes place within the framework of order processing.
We do not intend to transfer your data to a third country outside the EU or the EEA.
4. Storage of your data
Your data will be stored for the first time when you contact us, e.g. by e-mail or telephone or when exchanging e-mails or written documents. We delete your personal data when the contractual relationship is terminated, all mutual claims are fulfilled and no legal storage obligations or legal bases for storage exist. We will continue to use your postal address for advertising purposes even after termination of the contractual relationship, provided you do not object.
If your data has been made anonymous for analysis purposes, it will be stored and used without time limit.
5. Rights of the persons concerned
You have the following rights:
You have a right of access (Article 15 GDPR), correction (Article 16 GDPR), cancellation (Article 17 GDPR), limitation of processing (Article 18 GDPR) and data transmission (Article 20 GDPR). We make every effort to process enquiries as quickly as possible.
If your personal data are processed on the basis of Art. 6 para. 1 f) GDPR, you have a right of objection if there are reasons for this which arise from your particular situation or if the objection is directed against direct advertising (Art. 21 GDPR). If you object to direct advertising, we will no longer send you any advertising messages.
6. Revocability of consent
Any consent given for the processing of personal data can be revoked at any time. The legality of the processing on the basis of the consent until revocation remains unaffected.
7. Questions or complaints
You have the right to contact the competent supervisory authority (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany).