Data Protection Statement
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations is:
Robert Kukla GmbH
Telephone: +49 89 747480-0
The data protection officer of the controller is:
Robert Kukla GmbH
Telephone: +49 89 747480-121
General data processing
Description and scope of processing of personal data
In principle, we collect and use personal data only insofar as this is necessary for the performance of our contracts.
Legal basis for the processing of personal data
The legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party is Article 6 para. 1 b) GDPR. This also applies to processing operations required to carry out pre-contractual actions.
To the extent that processing of personal data is required to fulfil a legal obligation governing our business, Article 6 para. 1 b) GDPR serves as a legal basis.
Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, such storage may be provided for by European or national legislators in EU regulations, laws or other directives to which the controller is subject. Blocking or deletion of the data also takes place upon expiry of storage periods prescribed by the standards mentioned, unless there is a need for further storage of the data for conclusion or fulfilment of a contract.
Data transfer to third parties
Insofar as external service providers come into contact with your personal data, we have ensured that they comply with the provisions of data protection laws through legal, technical and organisational measures, as well as regular checks.
Description and scope of data processing
Legal basis for data processing
The law states that we can store cookies on your device if they are technically necessary for the operation of this site, the legal basis for the processing is Article 6 para. 1 f) GDPR. For all other types of cookies we need your permission, for further information, we refer to TTDSG § 25.
Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. The user data collected through technically necessary cookies will not be used to create user profiles. This site uses further types of cookies. Some cookies are placed by third party services that appear on our pages.
Duration of storage, objection and disposal options
Contact form and email contact
Description and scope of data processing
There is a contact form on our website, which can be used for electronic contact. If a user chooses this option, the data entered in the input mask will be transmitted to us and saved. This data is:
- (Mandatory field) contact partner
- (Mandatory field) email address
- If filled out by you, telephone number
- If filled out by you, fax number
- If filled out by you, comments
At the time of sending the message, the following data is also stored:
- Date and time of the contact
- Email address of the sender
Alternatively, contact via the provided email address is possible. In this case, the user’s personal data transmitted by email will be stored.
In this context, there is no disclosure of the data to third parties. This data is used exclusively for processing the conversation.
Legal basis for data processing
The legal basis for the processing of the data transmitted in the course of sending an email is Article 6 para. 1 f) GDPR. If the email contact aims to conclude a contract, then Article 6 para. 1 b) GDPR serves as additional legal basis for the processing.
Purpose of data processing
The processing of the personal data from the input mask serves us only to get in contact with you. In the case of you contacting us by email, there is the same necessary legitimate interest in processing the data.
Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the contact form input mask and data sent by email, this is the case when the respective conversation with the user ends. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
Objection and utilisation option
The user has the option to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In this case, the conservation may not be continued. All personal data stored in the course of contacting you will be deleted in this case.
Rights of the data subject
If your personal data is processed then you are a data subject within the meaning of GDPR and you are entitled to the following rights in relation to the controller:
Right to disclosure
You may request the controller to confirm if we process personal data relating to you.
If such processing is confirmed, you can request the following information from the controller.
- the purposes for which the personal data is processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed;
- the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of the controller’s processing or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information on the origin of the data, if the personal data is not collected from the data subject themselves;
You have the right to request information about whether your personal information is transferred to a third country or an international organisation. In this connection, you can request information about the appropriate guarantees in accordance with. Article 46 GDPR in connection with the transfer.
Right to rectification
You have a right to rectification and/or completion in relation to the controller, if your personal data that we process is incorrect or incomplete. The controller must make the rectification without delay.
Right to restrict the processing
You may request the restriction of the processing of your personal data under the following conditions:
- if you deny the accuracy of your personal data for a period of time that enables the controller to verify the accuracy of your personal data;
- the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
- the controller no longer requires personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- if you object to the processing in accordance with Article 21 para. 1 GDPR and it has not yet determined whether the legitimate reasons for processing of the controller outweigh the interests of the data subject.
If the processing of your personal data has been restricted, this means that data may only be used – except for its being saved – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
If the processing is restricted in accordance with the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
a.Obligation to erasure
You may demand the controller delete your personal information without delay, and the controller is required to delete that information immediately if one of the following grounds applies:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent upon which the processing is based in accordance with Article 6 para. 1 a) or Article 9 para. 2 a) GDPR, and there is no other legal basis for processing.
- You object in accordance with Article 21 para. 1 GDPR to the processing and there are no overriding reasons for the processing, or you object to the processing in accordance with Article 21 para. 2 GDPR.
- Your personal data was unlawfully processed.The erasure of your personal data is required to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
b.Information to third parties
If the controller has made your personal data public and is obliged to erase it in accordance with Article 17 para. 1 GDPR, the controller shall take appropriate measures, also of a technical nature, and depending on the available technology and implementation costs, to inform data processors who process the personal data that you, the data subject, have requested the erasure of all links to such personal data or copies or replications thereof.
The right to erasure does not exist insofar as the processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation required by Union law or the law of the Member States to which the controller is subject, or to carry out a task in the public interest or in the exercise of official authority conferred on the controller;
- for reasons of public interest in the field of public health, in accordance with Article 9 para. 2 h) and i), as well as Article 9 para. 3 GDPR;
- for archival purposes of public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 para. 1 GDPR, to the extent that the right referred to in subparagraph a) is likely to render impossible or seriously prejudice the achievement of the objectives of that processing, or
- to assert, exercise or defend rights.
Right to be informed
If you have asserted the right of rectification, erasure or restriction of processing towards the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right in relation to the controller to be informed about these recipients.
Right to object
You have the right at any time, for reasons relating to your particular situation, to object to the processing of your personal data, which is carried out on the legal basis of Article 6 para. 1 e) or f) GDPR.
The controller will cease to processes your personal data, unless they can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.