Information requirements for purchasing

Name and contact information of controller
(GDPR Art. 13 [1] [a])

HEITEC AG
Güterbahnhofstrasse 5
91052 Erlangen
Germany

Contact information of Data Protection Officer
(GDPR Art. 13 [1] [b])

E-mail: datenschutzbeauftragter@heitec.de

Purpose and legal foundation of data processing
(GDPR Art. 13 [1] [c])

• Purchasing and administering support services to fulfill business purposes
  (GDPR Art. 6 [1] [f])
• Fulfilling legal obligations (GDPR Art. 6 [1] [c])
• Sending information materials (GDPR Art. 6 [1] [b])

Interests of controller when weighing interests
(GDPR Art. 13 [1] [d])

• Asserting legal rights
• Enforcing legal rights in court
• Ensuring company’s IT security and IT operations
• Preventing criminal actions
• Measures to direct business and further develop services and products

Recipients or categories of recipients of the personal data
(GDPR Art. 13 [1] [e])

Government agencies, banks, financial auditors

Transmission to third countries (GDPR Art. 13 [1] [f])

There is no transmission of data to third countries.

Length of storage according to legal storage requirements
(GDPR Art. 13 [2] [a])

Personal data is generally deleted within ten years in accordance with storage requirements under tax or commercial law, unless a longer legal storage period applies in exceptional cases or if there is revocation by a data subject.

Right to information, correction, deletion, restriction, data portability, and objection (GDPR Art. 13 [2] [b])

As a data subject, you have the right to information concerning your data and to correct and delete your data and to limit the processing thereof at any time, as well as a right of data portability. Please contact the responsible office using the contact information provided.

Right of objection (GDPR Art. 21 [1])

Where processing your data takes place in order to preserve justified interests, you have the right to object to such processing at any time using our provided contact information if there are reasons against such data processing arising from your specific situation. We will then discontinue the processing unless it serves overriding protected interests on our part.

Right of grievance (GDPR Art. 13 [2] [d])

As a data subject, if you have grievances you can contact your state’s Officer for Data Protection and Freedom of Information at any time.

Existence of a need to provide personal data
(GDPR Art. 13 [2] [e])

The personal data collected are necessary to conclude an agreement. Without providing the personal data, it is not possible to conclude and implement an agreement.