Name of the company in accordance with Section 17 (1) of the German Commercial Code (HGB), including contact data of the controller:
KARO Elektrotechnik GmbH & Co. KG
Jan Christoph Rabe
Phone: +49 2166 14462-0
Fax: +49 2166 14462-29
Sandra Brockmeyer, RST Rabe-System-Technik und Vertriebs-GmbH, Otto-Lilienthal-Strasse 19, 49134 Wallenhorst, GERMANY
Phone: +49 5407 8766-14
The personal data is processed for the purpose of performing contracts or steps prior to entering into contracts. That data includes the customer master data with contact persons and the contact history, offers, orders, invoices, project data and data on further statutory obligations of the controller.
The legal basis is as defined in Article 6 GDPR. Further essential legal grounds are derived from the German Commercial Code (HGB), tax legislation, the German Limited Liability Companies Act (GmbHG) and other statutory requirements of relevance to KARO. They also include contractual provisions. Contact data is transmitted to KARO’s affiliated companies and to KARO’s sales agents for the purpose of personalized customer support subject to the data subject’s consent.
As part of a job application process, the personal data provided by the applicant for filling positions is processed within KARO (Section 26 (1) Federal Data Protection Act [BDSG-new]).
Where necessary, we process your data, above and beyond what is required to actually perform the contract, in order to safeguard the legitimate interests pursued by us or a third party.
Within GERMANY, the European Union and the European Economic Area:
Certified public accountants, bailiffs and other creditors and other government bodies for fulfilling statutory obligations and for requested certification, logistics companies, customers, suppliers and other bodies and business partners. In the case of applicant data, also HR personnel or other decision-makers.
As part of international business relationships, the data is transmitted in accordance with Article 6 (1) point (b) for the purpose of performing contracts or steps prior to entering into contracts. No adequacy decision is required for that. Applicant data will not be transmitted to a third country.
The purposes are derived from the statutory requirements and relevant industry-specific regulations. The personal data is erased after the purpose has been achieved.
You can exercise your rights at any time by getting in touch with us under the above contact data. If personal data concerning you is processed, you are a data controller within the meaning of the GDPR and you have the following rights towards the controller:
The data subject has the right to demand confirmation from the controller as to whether it is processing personal data concerning him or her.
If this is the case, the data subject has the right of access to this personal data and to obtain the information specified in Article 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, if applicable, the right to have incomplete personal data completed (Article 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds specified in Article 17 GDPR applies, such as if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to obtain from the controller restriction of processing where one of the requirements stipulated in Article 18 GDPR applies, such as if the data subject has objected to processing, for the period of the examination by the controller.
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the data subject’s interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Article 21 GDPR).
Rights of data subjects in accordance with Article 13 (2) point (c) GDPR
If you have given us your consent to process your personal data for specific purposes (such as processing photos of data subjects), such processing is lawful on the basis of your consent.
You may withdraw your consent at any time with effect for the future. The same also applies if you wish to revoke declarations of consent you gave us before the GDPR came into effect, i.e. before 25 May 2018.
Please note that withdrawal of consent applies only with effect for the future. Processing activities before withdrawal of your consent are not affected by it.
Right to lodge a complaint with a supervisory authority in accordance with Article 13 (2) point (d) GDPR
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the GDPR (Article 77 GDPR).
The data subject can lodge a complaint with a super-visory authority in the Member State of his or her habitual residence, his or her place of work or place of the alleged infringement.
The responsible supervisory authority in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit North Rhine-Westphalia
Phone: +49 211 38424-0
Fax: +49 211 38424-10
As part of our business relationship, you must only provide personal data that is required to establish, perform and end the contractual relationship or which we are obliged to collect by law. Without this data, we will usually not be able to perform the contractual relationship. Provision of the data is necessary to carry out a job application procedure. It is not possible to carry out the job application procedure without provision of the data.
We reserve the right to amend the data protection information in compliance with stipulations under data protection law. You can request the latest version at any time by getting in touch with us under the above contact data. If we intend to process your data for purposes other than those for which it was collected, we will notify you in advance in compliance with statutory provisions. You can find more information on the data protection provisions in our data protection statement at: www.karo-elektrotechnik.de/en/privacy-policy/
Last revised: November 2018