In order to create more transparency in the processing of personal data by companies, the European legislator has introduced a new obligation of information. As soon as data are collected, you should know what happens with your personal data and for which purposes these are processed. The following information is provided pursuant to Article 13 GDPR.
1. Controller and data protection officer
The controller for the processing of personal data is the SMARTCRM GmbH, Georg-Todt-Str. 1, 76870 Kandel, Germany, represented by the CEO, Ralph Rastert. Contact details: Phone: +49 (0)7275-988660, Fax: +49 (0)7275-9886664, e-mail: info@smartcrm.de.
The company’s data protection officer can be reached at the following e-mail address:
datenschutz@m-consecom.de.
2. Purposes, legal regulations and provision of your data
2.1 Contracts
Your personal data will be processed to initiate and conclude contracts for CRM solutions and interface implementations, for the communication in the context of the execution of contracts, billing and payment processing. In addition, your personal data will be processed for the efficient and contractually owed provision of remote maintenance and support services.
The admissibility of the processing is governed by Article 6(1)(b) GDPR (implementation of a contract or a pre-contractual measure).
The admissibility of the processing is further governed by Article 6(1)(f) GDPR (legitimate interest). Our legitimate interests lie, for instance, in the electronic and more efficient data processing and the optimization of work processes as a whole.
The provision of your personal data is required for the conclusion of a contract with us. Non-provisioning means that no contract can be concluded and executed.
2.2 Direct advertising and internal analysis
We process your personal data to provide you with information about our offers such as product information. Furthermore, your data will be used for internal analyses to allow individualized approach.
The admissibility of the processing is governed by article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in actively offering our services, advertising to customers and making the advertising approach as individual as possible.
3. Recipients
As part of the provision of services, your personal data will be forwarded to the respective departments and processed and may also be passed on to other companies (e.g., tax consultants). In these cases, the transfer is covered by a legal regulation or takes place within the scope of an order processing.
In connection with the execution of the contractual relationship and the use of digital media and tools to optimize work processes, it may be necessary in individual cases for your personal data to be processed in a third country outside the EU or the EEA. As a matter of principle, this only takes place within the framework of the use of established software customary in the market and in compliance with the special requirements of article 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses).
4. Storage of your data
The initial storage of your data occurs when establishing contact for example by e-mail, by phone or with the exchange of e-mails or written documents. We will delete your personal data once the contractual relationship has been terminated, all mutual claims have been fulfilled and there are no legal storage obligations or legal regulations for storage. We will continue to use your postal address for advertising purposes even after termination of the contract unless you object.
Provided that your data have been anonymized for analysis purposes, they will be stored and used without any time limit.
5. Rights of the data subject
You have the following rights:
You have the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR) as well as the right to data portability (Article 20 GDPR). We strive to process inquiries in a timely manner.
Provided that your personal data are processed in the context of the Article 6(1)(f) GDPR, you have a right to object as far as there are reasons for this arising from your particular situation or if the objection is aimed at direct advertising (Article 21 GDPR). In the event of objection to direct advertising, we will no longer send you any promotional messages.
6. Revocation of consent
Any consent granted for the processing of personal data can be revoked at any time. The lawfulness of the processing on the basis of the consent until revocation remains unaffected.
7. Questions or complaints
You have the right to lodge a complaint with a supervisory authority.
