In order to create more transparency in the processing of personal data by companies, the European legislator has introduced a new obligation of information. As soon as data are collected, you should know what happens with your personal data and for which purposes these are processed. The following information is provided pursuant to Article 13 GDPR.
1. Controller and data protection officer
The controller for the processing of personal data is the SMARTCRM GmbH, Georg-Todt-Str. 1, 76870 Kandel, Germany, represented by the CEO, Ralph Rastert.
Contact details:
Phone: +49 7275 988660
Fax: +49 7275 9886664
e-mail: info@smartcrm.de
The company’s data protection officer can be reached at the following e-mail address:
MORGENSTERN consecom GmbH, Große Himmelsgasse 1, 67346 Speyer, Phone: +49 6232 10011944
2. Purposes, legal regulations and provision of your data
2.1 Contracts
Your personal data will be processed to initiate and conclude contracts for CRM solutions and interface implementations, for the communication in the context of the execution of contracts, billing and payment processing.
The admissibility of the processing is governed by Article 6(1)(b) GDPR (implementation of a contract or a pre-contractual measure).
The admissibility of the processing is further governed by Article 6(1)(f) GDPR (legitimate interest). Our legitimate interests lie, for instance, in the electronic and more efficient data processing and the optimization of work processes as a whole.
The provision of your personal data is required for the conclusion of a contract with us. Non-provisioning means that no contract can be concluded and executed.
2.2 Direct advertising and internal analysis
We process your personal data to provide you with information about our offers such as product information. Furthermore, your data will be used for internal analyses to allow individualized approach.
The admissibility of the processing is governed by article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in actively offering our services, advertising to customers and making the advertising approach as individual as possible.
2.3 Storage of links to social media appearances
We store links to social media profiles of you and / or your company in our CRM solution. This serves to simplify the establishment or maintenance of contact.
The permissibility of the processing is governed by article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in making contact with our customers and prospective customers as simple and flexible as possible.
3. Recipients
As part of the provision of services, your personal data will be forwarded to the respective departments and processed and may also be passed on to other companies (e.g., tax consultants). In these cases, the transfer is covered by a legal regulation or takes place within the scope of an order processing.
We do not intend to transmit your data to a third country outside the EU or the EEA.
4. Storage of your data
The initial storage of your data occurs when establishing contact for example by e-mail, by phone or with the exchange of e-mails or written documents. We will delete your personal data once the contractual relationship has been terminated, all mutual claims have been fulfilled and there are no legal storage obligations or legal regulations for storage. We will continue to use your postal address for advertising purposes even after termination of the contract unless you object.
Provided that your data have been anonymized for analysis purposes, they will be stored and used without any time limit.
5. Rights of the data subject
You have the following rights:
You have the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR) as well as the right to data portability (Article 20 GDPR). We strive to process inquiries in a timely manner.
Provided that your personal data are processed in the context of the Article 6(1)(f) GDPR, you have a right to object as far as there are reasons for this arising from your particular situation or if the objection is aimed at direct advertising (Article 21 GDPR).
6. Revocation of consent
Any consent granted for the processing of personal data can be revoked at any time. The lawfulness of the processing on the basis of the consent until revocation remains unaffected.
7. Questions or complaints
You have the right to lodge a complaint with a supervisory authority.
