Information obligations under the GDPR
Information obligations for the electronic sending of receipts/invoices
Information obligations when consenting to data processing (here: electronic sending of receipts/invoices) in accordance with Art. 13 GDPR.
Description of the processing activity
The data protection information is provided in connection with your consent to the processing of your personal data, which you have given to Drubba Black Forest GmbH, or to fulfill a legal obligation.
Name and contact details of the controller
Drubba Black Forest GmbH
Höllsteig 74/2 79874 Breitnau
Phone: +49 7652 901-161
Email: info@drubbablackforest.com
Contact details of the external data protection officer
suasio GmbH - Frank Dreher
Hauptstr. 120b
77815 Bühl
Tel.: 07223 95666-0
Email: datenschutz@suasio.de
Purposes and legal basis of processing
We process your personal data on the basis of your consent, a contractual relationship, or to fulfill a legal obligation. The legal basis for this is Art. 6 (1) a, b, c GDPR. The purpose of processing is to deliver electronic receipts or invoices by email. Recipients or categories of recipients of personal data Your personal data will be transferred to:
• the relevant departments in our company
• Service providers for technical support of the application have access to the data. A data processing agreement has been concluded with the service provider.
Transfer of personal data to a third country
There are no plans to transfer your personal data to a third country or an international organization.
Duration of storage of personal data Retention periods are based on legal regulations, i.e. six years for business letters and ten years for tax-relevant documents, unless contract data must be retained for longer because it is needed to assert warranty rights or other legal claims.
Rights of data subjects
Under the EU General Data Protection Regulation, you have the following rights: If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to have it corrected (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing and object to processing (Articles 17, 18, and 21 GDPR).
If you have consented to data processing or if a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
If you exercise your above-mentioned rights, the IHK will check whether the legal requirements for this are met.
To exercise your rights, please contact us at +49 7652 901-161, email: info@drubbablackforest.com
If you have any complaints regarding data protection, you can contact the competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart, Germany
Tel. No.: 0711/61 55 41 – 0
Email: poststelle@lfdi.bwl.de
Revocation of the declaration of consent If you have consented to processing by the IHK Nord Westfalen by means of a corresponding declaration, you can revoke your consent at any time for the future. This does not affect the legality of the data processing carried out on the basis of the consent until revocation.