Principles of data processing (version 04.2023)

PRESTO GmbH & Co. KG

You came to this page via a link because you want to find out more about how we handle personal data. In order to fulfil our obligations to provide information in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we would like to present our information on data protection below:

Who is responsible for data processing?

Data controller in terms of data protection law is

Further information about our company, information about authorised representatives of the company and other contact options are available in the legal information section on our website: https://www.presto.eu/en/impress.html

Which of your data do we process? And for what purposes?

If we have received the data from you, we will only process it for the purposes for which we received or collected it.

Data processing for other purposes only comes into consideration if the legal requirements required in accordance with Art. 6 (4) GDPR exist. In this case, we will of course observe any obligations to provide information under Art. 13 (3) GDPR and Art. 14 (4) GDPR.

What is the legal basis for this?

The legal basis for the processing of personal data is – insofar as there are no specific legal provisions – Art. 6 GDPR. The following options are particularly important here:

• Consent [Art. 6 (1)(a) GDPR]
• Data processing for the fulfilment of contracts [Art. 6 (1)(b) GDPR]
• Data processing based on a balance of interests [Art. 6 (1)(f) GDPR]
• Data processing to fulfil a legal obligation [Art. 6 (1)(c) GDPR]

If personal data is processed based on your consent, you have the right to withdraw your consent to us at any time with effect for the future.

If we process data on the basis of a balance of interests, you as the person concerned have the right to object to the processing of personal data, taking into account the requirements of Art. 21 GDPR.

How long will the data be saved?

We process the data as long as this is necessary for the respective purpose.

Insofar as there are statutory retention requirements – e.g. in commercial law or tax law – the relevant personal data will be stored for the duration of the retention obligation. After the retention period has expired, a review is carried out to check whether there is a further need for processing. The data will be deleted if a need no longer exists.

In general, we check if there is a need for further data processing at the end of each calendar year. Due to the amount of data, this review is carried out with regard to specific types of data or purposes of processing.

Of course, you can at any time request information about your personal data we have stored and, in the event that no need exists, request that the data be deleted or processing restricted.

Who are the recipients of the data?

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, the transfer based on a balance of interests within the meaning of Art. 6 (1)(f) GDPR is permissible, we are legally obliged to pass it on or you have given your consent.

Where is the data processed?

We process your personal data exclusively in data centres in the Federal Republic of Germany.

Your rights as a ‘data subject’

You have the right to be provided with information about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require you to provide proof that you are the person you claim to be.

You also have the right to rectification, deletion or restriction of processing, insofar as you are legally entitled to these.

You have the right to object to processing in accordance with the legal requirements. A right to data portability also exists within the framework of the data protection regulations.

 

Our data protection officer

We have appointed a data protection officer in our company. You can contact the data protection officer using the following contact options:

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of personal data.