Privacy Policy
The protection of your personal data is particularly important to us. We, Keschsolar GmbH, therefore process your personal data (“data” for short) exclusively on the basis of legal regulations. With the data protection declaration we want to inform you comprehensively about the processing of your data in our company and the data protection claims and rights to which you are entitled in accordance with the European General Data Protection Regulation (EU GDPR). 1. Who is responsible for data processing and who can you contact? Keschsolar GmbH, Sandweg 32, 65604 Elz, e-mail: info(at)keschsoar.de, Tel: 49 6431 5978 543 is responsible. The data protection officer of Keschsolar GmbH is at the address given or by e-mail at info( at)keschsolar.de. 2. What data is processed and from what sources does this data come? We process the data that we receive from you as part of the business initiation and relationship. We also process data that we have lawfully received from credit agencies, creditor protection associations, from publicly accessible sources (e.g. company registers, association registers, land registers, media) and other companies with which we have a long-term business relationship. Personal data includes: Your master/contact details such as: as a private customer: first and last name, address, contact details (e.g. email address, telephone number, fax), date of birth, data from proof of identity presented (copy of ID), bank details as a corporate customer or Supplier: Name of their legal representatives, company, commercial register number, VAT ID number, company number, address, contact person contact details (email address, telephone number, fax), bank details In addition, we also process the following other personal data: Information about type and content our business relationship such as contract data, order data, sales and receipt data, customer and supplier history, consultation documents, vehicle data, information about your financial status (e.g. creditworthiness data), advertising and sales data, documentation data (e.g. consultation protocols), image data, information from your electronic traffic with Keschsolar GmbH (e.g. IP address, log-in data), other data that we received from you as part of our business relationship (e.g. in customer conversations), data that we generate ourselves from master/contact data and other data, such as through customer needs and customer potential analyses. The documentation of your declaration of consent to receive newsletters, for example. Image data from video surveillance systems Photos taken at public events 3. For what purposes and on what legal basis is the data processed? We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the BDSG 2018 in the currently valid version: to fulfill (pre-)contractual obligations (Article 6 Para. 1lit.b GDPR): Processing Your data is used for the sale and distribution of our goods and services, for procurement and logistics purposes as well as for supplier and customer management and analysis. The data is processed in particular when initiating business and executing contracts with you, for example in the following cases: Creating and maintaining a customer account or a supplier account Delivering orders Managing customer cards Participating in competitions Sending information, e.g. requesting a catalog to fulfill legal obligations (Art 6 Para. 1lit.c GDPR): Processing your data is necessary for the purpose of fulfilling various legal obligations, e.g. from the Commercial Code or the Tax Code, money laundering regulations, product-specific regulations such as the Hazardous Substances Ordinance. to protect legitimate interests (Article 6 Para. 1 lit.f GDPR): Based on a balancing of interests, data processing can take place beyond the actual fulfillment of the contract to protect legitimate interests of us or third parties. Data processing to protect legitimate interests takes place, for example, in the following cases: consultation and data exchange with credit agencies and creditor protection associations to determine creditworthiness data as well as maintaining a group-wide creditworthiness database to identify financial default risks among common customers; Advertising or marketing measures for business management and further development of services and products; Maintaining a group-wide customer database to improve customer service in the context of legal prosecution. within the scope of your consent (Article 6 Para. 1lit.a GDPR): If you have given us your consent to process your data, processing will take place in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. Consent given, for example to send our newsletter, can be revoked at any time with future effect. To do this, please contact the contact listed under No. 1. 4. Processing of personal data for advertising purposes We also use your data to communicate with you about your orders, specific products or marketing campaigns and to recommend products or services that may interest you. You can object to the use of your personal data for advertising purposes at any time as a whole or for individual measures. This objection is free of charge for you on the part of Keschsolar GmbH. To do this, please contact the contact listed under No. 1. Product recommendations by email Keschsolar GmbH is entitled, under the legal requirements of Section 7 Paragraph 3 UWG, to use the email address that you provided to us when ordering a product or service for direct advertising of its own similar goods or services to use. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. If you no longer wish to receive product recommendations from us by email, you can object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do this, please contact the contact listed under No. 1. Of course, every email always contains an unsubscribe link. Newsletter To send the newsletter, we use the so-called double opt-in procedure, which means that we will only send you a newsletter by email if you have previously expressly confirmed to us that we should activate the newsletter service. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email. If you no longer wish to receive newsletters from us at a later date, you can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact listed under No. 1 is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter. 5. Processing of creditworthiness information Data transmission to SCHUFA Keschsolar GmbH transmits personal data collected within the framework of contractual relationships entered into with you about the application, implementation and termination of such business relationships as well as data about non-contractual behavior or fraudulent behavior to SCHUFA Holding AG, Kormoranweg 5 , 65201 Wiesbaden. The legal basis for these transfers is Article 6 paragraph 1 letter b and Article 6 paragraph 1 letter f of the General Data Protection Regulation (GDPR). Transfers based on Article 6 paragraph 1 letter f GDPR may only take place to the extent that this is necessary to protect the legitimate interests of Keschsolar GmbH or third parties and not the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, predominate. The data exchange with SCHUFA also serves to fulfill legal obligations to carry out creditworthiness checks on customers (Sections 505a and 506 of the Civil Code). SCHUFA processes the data received and also uses it for the purpose of profiling (scoring) to provide its contractual partners in the European Economic Area and Switzerland and, if applicable, other third countries (if there is an adequacy decision for these by the European Commission) with information, among other things, to assess the to give creditworthiness to natural persons. Further information on SCHUFA's activities can be found in the SCHUFA information sheet in accordance with Art. 14 GDPR or can be viewed online at www.schufa.de/datenschutz. Data transfer to other credit agencies Keschsolar GmbH also uses the following credit agencies to obtain credit information if there is a legitimate interest: Bisnode Deutschland GmbH, Robert-Bosch-Straße 11, 64293 Darmstadt, Coface Central Europe Holding AG, Stubenring 24, A-1010 Vienna, CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich 6. Who receives my data? If we use a service provider for order processing, we still remain responsible for the protection of your data. All processors are contractually obliged to treat your data confidentially and only process it within the scope of providing the service. The processors commissioned by us receive your data if they need the data to fulfill their respective service. These include, for example, IT service providers that we need for the operation and security of our IT system, as well as advertising and address publishers for our own advertising campaigns. Your data will be processed in Keschsolar GmbH’s customer databases. These customer databases support increasing the data quality of existing customer data (duplicate removal, moved/deceased indicators, address correction) and enable enrichment with data from public sources. This data can be used for personalized direct marketing campaigns (e.g. newsletters), for targeted online marketing and personalized online shop design. The customer database is intended to enable participating companies that serve the same customers to use information about these customers across organizations. The aim of this approach is to always provide customers with the most up-to-date and relevant information. This processing of customer interests constitutes profiling within the meaning of Art. 4 GDPR; there is no automated decision-making. The storage of customer data is company-related and separate, with Keschsolar GmbH acting as a service provider for the individual participating companies. If an offer/sale is made via manufacturer portals, the data you provide will be processed directly in the manufacturer's portal. If there is a legal obligation or as part of legal prosecution, authorities and courts as well as external auditors may be recipients of your data. In addition, insurance companies, banks, credit agencies and service providers may be recipients of your data for the purpose of initiating and fulfilling contracts. 7. How long will my data be stored? We process your data until the end of the business relationship or until the expiry of the applicable guarantee, warranty, limitation and legal retention periods (e.g. from the Commercial Code or the Tax Code); Furthermore, until the end of any legal disputes in which the data is required as evidence. With video surveillance, the image data is usually deleted after 7 days. 8. Processing of applicant data If you send us your application via the applicant portal, we store your personal data in a secure operating environment to protect it from loss or misuse. Your applicant data will only be made accessible to those authorized and involved in the Keschsolar GmbH application process, for example in order to be able to offer you alternative positions if necessary. After completing the application process (i.e. after you have received an acceptance or rejection from us), we store your personal data for a maximum of 6 months. 9. Communication via e-mail Please note that sending unencrypted e-mails is considered unsafe because unauthorized persons can take note of the content of the e-mail and possibly manipulate it. We therefore advise you not to send sensitive data by email when communicating with us. As an applicant, please use our applicant portal, as your application documents will be transferred there securely. Should it ever be necessary to send sensitive data by email, please use a content encryption option. 10. What data is collected when you visit this website? 10.1. General information on the use of cookies Keschsolar GmbH uses so-called cookies and pixels (hereinafter generally referred to as “cookies”) on its website. These are small text or image files that your browser stores on your device (computer, tablet, smartphone or similar) to store certain information when you access our website with this device. Cookies are accepted by your web browser and are intended to identify your device. We use cookies to make our offering user-friendly. Only the cookie on your device is recognized. Personal data will only be stored with your express consent or if this is strictly necessary for the use of the services you have accessed. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit. If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be restricted. An explanation of the scope and functionality of the cookies used by Keschsolar GmbH on its website is listed below: a. Functional cookies So-called functional cookies are used to store information that has already been provided (e.g. user name, language selection or the location where you are) and to offer the user better and personalized functions. These types of cookies also enable requested functions, such as playing videos. Anonymized data is collected and your movement on other websites is not tracked. b. Analytical cookies These cookies help us to collect information about how our website is used, for example the number of visitors and the origin of traffic. This data allows us to measure the performance of our website and make improvements. Analytical cookies enable us to find out which content has the most and least views, whether error messages occur and how the user navigates on our website. The data collected is summarized and therefore anonymous. The user is not identified. We use these cookies exclusively to continually improve the performance of the Keschsolar GmbH website and the associated user experience. If you do not agree to this anonymous recording of your usage behavior, you can prevent this by deactivating cookies in your browser. c. Marketing cookies Marketing cookies are used to show the user targeted advertisements that are tailored to their interests. They are also used to measure the effectiveness of certain campaigns. These types of cookies detect whether a website has been visited or not. This may be passed on to third parties. Cookies that serve to improve target group targeting and advertising are often linked to third-party site functionalities. 10.2. Specific cookies used The specific cookies used on each Keschsolar GmbH website are described on the respective website. A link to the description “Website Data Tracking & Opt-Out” can be found in the footer of every website. There you will also find the links to unsubscribe from cookies. 11. Will personal data be transferred to a third country? A transfer of data to third countries takes place in individual cases and only on the basis of an adequacy decision by the European Commission, standard contractual clauses, suitable guarantees or your express consent. 12. What data protection rights do I have? You have a right to information, correction, deletion or restriction of processing of your stored data at any time, a right to object to processing as well as a right to data portability and a right to lodge a complaint in accordance with the requirements of data protection law. Right to information You can request information from us as to whether and to what extent we process your data. Right to correction If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time. Right to deletion You can request that we delete your data if we are processing it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, for example in the case of legally regulated retention obligations. Regardless of whether you exercise your right to deletion, we will delete your data immediately and completely, unless there is a legal or statutory retention period to the contrary. Right to restrict processing You can request that we restrict the processing of your data if you dispute the accuracy of the data, for a period of time enabling us to verify the accuracy of the data. the processing of the data is unlawful, but you refuse to delete it and instead request a restriction on the use of the data, we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or you object to the processing of the data inserted. Right to data portability You can request that we provide you with the data you have provided to us in a structured, common and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided we do so Process data based on your consent, which can be revoked, or for the performance of a contract between us, and this processing is carried out using automated procedures. If it is technically feasible, you can request that we transmit your data directly to another person responsible. Right to object If we process your data for legitimate interest, you can object to this data processing at any time for reasons arising from your particular situation; This also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for direct advertising purposes at any time without giving reasons. Right to complain If you believe that we are violating German or European data protection law when processing your data, we ask you to contact us to clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for Keschsolar GmbH, the Hessian State Office for Data Protection Supervision. If you would like to assert one of the rights mentioned against us, please contact the contact listed under No. 1. If in doubt, we may request additional information to confirm your identity. 13. Am I obliged to provide data? The processing of your data is necessary to conclude or fulfill the contract you have entered into with us. If you do not provide us with this data, we will generally have to refuse to conclude the contract or carry out the order or will no longer be able to carry out an existing contract and will therefore have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant to the fulfillment of the contract or is not required by law.