1. Information Obligations pursuant to Article 13 of the EU GDPR: Customer Support
1.1 Who is responsible for data processing?
The respective company of the SÜLZLE Group* is responsible for processing your personal data. We process personal data in accordance with the provisions of the European General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”).
Contact details of the Data Protection Officer:
Steffen Wacker
datenschutz@suelzle-gruppe.de
Contact details of the Data Protection Officer for Société Nouvelle SOTRALENTZ CONSTRUCTION S.A.S:
ACTECIL
dpo_sotralentz-construction@actecil.fr
The companies of the SÜLZLE Group are listed here.
1.2 What data do we process and for what purposes?
The purpose of the survey is to gather information for improving our products and services as part of a time-limited digital customer satisfaction survey among existing customers. Participation in the survey is voluntary.
We process your email address, which we have received from you for order processing, to send you a participation link to our customer satisfaction survey.
Your email address is not combined with the survey data and is stored separately from your responses.
We store the questions and answers from the survey. The anonymous survey results are evaluated and processed internally by the relevant department. The results are analyzed exclusively by employees of the aforementioned responsible entity.
Your responses are fully anonymized and deleted once the evaluation has been completed, unless there are reasons that justify a longer retention period (for example, if you have given your consent in accordance with Art. 6 (1)(a) GDPR).
The documentation and any publication of the survey results are carried out exclusively in anonymous form, without identifying your name or any information that could lead to identification of your person.
For our online surveys (e.g., regarding products and services), we use Microsoft Forms, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521 (“Microsoft”).
The online surveys are intentionally anonymous, and you are not required to provide any personal data. We therefore ask that you refrain from entering any personal data in optional open-text fields. Microsoft Forms encrypts data both at rest and in transit.
Further information on Microsoft Forms’ security and privacy can be found here: https://support.microsoft.com/de-de/office/sicherheit-und-datenschutz-in-microsoft-forms-7e57f9ba-4aeb-4b1b-9e21-b75318532cd9
We have concluded a data processing agreement (DPA) with Microsoft Ireland Operations Limited.
This service uses cookies. Further information can be found in our consent banner.
Additional information on Microsoft’s privacy practices is available at https://privacy.microsoft.com/privacystatement.
1.3 What is the legal basis for data processing?
The processing of personal data is generally based—unless specific legal provisions apply—on Article 6 GDPR. In particular, the following legal bases apply:
-
Data processing based on a balancing of interests (Art. 6 (1)(f) GDPR)
The legitimate interest arises from the above-mentioned purpose. The legal basis for sending invitations to participate in the customer survey is also the absence of an objection in accordance with Section 7 (3) of the German Act Against Unfair Competition (UWG).
If we process data based on a balancing of interests, you, as the data subject, have the right to object to such processing of personal data in accordance with Article 21 GDPR.
1.4 How long are the data stored?
We process the data as long as necessary for the respective purpose.
If statutory retention requirements exist (e.g., under commercial or tax law), the personal data concerned will be stored for the duration of the mandatory retention period. After the retention period expires, we assess whether further processing is necessary. If it is not, the data are deleted.
As a rule, we review data at the end of each calendar year regarding the necessity of storage. Due to the data volume, this review is carried out based on specific data categories or processing purposes.
Of course, you may request information about your stored personal data at any time and, if processing is no longer necessary, request its deletion or restriction.
1.5 Who receives the data?
Your personal data will only be transferred to third parties when necessary to fulfill a contract with you, if the transfer is permitted based on legitimate interest under Art. 6 (1)(f) GDPR, if we are legally required to do so, or if you have consented to such a transfer.
1.6 Where is the data processed?
Your personal data are processed exclusively in data centers located within the Federal Republic of Germany.
1.7 Your rights as a data subject
You have the right to obtain information about the personal data we process concerning you.
For inquiries not submitted in writing, please understand that we may require proof verifying your identity.
You also have the right to correct, delete, or restrict processing of your data where legally applicable.
Furthermore, you have the right to object to processing under the applicable legal requirements and the right to data portability in accordance with data protection regulations.
In particular, under Article 21 (1) and (2) GDPR, you have the right to object to the processing of your data for direct marketing purposes if such processing is based on a balancing of interests.
1.8 Where can you lodge a complaint?
If you wish to exercise your rights or have general questions about data protection within the SÜLZLE Group, you can contact us at any time using the contact details provided above.
You also have the option to lodge a complaint with a data protection supervisory authority. A list of these authorities and their contact details can be found here.