Article 13
Information Obligations

The Protection of Your Personal DataThe protection of your personal data is of particular importance to us. We therefore process your personal data (hereinafter “data”) exclusively on the basis of legal provisions. With this privacy policy, we aim to inform you comprehensively about the processing of your data within our company and about your data protection rights in accordance with Art. 13 of the European General Data Protection Regulation (EU GDPR).


1. Who is Responsible for Data Processing and Whom Can You Contact?

Responsible:
Zechmayer GmbH
Tool and Mold Making
Karl-Krampol-Straße 2
92655 Grafenwöhr, Germany
Tel.: +49 (0) 9641 / 933-0
Fax: +49 (0) 9641 / 933-200
Email: info@zechmayer.de

Represented by the Managing Directors:
Rainer Zechmayer / Jörg Zechmayer

Company Data Protection Officer:
Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg, Germany
Email: anfragen@projekt29.de
Tel.: +49 941-2986930


2. Which Data is Processed and from Which Sources?

We process data that we receive from you in the context of contract initiation or execution, based on consents, during your application or employment with us.Personal data includes:

• Customers: Name, address, contact data (email, phone, fax), bank details.
• Applicants and Employees: Name, address, contact data, date of birth, resume and employment record data, bank details, religious affiliation, images.
• Business Partners: Names of legal representatives, company, commercial register number, VAT ID, company number, address, contact data, bank details.
• Trade Fair Visitors: Name, address, contact data.
• Visitors to Our Company: Name and signature.

Other personal data processed:

• Contract, order, sales, and document information; customer and supplier history; consulting documents.
• Data from electronic communications (e.g., IP address, login data).
• Data collected during business interactions (e.g., meetings).
• Documentation of consent to receive newsletters.
• Photos taken during events.

3. Purposes and Legal Basis for ProcessingWe process your data in accordance with the GDPR and the Federal Data Protection Act 2018:

• Performance of Contractual Obligations (Art. 6(1)(b) GDPR): Data is processed for contract execution and employee administration.
• Legal Obligations (Art. 6(1)(c) GDPR): Data processing is required to comply with legal obligations (e.g., Commercial Code, Tax Code).
• Legitimate Interests (Art. 6(1)(f) GDPR): Data may be processed to protect legitimate interests, e.g., for marketing, business management, customer database maintenance, legal claims, or sending non-sales-related information.
• Consent (Art. 6(1)(a) GDPR): Data is processed when you have given consent (e.g., newsletter, photo publication, contests).

4. Processing Personal Data for AdvertisingYou may object at any time to the use of your personal data for marketing purposes, either entirely or for individual measures, without any cost other than standard transmission fees.
Under §7(3) UWG, we may use your email address provided at contract conclusion for direct marketing of similar products or services. You may object at any time without cost beyond transmission fees. Every marketing email includes an unsubscribe link.


5. Who Receives My Data?

If we use service providers for processing, we remain responsible for protecting your data. Processors are contractually obliged to process data confidentially and only as necessary for service delivery.
Data may be shared with IT service providers, group companies (as needed for contract execution), authorities, courts, auditors, insurance companies, banks, credit agencies, and other service providers.


6. How Long is My Data Stored?

Data is stored until the end of the business relationship or until statutory retention periods expire (e.g., Commercial Code, Tax Code, Working Hours Act), and until the conclusion of any legal disputes requiring the data as evidence.


7. Is Personal Data Transferred to Third Countries?

Data is generally not transferred to third countries. Any transfer occurs only based on EU adequacy decisions, standard contractual clauses, appropriate safeguards, or your explicit consent.


8. What Data Protection Rights Do I Have?

You have the right at any time to:

• Access: Request information on whether and to what extent we process your data.
• Correction: Request correction or completion of incomplete or inaccurate data.
• Deletion: Request deletion of your data if processing is unlawful or disproportionate, unless retention obligations exist.
• Restriction: Request restriction if data accuracy is disputed, processing is unlawful but deletion is refused, data is no longer needed for the intended purpose but required for legal claims, or you objected to processing.
• Data Portability: Request your data in a structured, common, machine-readable format and transfer to another controller.
• Objection: Object to processing based on legitimate interest or for direct marketing.
• Complaint: Contact us or the relevant supervisory authority for violations of data protection law.

To exercise these rights, please contact our Data Protection Officer. Identity verification may be required.


9. Am I Obliged to Provide Data?

Providing your data is required for concluding or performing a contract with us. Without it, we may refuse contract conclusion or terminate existing contracts. You are not obliged to consent to data processing for non-essential or legally unnecessary data.