You have come to this page via a link because you want to find out how we handle (your) personal data.

In order to fulfill our information obligations in accordance with Art. 13 and Art. 14 of the General Data Protection Regulation (GDPR), we are pleased to provide you with our information on data protection below:

1. controller within the meaning of the General Data Protection Regulation (GDPR)

Mich. Weyermann® GmbH & Co. KG
Brennerstr. 17-19
96050 Bamberg

E-mail:

2. data protection officer within the meaning of the General Data Protection Regulation (GDPR)

We have appointed a data protection officer in our company

ITs Hein GmbH
Andreas Hein
Kulmbacher Straße 27b
95460 Bad Berneck im Fichtelgebirge

If you have any questions about data protection, please contact

E-mail:

We expressly point out that when using this e-mail address, the contents are not exclusively taken note of by our data protection officer.

If you wish to exchange confidential information, we therefore ask that you first contact the data protection officer directly via this e-mail address.

3. which of your data are processed by us? And for what purposes?

When you contact us, we store and process your resulting personal data for the purpose of processing your request. Personal data resulting from this context may be: first name, surname, e-mail address, IP address.

If we have received data from you, we will only process it for the purposes for which we received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.

4. Legal bases for the processing of personal data

The legal basis for the processing of personal data is generally – unless there are specific legal provisions – Art. 6 GDPR. The following possibilities in particular come into consideration here:

The processing of your personal data is based on Art. 6 para. 1 lit. b) – GDPR, insofar as your request is related to the fulfillment of contracts or is necessary for the implementation of measures to initiate a contract.

In other cases, the processing is based on our legitimate interest Art. 6 para. 1 lit. f) – GDPR. We have an interest in effectively processing your inquiries addressed to us.

If we have obtained consent for the processing of your personal data in accordance with Art. 6 (1) (a) GDPR, we will store your data until the purpose for which it was stored no longer applies or you withdraw your consent. You can withdraw your consent at any time with effect for the future. However, this does not affect the lawfulness of the processing up to the point of withdrawal.

5. recipients of the personal data

When you contact us, your personal data will be forwarded within our company exclusively to the employees responsible and to those responsible for the respective department in order to process your request.

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permitted on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) – GDPR, if we are legally obliged to pass on the data or if you have given your consent in this respect.

Our company uses the services of specialized software providers for the process. Your personal data is therefore processed by the software providers on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In this respect, our company ensures compliance with the provisions of the GDPR.

6. transfer of personal data to a third country

Your personal data will be processed exclusively in data centers in Germany/the European Union.

7. duration of the storage of personal data

We process the data for as long as this is necessary for the respective purpose.

Insofar as statutory retention obligations exist – e.g. in commercial law or tax law – the relevant personal data will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted.

At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing.

Of course, you can request information about the data we have stored about you at any time (see below) and, if it is not necessary, request that the data be deleted or processing be restricted.

8. Your rights as a data subject

With regard to your personal data, you have the following rights vis-à-vis our company

• in accordance with Art. 15 GDPR, a right to information about the data processed by you
• in accordance with Art. 16 GDPR, a right to rectification of your incorrect data
• in accordance with Art. 17 GDPR, a right to erasure of your data,
• in accordance with Art. 18 GDPR, a right to restriction of the processing of your data and
• a right to data portability in accordance with Art. 20 GDPR.

If your particular situation gives rise to reasons against the processing of your personal data, which was carried out by our company on the basis of Art. 6 para. 1 lit. f) GDPR to safeguard legitimate interests, you can exercise your right of objection at any time in accordance with Art. 21 GDPR and object to the data processing.

In addition, you have the right to withdraw consent given to our company in accordance with Art. 7 (3) GDPR. You can exercise your right of revocation at any time with effect for the future. This means that the processing of your personal data carried out by our company until you exercise your right of withdrawal remains lawful.

Furthermore, in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the provisions of the General Data Protection Regulation (GDPR).

9. provision of data

As part of the processing of your inquiries, the provision of personal data is neither legally nor contractually standardized. However, certain personal data is necessary for the implementation of pre-contractual measures and the possible execution of a resulting contract. Without the provision of certain personal data, it may not be possible to conclude a contractual relationship.

10. Automated decision making

The decisions made for the purpose of initiating a contract are not based on automated processing, so that no automated decision-making within the meaning of Art. 22 GDPR takes place in our company in individual cases.

Status: 10.10.2023