Initial information according to Art. 13 GDPR
– for the appointment booking tool of wpd windmanager GmbH & Co. KG during the HUSUM Wind exhibition 2021.
With the following information we would like to inform you as a business partner, supplier or interested party or as a contact person of a business partner, supplier or interested party about our handling of the collection, use and disclosure of personal data.
I. Responsible entity
The responsible body for your personal data is:
wpd windmanager GmbH & Co. KG
Stephanitorsbollwerk 3 (Haus LUV)
28217 Bremen
E-Mail: datenschutz-wm@wpd.de
II. Legal basis and purposes for the processing of your personal data
The processing of your personal data may arise, on the one hand, due to the implementation of pre-contractual measures that precede a contractually regulated business relationship or, on the other hand, in the fulfillment of obligations arising from a concluded contract with you. This may include, for example, the processing of purchase orders, deliveries or payments, or the preparation and response to quotation requests from individuals, to determine the establishment or terms of a contractual relationship (Art. 6 (1) 1 lit. b GDPR).
In addition, wpd windmanager GmbH & Co. KG is subject to various legal obligations that may require the processing of your personal data (Art. 6 (1) 1 lit. c GDPR). These legal obligations may arise, for example, from tax law, commercial law, foreign trade law or sanctions law.
In addition, it may be necessary for the processing of your personal data to protect legitimate interests (Art. 6 (1) 1 lit. f GDPR). The legitimate interests are in particular the conclusion or implementation of contracts and other business relationships with our business partners, suppliers or interested parties for whom you may be acting as a representative or as an employee. Furthermore, legitimate interests are internal administrative purposes (e.g. for accounting) or for the assertion, exercise or defense of legal claims.
In the context of our business relationship, you must provide those personal data that are necessary for the establishment, implementation and termination of a business relationship and for the fulfillment of the associated obligations, which we are required by law to collect or are entitled to collect on the basis of legitimate interests. Without this data, we will generally not be able to contact you and/or enter into a business relationship with you. If you have provided us with data voluntarily, we will indicate this accordingly when collecting the data.
III. Recipients of your personal data
As a matter of principle, we do not transfer your data to third parties. Data will only be passed on if it is intended to be passed on, if you have expressly consented to the transfer in advance, or if we are obliged or entitled to do so by law. Exceptionally, data is processed by order on our behalf.
In the processing of your data, Microsoft Corporation supports us as a service provider and processor within the meaning of Art. 28 GDPR.
Data processing outside the European Union (EU) or the European Economic Area (EEA) does not take place in principle, as we have limited our storage location to data centers in the European Union. However, it cannot be ruled out that your data may also be processed outside the EU or the EEA or transmitted to Microsoft Corporation. In order to create an appropriate level of data protection, we have agreed the EU standard contractual clauses with Microsoft Corporation and have restricted the processing of personal data to a minimum in organizational terms.
IV. Retention period
Personal data will be retained for as long as is necessary to fulfill the above-mentioned purposes or as long as there are legal or contractual obligations to retain the data.
V. Your data subject rights
Data subjects have the right to obtain information from the controller about the personal data concerning them, as well as the right to have inaccurate data corrected or to have it deleted, provided that one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued. There is also the right to restriction of processing if one of the conditions specified in Art. 18 GDPR is present and in the cases of Art. 20 GDPR the right to data portability. If data is collected on the basis of Art. 6 (1) 1 lit. e (data processing for the performance of official duties or for the protection of the public interest) or lit. f (data processing for the protection of legitimate interests), the data subject has the right to object to the processing at any time for reasons arising from his or her particular situation. We will then no longer process the personal data, unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
You can assert your data protection rights here:
Postal address:
wpd windmanager GmbH & Co. KG
Stephanitorsbollwerk 3 (Haus LUV)
28217 Bremen
E-Mail: datenschutz-wm@wpd.de
Every data subject has the right to lodge a complaint with a supervisory authority if he or she believes that the processing of data relating to him or her violates data protection regulations. The right of complaint may in particular be asserted before a supervisory authority in the Member State of the data subject’s residence or the place of the alleged infringement. The competent supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information
Arndtstraße 1
27570 Bremerhaven
Phone: +49 421 3612010 or +49 471 5962010
Fax: +49 421 49618495
E-mail: office@datenschutz.bremen.de
VI. Contact details of the data protection officer
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
E-Mail: office@datenschutz-nord.de
Web: www.datenschutz-nord-gruppe.de
