Data Subject Rights

Dear user,

The protection of your personal data is important to us. Under the EU General Data Protection Regulation (GDPR), we  or our client, on whose behalf we are providing you with this software, are obliged to inform you of the purposes for which our company collects, stores or transfers data. This information also sets out your rights regarding data protection.

1 Responsibility for data collection

The data controller is:
Company: bbg bitbase group GmbH
Adress:  Am Heilbrunnen 47, D-72766 Reutlingen
Contact details:
Telephone: +49 (0) 7121 680849-0
Fax: +49 (0) 7121 680849-99
mail@bitbasegroup.com
www.bitbasegroup.com

You can contact the responsible data protection officer at:
bbg bitbase group GmbH
Data Protection Officer
Am Heilbrunnen 47, 72766 Reutlingen
Email: datenschutz@bitbasegroup.com

2 Purpose of data processing

Data processing is carried out in accordance with legal requirements in order to establish a business relationship between you and us and to fulfil the associated obligations.

To this end, we process your personal data, in particular your contact details. 

These include title, first name, surname and email address, which we collect as provided by you (for example, via a business card) or supplement based on our own research. Where the SEPA Direct Debit mandate has been selected as the payment method, we collect the following additional details in order to process the direct debit and to be able to issue refunds: name of the account holder(s), address details of the account holder(s), bank and IBAN.

We need to collect your data in order to provide you with personalised information about our products, offers, orders or any other matters arising from our business relationship with you. If the necessary information is not provided, we will be unable to offer you the level of care and support you require. 

3 Recipients of your data

We will only retain your personal data for as long as is necessary to carry out the treatment.

We store your personal data for the purposes mentioned above and only for as long as is necessary. Your data will be processed from the time it is collected, provided that you or a third party have provided it to us.

We will only disclose your personal data to third parties where this is permitted by law or where you have given your consent. Recipients of your personal data may include, amongst others, credit reference agencies (e.g. Schufa, Creditreform) for the purpose of assessing creditworthiness or the risk of non-payment, and public authorities for the resolution of legal disputes. In individual cases, data may be transferred to other authorised recipients. Should we wish to process your personal data for a purpose not previously mentioned, we will inform you of this in advance in accordance with the relevant legal provisions.

We will delete your personal data once the contractual relationship with you has ended, all mutual claims have been settled, and there are no other statutory retention obligations or legal grounds justifying the storage of such data. These include, amongst other things, retention obligations under the German Commercial Code (HGB) and the German Fiscal Code (AO). This means that we will delete your personal data at the latest upon expiry of the statutory retention obligations, which is usually 10 years after the last document was sent.

4 Your rights

Under Article 12 et seq. of the GDPR, you have the right to obtain information from the data controller regarding the personal data concerning you. The bbg bitbase group provides you with the means to access this information. You may also request the rectification of inaccurate data.

Furthermore, subject to certain conditions, you have the right to erasure, the right to restrict processing and the right to data portability.

Your data is processed in accordance with legal provisions. We only require your consent in exceptional cases. In such cases, you have the right to withdraw your consent for future processing.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg

P.O. Box 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
E-Mail: poststelle@lfdi.bwl.de

5  Legal Basis

Fulfilment of (pre-)contractual obligations under Article 6(1)(b) of the GDPR
The processing of personal data is carried out on the basis of Article 6(1)(b) of the GDPR and thus for the fulfilment of contractual or pre-contractual obligations, in particular in connection with the obligations of employees arising from their employment relationship, in conjunction with Section 26(1) of the BDSG, as well as in the relationship between the contractor and its client in relation to the sale, operation and distribution of kameon plc, as well as all activities necessary for this purpose (e.g. customer management, support, improvement).

Compliance with legal obligations under Article 6(1)(c) of the GDPR
The processing of personal data is primarily intended to create and maintain a record of all processing activities, in accordance with Article 30 of the GDPR, and may, in some cases, be necessary for the purpose of complying with other legal obligations and requirements to which we are subject, for example under the German Commercial Code or the German Fiscal Code.

Consent pursuant to Article 6(1)(a) of the GDPR
In specific cases, you may have given us your consent to process your data. In such cases, the processing will be carried out in accordance with the purposes set out in the consent form and to the extent agreed there.

Consent that has been given, for example to receive a newsletter, may be withdrawn at any time with effect for the future. To do so, please contact our Data Protection Officer. Please note that any processing carried out prior to the withdrawal is not affected by the withdrawal and that, in certain circumstances, data processing may continue, at least in part, on a different legal basis.