Data Processing Principles at TISSO Naturprodukte GmbH
You arrived at this page via a link because you would like to learn more about how we handle (your) personal data. To fulfill our disclosure obligations under Articles 12 et seq. of the General Data Protection Regulation (GDPR), we are pleased to provide the following information regarding data protection:
Who is responsible for data processing?
The data controller within the meaning of data protection law is the
TISSO Naturprodukte, LLC
1 Eisenstraße
D-57482 Wenden
You can find more information about our company, details about the authorized representatives, and additional contact options in the legal notice section of our website: https://www.tisso.de/impressum
What personal data do we process about you? And for what purposes?
If we have received data from you, we will, as a general rule, process it only for the purposes for which we received or collected it.
Data processing for other purposes will only be considered if the necessary legal requirements under Article 6(4) of the GDPR are met. We will, of course, comply with any information obligations under Article 13(3) and Article 14(4) of the GDPR in such cases.
What is the legal basis for this?
The legal basis for the processing of personal data is generally—unless there are specific legal provisions to the contrary—Article 6 of the GDPR. In particular, the following options may apply:
- Consent (Art. 6(1)(a) of the GDPR)
- Data Processing for the Purpose of Fulfilling Contracts (Art. 6(1)(b) of the GDPR)
- Data processing based on a balancing of interests (Art. 6(1)(f) of the GDPR)
- Data processing to fulfill a legal obligation (Art. 6(1)(c) of the GDPR)
If your personal data is processed based on your consent, you have the right to withdraw that consent at any time, effective for the future.
If we process data based on a balancing of interests, you, as the data subject, have the right to object to the processing of your personal data , subject to the provisions of Article 21 of the GDPR .
How long is the data stored?
We process the data for as long as is necessary for the respective purpose.
To the extent that statutory retention requirements apply—e.g., under commercial or tax law—the relevant personal data will be stored for the duration of the retention requirement. Once the retention period has expired, we will review whether there is still a need to process the data. If there is no longer a need, the data will be deleted.
As a general rule, toward the end of each calendar year, we review data to determine whether further processing is necessary. Due to the volume of data, this review focuses on specific types of data or specific purposes of processing.
Of course, you may at any time (see below) request information about the personal data we have stored about you and, if there is no longer a need for it, request that the data be deleted or that its processing be restricted.
To which recipients is the data disclosed?
As a general rule, your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible based on a balancing of interests within the meaning of Article 6(1)(f) of the GDPR, we are legally obligated to do so, or you have given your consent in this regard.
Your Rights as a “Data Subject”
You have the right to access the personal data we process about you.
If a request for information is not submitted in writing, please understand that we may require you to provide proof that you are who you claim to be.
In addition, you have the right to have your data corrected or deleted, or to restrict its processing, to the extent permitted by law.
Furthermore, you have the right to object to the processing of your data in accordance with legal requirements. The same applies to your right to data portability.
In particular, you have the right to object, pursuant to Article 21(1) and (2) of the GDPR, to the processing of your data in connection with direct marketing if such processing is based on a balancing of interests.
Our Data Protection Officer
We have appointed a data protection officer for our company. You can reach him or her using the following contact information:
Attorney Dr. Sebastian Kraska
2 Marienplatz
80331 Munich
Email: skraska@iitr.de
Right to File a Complaint
You have the right to file a complaint with a data protection supervisory authority regarding our processing of your personal data.
As of May 30, 2018
