Data Processing Principles at TISSO Naturprodukte GmbH
You arrived at this page via a link because you want to learn about how we handle (your) personal data. To fulfill our disclosure obligations under Articles 12 et seq. of the General Data Protection Regulation (GDPR), we are pleased to provide the following information regarding data protection:
Who is responsible for data processing?
The controller within the meaning of data protection law is
TISSO Naturprodukte GmbH
Eisenstraße 1
D-57482 Wenden
You can find further information about our company, details on authorized representatives, and additional contact options in the legal notice section of our website: https://www.tisso.de/impressum
What data do we process about you? And for what purposes?
If we have received data from you, we will generally process it only for the purposes for which we received or collected it.
Data processing for other purposes will only be considered if the necessary legal requirements under Article 6(4) of the GDPR are met. In such cases, we will, of course, comply with any information obligations under Article 13(3) and Article 14(4) of the GDPR.
What is the legal basis for this?
The legal basis for the processing of personal data is generally—unless specific legal provisions apply—Article 6 of the GDPR. In particular, the following options may apply:
- Consent (Article 6(1)(a) of the GDPR)
- Data processing for the performance of contracts (Article 6(1)(b) of the GDPR)
- Data processing based on a balancing of interests (Article 6(1)(f) of the GDPR)
- Data processing to fulfill a legal obligation (Article 6(1)(c) of the GDPR)
If personal data is processed based on your consent, you have the right to withdraw that consent at any time with future effect.
If we process data based on a balancing of interests, you, as the data subject, have the right to object to the processing of your personal data, subject to the provisions of Art. 21 GDPR.
How long is the data stored?
We process the data for as long as necessary for the respective purpose.
To the extent that statutory retention obligations apply—e.g., under commercial or tax law—the relevant personal data will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will assess whether there is still a need for further processing. If there is no longer a need, the data will be deleted.
As a general rule, toward the end of each calendar year, we review the data to determine whether further processing is necessary. Due to the volume of data, this review focuses on specific data categories or processing purposes.
Of course, you may at any time (see below) request information about the data we have stored about you and, if there is no longer a necessity for processing, request that the data be deleted or that processing be restricted.
To whom is the data disclosed?
Your personal data is generally disclosed to third parties only if this is necessary for the performance of the contract with you, if the disclosure is permissible based on a balancing of interests within the meaning of Article 6(1)(f) of the GDPR, we are legally obligated to do so, or you have given your consent in this regard.
Your Rights as a “Data Subject”
You have the right to access the personal data we process about you.
If a request for information is not submitted in writing, please understand that we may require you to provide proof that you are the person you claim to be.
Furthermore, you have the right to rectification, erasure, or restriction of processing, to the extent that you are legally entitled to such rights.
You also have the right to object to the processing within the framework of the legal requirements. The same applies to the right to data portability.
In particular, you have the right to object, pursuant to Article 21(1) and (2) of the GDPR, to the processing of your data in connection with direct marketing if such processing is based on a balancing of interests.
Our Data Protection Officer
We have appointed a Data Protection Officer for our company. You can contact him using the following contact information:
Attorney Dr. Sebastian Kraska
Marienplatz 2
80331 Munich
Email: skraska@iitr.de
Right to File a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
Effective as of May 30, 2018
