The controller within the meaning of data protection law is:

CAVEX GmbH & Co. KG
Tübinger Straße 2
72131 Ofterdingen
Phone: +49 (0) 7473 95 546 – 0
Email: datenschutz@cavex-gmbh.de

Contact details of the data protection officer:
Stefan Löffler
datenschutz@cavex-gmbh.de

If we have received data from you, we will generally only process it for the purposes for which we received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Article 6(4) GDPR are met. We will, of course, comply with any information obligations under Article 13(3) and Article 14(4) GDPR in such cases.

The legal basis for the processing of personal data is generally – unless there are more specific legal provisions – Article 6 GDPR. The following options are particularly relevant here:

• Consent
  (Art. 6 para. 1 lit. a) GDPR)
• Data processing for the performance of contracts
  (Art. 6 para. 1 lit. b) GDPR)
• Data processing based on a balancing of interests
  (Art. 6 para. 1 lit. f) GDPR)
• Data processing to fulfill a legal obligation
  (Art. 6 para. 1 lit. c) GDPR)

If personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future.

If we process data based on a balancing of interests, you as the data subject have the right to object to the processing of your personal data in accordance with the provisions of Article 21 GDPR.

We process the data for as long as this is necessary for the respective purpose.

Where statutory retention obligations exist – e.g., under commercial or tax law – the relevant personal data will be stored for the duration of the retention period. After the retention period has expired, it will be reviewed whether further processing is necessary. If further processing is no longer necessary, the data will be deleted.

As a general rule, we review data at the end of each calendar year to determine whether further processing is necessary. Due to the volume of data, this review focuses on specific data types and processing purposes.
Of course, you can request information about the data we have stored about you at any time (see below) and, if further processing is no longer necessary, request that the data be deleted or its processing restricted.

Your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, or if the disclosure is based on a balancing of interests pursuant to Art. 6 para. 1 lit. f) GDPR, we are legally obliged to disclose the data, or you have given your consent.

Your personal data will be processed by us exclusively in data centers located in the Federal Republic of Germany.

You have the right to information about the personal data we process concerning you.

For information requests that are not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have the right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to this.

Furthermore, you have the right to object to processing within the framework of legal requirements. You also have a right to data portability within the framework of data protection regulations.

In particular, you have the right to object under Article 21(1) and (2) GDPR to the processing of your data in connection with direct marketing if this is based on a balancing of interests.

You have the right to lodge a complaint with the data protection officer named above or with a data protection supervisory authority. The data protection supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Postfach 10 29 32, 70025 Heilbronner Straße 35, 70191 Stuttgart
Phone: +49 (0) 711 61 55 41 – 0, Fax: +49 (0) 711 61 55 41 – 15
Email: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de