for the processing of personal data in accordance with the EU Data Protection Regulation (DS-GVO, as of May 25, 2018) , in conjunction with the country-specific data protection regulations applicable to Customized Products UG – hereinafter CP-.
Visit to the website
1. Contact form
If you send us personal data in the context of an inquiry, feedback or communication about our services or products, or fill out and send our corresponding Internet contact form, we process and use this data exclusively to process your request, your inquiry or to respond to your inquiry sent to us. If no business relationship is established, the personal data will be deleted.
2. Personal data
Personal data is individual information about personal or factual circumstances of a specific or identifiable person. This includes information such as your name, your e-mail address, your address and also usage data such as your IP address. In Switzerland, personal data also refers to legal entities.
If the processing of personal data is necessary and there is no legal basis for such processing, CP generally obtains the consent of the data subject. This consent also relates to the transfer of personal data to external service providers and third parties, as described below. You may revoke this consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
The CP website uses session-related cookies. These are small text files that are stored on the computer used by the user as soon as the user has logged in. Through this, the operator automatically receives certain data such as the IP address, browser used, operating system about your computer and your connection to the Internet. After successful logout from the website, the cookies are deleted again. Each user can set the permission of cookies in his browser itself. In order to use the full functions of the website, cookies must be allowed. If this is not the case, only limited use of the website is possible.
5. Web analysis / tracking
6. Social plugins and tracking
CP uses plugins and apps on their website, Facebook, Instagram and Youtube:
Establishment of a business relationship
1. Data storage
If a contract with CP is concluded by means of an offer and its acceptance, the personal data (master data) will be used and stored for the duration and the execution of the respective contract content. After termination of the respective contract, the data will be stored expressly only on behalf of and in accordance with the instructions of the customer and for the purpose of fulfilling tax or other statutory retention obligations and will subsequently be deleted.
Other data processed for the execution of the respective subject matter of the contract (e.g. contract-specific data transmitted by the client) will be deleted at the latest upon termination of the respective contract, unless further storage is ordered by and in accordance with the instructions of the client and/or serves the execution of the respective subject matter of the contract, or is required for the protection of CP’s legitimate interests, or for the fulfillment of statutory retention obligations.
CP does not use automatic decision-making or profiling.
2. Data transfer
To the extent necessary for the fulfillment and within the scope of the respective contract content, CP will transfer the personal data to external service providers (for example, delivery and payment service providers, etc.). CP shall contractually ensure that the respective recipients of personal data are subject to the same data protection obligations; compliance with the same is the responsibility of the external service providers involved.
Otherwise, CP will not disclose personal data to third parties unless this is necessary for the fulfillment of a contractual agreement, the client expressly consents to the disclosure of his data, or CP is obligated to disclose his data due to a mandatory legal provision, court decision or official order.
3. Data protection
CP will entrust the processing of personal data related to the respective order exclusively to personnel who have been instructed in accordance with the legal requirements and are bound to confidentiality. Appropriate measures will be taken to ensure that such personnel process personal data only on CP’s instructions, using technical and organizational security measures with the aim of adequately protecting personal data. These security measures are regularly monitored and continuously improved in line with technological developments. This includes the use of encrypted connections (SSL), when transmitting personal data through our website.
Insofar as CP processes personal data, you have the right in accordance with the statutory provisions:
- To request information about the personal data processed by CP;
- to demand the correction of incorrect data and, taking into account the purposes of the processing, the completion of incomplete data;
- to request the erasure of your data for legitimate reasons;
- to request the restriction of the processing of your data, if the legal requirements are met;
- to obtain data portability, if the legal requirements are met, of the data you have provided in a structured, common and machine-readable format and to transfer this data to another controller or, if technically feasible, to have it transferred by CP.
You also have the right to object to the processing of your data, as well as the right to data portability in accordance with the legal provisions (right of objection). To exercise your rights, please contact:
Customized Products UG, Rebhalde 15, 88142 Wasserburg, Germany.
E-mail address: firstname.lastname@example.org
Tel.: 0049/ 1794260843
Responsible person is Mr. Marvin Grossmann
Your right to file a complaint with a supervisory authority for data protection remains unaffected.
Note on the provision and processing of personal data
1. Provision of personal data
The provision of personal data is partly required by law (for example, tax regulations) or may result from contractual provisions (for example, information about the contractual partner). In order to conclude a contract, it may be necessary for a data subject to provide CP with personal data that must subsequently be processed. Failure to provide the personal data would possibly result in the contract with the data subject or a third party not being able to be concluded. Before providing personal data by the data subject, the data subject may contact the aforementioned person in charge of CP. If the data subject turns to the latter, the controller will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or by contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
2. Legal basis of the processing of personal data
Art. 6 (1) a DS-GVO is the legal basis for CP for processing operations where consent is required for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, which is the case, for example, for processing operations that are necessary for a delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 para.1 b DS-GVO. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about CP’s products or services. If CP is subject to a legal obligation by which a processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 c DS-GVO. Conceivably, in rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. Then the processing would be based on Art. 6(1)(d) DS-GVO. Finally, processing operations could be based on Art. 6(1)(f) DS-GVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of CP or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.