1. General information
Here you will find information about the collection and use of personal data ("data") in the course of our business activities. In this case, we have a business relationship with you or your employer or client, e.g. the initiation, execution or termination of a contractual relationship in the course of our business activities.
1.1 Responsible person (controller)
The controller within the meaning of Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:
KEGON AG
Kirchgasse 6
D-65185 Wiesbaden
Phone +49 611 20 50 80
Fax +49 611 20 50 8 25
E-Mail: info(at)kegon.de
1.2 Data Protection Officer
Our data protection officer is:
Thomas Rosin
Klaus-Groth-Str. 4
23611 Bad Schwartau
E-Mail: datenschutz(at)kegon.de
Web: https://thomasrosin.de
2. General information
We expressly point out that data transmission on the Internet (e.g. when communicating by e-mail) is subject to security vulnerabilities and cannot be completely protected against access by third parties. For a more secure transmission of data, we will be happy to provide you with alternative transmission methods for digital data on informal request.
The use of our contact data for commercial advertising is expressly not desired unless we have given our prior consent or a business relationship already exists. We hereby object to any commercial use and disclosure of our data.
Personal data
Personal data is individual information about the personal or factual circumstances of an identified or identifiable natural person (data subject). Personal data includes, for example, name, address, date of birth, occupation, company affiliation, but also information such as professional skills, hobbies, behavior, etc. The purpose of the German Federal Data Protection Act and other specific standards is to protect the rights and freedoms of data subjects with regard to their data from misuse.
3. Data categories and origin (direct collection, employer)
We process personal data that you provide to us as part of the business relationship. If our business relationship is with your employer or client, we also collect personal data from you or from your employer or client. This includes the following data or categories of data:
- Master data (e.g. name and salutation, title, job title/position description)
- Contact details (e.g. telephone number, fax number, e-mail address, postal address)
- Communication data (e.g. content of personal, telephone or written communication)
- Training and examination data (e.g. as part of our training courses and certifications)
In addition, we process the following categories of personal data that we generate ourselves:
- Master data (e.g. customer number or contact number)
- Offer and contract data (e.g. contract identifier, contract history)
- Consulting and training data (e.g. protocols, reports, analyses, attendance lists, certificates)
4. Data categories and origin (sales partners)
If you are in contact with one of our sales partners and express a wish to purchase products or services from us, we collect your personal data via this sales partner. This includes the following data or categories of data:
- Master data (e.g. name and salutation, title, job title/position description)
- Contact details (e.g. telephone number, fax number, e-mail address, postal address)
- Communication data (e.g. content of personal, telephone or written communication)
5. Processing purposes
If you are a contractual partner yourself, we process your personal data to fulfill contractual obligations (Art. 6 (1) (b) GDPR), more precisely for the purpose of initiating, executing or fulfilling a contract with you. These are, for example, the placement of orders, internal sales work, the provision and payment of products and services or contract negotiations.
If you are not a contractual partner yourself - such as an employee of a business partner - the processing is carried out for the same purposes as a legitimate interest pursuant to Art. 6 (1) (f) GDPR. We are then in the process of initiating or executing a contractual relationship with your employer or client as part of our business activities. Due to your activity for your employer or client, we process your personal data for this purpose.
Furthermore, where necessary, we process personal data to fulfill legal requirements (Art. 6 (1) (c) GDPR) for the following purposes:
- Fulfillment of legal verification and retention obligations
- Fulfillment of statutory reporting obligations
In addition, we process personal data to protect the following legitimate interests (Art. 6 (1) (f) GDPR):
- Maintaining the business relationship
- Organization of training courses or other events
- Assertion of legal claims and defense in legal disputes
- Inclusion in our contact database or maintaining contact after a business contact (e.g. if you provide us with your business card)
- Direct marketing to customers or employees of customers (e.g. information about products and services)
In addition, we may process personal data for the processing of which you have given us your consent (Art. 6 (1) (a) GDPR). We obtain this separately, for example in the following cases
- Sending newsletters
- Photo/video publications
- Audit supervision and monitoring
6. Location of data processing
We generally process your personal data in Germany and the European Union (EU), as well as in Switzerland. If processing in countries outside the European Union (so-called third countries) is necessary, we ensure that an adequate level of data protection is in place there. This is the case if the European Commission has issued an ‘adequacy decision’ (Art. 45 GDPR) for the country in question, or if the recipient has put in place ‘appropriate safeguards’ (Art. 46 GDPR) or ‘internal data protection rules’ (Art. 47 GDPR). If necessary, we also agree on specific measures with the recipient. Further information on this can be found on the European Commission’s website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=en.
7. Direct advertising
In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to any profiling insofar as it is associated with direct advertising.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
8. Your rights
You have the following rights vis-à-vis us with regard to your personal data:
- Right to information (Art. 15 GDPR),
- Right to rectification or erasure (Art. 16, 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to the processing we carry out on the basis of legitimate interests (Art. 21 GDPR), see the further information at the end of this declaration.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
If there is actually a reason for a complaint, you can also contact our data protection officer named above directly at any time.
9. Recipients of data
The personal data processed in connection with our business activities may be disclosed to the following categories of recipients:
- Providers of services (e.g. IT services) who are used by us as processors without exception.
- Service provider for telecommunications and logistics
- Authorities and other public bodies, insofar as corresponding legal obligations exist
- Credit agencies, financial service providers
- Sales partner
- and the external data protection officer
10. Storage duration
We process your personal data for as long as it is required for the above-mentioned purposes. After termination of the business relationship, your data will be stored for as long as we are legally obliged to do so. This results from legal obligations to provide evidence and retain data, which are regulated in the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The storage period is up to ten years. It may also be necessary to retain certain personal data for as long as claims can be asserted against us (limitation period of three to ten years, rarely up to thirty years).
11. Further information
There is no legal obligation to provide your data. However, it is not possible for us to initiate or execute a contractual relationship with you or your employer or client without processing personal data.
It may be necessary to provide your data for the fulfillment of a contract. For information on this, please refer to the existing contract documents.
Automated decision-making processes that could have legal effects on you or significantly affect you in a similar way do not take place in connection with your use of this website.
12. Changes to this privacy policy
We reserve the right to amend this privacy policy in accordance with the statutory data protection regulations. The currently valid version can be viewed in the data protection section of our website.
13. Information about your right to object in accordance with Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which we carry out on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a legitimate interest).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
The objection can be made informally and should preferably be addressed to the contact details listed in the privacy policy or in the imprint.