Data protection information marketing
In this data protection information, we provide you with the mandatory information on the processing of your personal data. In relation to this processing, we comply with applicable data protection law, in particular the EU General Data Protection Regulation ("GDPR").
I. Who is responsible for the processing of personal data?
The controller responsible for the processing of personal data isXella International GmbH, Düsseldorfer Landstraße 395, 47259 Duisburg, +49 203 60880 00, firstname.lastname@example.org. Any reference to "we" or "us" in this data protection information is a reference to the aforementioned entity.
Our data protection officer may be contacted via the aforementioned means or via email@example.com.
II. Which data do we process? For which purposes and on which legal basis do we process your personal data?
We would like to inform you about our products, services, offers and promotions. For this purpose, we offer you the opportunity to choose between different contact channels when you give your consent.
Depending on your choice of one or more contact channels, we will process the necessary data as provided by you in the contact form, at least your surname and first name and the details of the contact channel (post, e-mail, telephone, SMS) selected by you.
Information via mail / email
If you have asked for information material to be sent, we will process the data you provide in the contact form, at least your name and surname and the details of the contact channel you have chosen (mail and/or e-mail) for the one-off dispatch of the material you have requested.
Consulting via telephone
If you have asked for consulting via telephone, we will process the data you provide in the contact form, at least your surname and first name as well as your telephone number in order to provide the desired consultation via telephone.
If you have asked for a personal consultation, we will process the data you provide in the contact form, at least your surname and first name as well as your telephone number and/or e-mail address, in order to contact you to arrange a personal consultation appointment.
If you have registered for our email newsletter, we will process the data you provide in the contact form, at least your surname and first name as well as your e-mail address, in order to send you our email newsletter
In addition, we use the other information you provide in the contact form (such as information about your activity or area of interest) to send you content tailored to your interests. We also analyze the data generated during delivery and retrieval of these e-mails in aggregated form (delivery rate, opening rate, click rates, conversion rate, unsubscription rate, bouncer rate) to analyze the success and use of the e-mails. On the other hand, we also evaluate the data generated when you access and use these e-mails (time of opening, hyperlinks clicked on, documents downloaded) in order to provide you with personalized information on this basis in future email newsletters that best takes your interests and needs into account.
General contact form
If you asked us about a specific concern via a general contact form, we will process the data provided in the contact form, at least the email-address in order to provide you with a one-off answer to your concern.
We process this personal data on the basis of your consent and according to Article 6 (1) a) GDPR.
III. Is there an obligation to provide personal data? Can I withdraw my consent?
You give your consent and choose your information and consulting option on a purely voluntary basis. You are therefore not obliged to provide personal data. In order that we can meet your information and consulting option, we require the data marked as mandatory fields in the contact form.
You can revoke your consent at any time without giving reasons with effect for the future by simply contacting us. You will also find a link to unsubscribe in each e-mail.
IV. Who has access to personal data?
We will never sell your email address of other contact data to third parties. The data will only be transferred if this is necessary to comply with your information / consulting request. In this context, we can also commission external service providers and other group companys, taking into account the applicable statutory regulations.
We will only share your information with the following categories of recipients to meet your information / consulting option:
- Service providers within our group of companies (e.g. to provide statistical analysis and technical maintenance for our systems).
- External service providers who provide services on our behalf and on a separate contractual basis, such as collecting your data, hosting our websites, maintaining our call center, sending e-mails or written information or providing personal advice.
In addition, we may transfer data to other recipients (e.g. public authorities) to the extent we are obliged to transfer your personal data on the basis of a legal obligation to which we are subject
V. Do we use automated decision-making?
In the course of our direct marketing activities we generally do not use automated decision-making (including profiling) within the meaning of Article 22 GDPR. If we apply such processes in the future, we will inform data subjects separately in accordance with the applicable statutory provisions.
VI. Are data transferred to countries outside the EU / the EEA?
Personal data is processed only within the European Union or the European Economic Area; we do not intend to transfer personal data to other countries.
VII. How long are your data stored?
We generally store personal data as long as we have a justified interest in the retention of such data and there the interest of the data subject in refraining from the further processing do not prevail. Even without a justified interest, we may continue to store the data if there is a legal obligation (e.g. to comply with statutory retention obligations). We delete personal data even without an action by the data subject as soon as further retention is no longer necessary for the purposes for which the data were collected or otherwise processed or if further retention is not permitted by law otherwise.
As far as the aforementioned processing is concerned, we
- will delete the data used for sending information via mail / email are deleted once the information was sent to you.
- will delete the data used for consulting via telephone or personal consultation once the respective consulting has been completed, if you did not declare your consent in the further processing of your data (e.g. to continue the consultation) or the further storage is not necessary for other purposes (e.g. to send you a specific offer on the basis of the consultation).
- will store the data to prepare and send the email newsletter as long as you did not withdraw your consent or object to the processing by other means. We may store your data also in these cases to ensure that you receive no further emails from us (blacklist).
If personal data need to be stored to comply with a legal obligation, such data is retained until the end of the respective retention period. If personal data are only processed to comply with a statutory retention obligation, the access to such data is usually restricted so that the data are only accessible if needed for the purpose of the retention obligation.
VIII. What are your rights as a data subject?
As a data subject, you may
- request access to your personal data, Article 15 GDPR;
- request the rectification of incorrect personal data, Article 16 GDPR;
- request the erasure of your personal data, Article 17 GDPR;
- request the restriction of the processing of your personal data, Article 18 GDPR;
- exercise your right to data portability, Article 20 GDPR;
- object the processing of your personal data, Article 21 DSGVO.
The aforementioned rights may be asserted against us, e.g. by providing notice to us via the contact details specified on the first page of this data protection information.
In case of further questions, you may also get in touch with our data protection officer.
In addition, you are entitled to lodge a complaint regarding the handling of your personal data with the competent supervisory authority, Article 77 GDPR.