Data protection declaration
We are delighted that you are interested in our company. Data protection is particularly important to the management of J. SCHNEEBERGER Maschinen AG. The use of the J. SCHNEEBERGER Maschinen AG website is fundamentally possible without the provision of any personal data. However, if an affected person wishes to avail of specific services of our company or via this website then it may be necessary to process personal data. If it is necessary to process personal data and if no legal basis for such processing exists then we will obtain the permission of the affected person as a general rule.
The personal data, for example the name, address, email address or telephone number of an affected person is always processed on the basis of the General Data Protection Regulation and in accordance with the applicable national data protection provisions valid for J. SCHNEEBERGER Maschinen AG. With this data protection declaration our company wishes to clearly inform the public of the type, scope and purpose of the personal data acquired, used and processed by us. Furthermore, the persons affected by this data protection declaration are informed here of their associated rights.
As the data controller, J. SCHNEEBERGER Maschinen AG has implemented numerous technical and organisational measures through which to ensure the highest possible level of seamless protection of your personal data processed via this website. However, internet-based data transmissions may always be at risk of security breaches and it is therefore not possible to guarantee absolute protection. For this reason, all affected persons are free to transmit their personal data to us via alternative routes, for example on the telephone.
1. Definition of terms
The data protection declaration of J. SCHNEEBERGER Maschinen AG is based on the terminology used by the European directives and legislature when enacting the General Data Protection Regulation (GDPR). Our data protection declaration should be simple to read and understand both for the public and also for our customers and business partners. In order to assure this, we would like to explain the terms used beforehand.
We use the following terms, amongst others, in this data protection declaration:
* a) Personal data
Personal data is all information that pertains to an identified or identifiable natural person (referred to in the following as affected person"). A natural person is deemed to be identifiable if they can be directly or indirectly identified, in particular with assignment to an identifier such as a name, an ID number, location data, an online identification, or one or more particular characteristics, which constitute a manifestation of the physical, physiological, psychological, mental, economic, cultural or social identity of this natural person.
* b) Affected person
An affected person is each identified or identifiable natural person, whose personal data is processed by the data controller.
* c) Processing
Processing is any procedure or sequence of procedures, executed with or without the help of automated processes, that takes place in conjunction with personal data, such as acquisition, recording, organisation, sorting, storage, alignment or modification, reading out, querying, utilisation, publication or wheellosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.
*d) Restriction of processing
The restriction of processing is the marking of stored personal data with the aim of restricting its future processing.
* e) Profiling
Profiling is any form of automated processing of personal data, which consists of using this personal data in order to evaluate specific personal aspects that pertain to a natural person, in particular in order to analyse or predict aspects pertaining to work performance, financial situation, health, personal preferences, interests, reliability, conduct or behaviour, whereabouts or change of location of this natural person.
* f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific affected person without drawing upon additional information, insofar as this additional information is stored separately and is subject to technical and organisational measures that guarantee that the personal data cannot be assigned to an identified or identifiable natural person.
* g ) Responsible party, data controller or person responsible for the processing
The responsible party, data controller or person responsible for the processing is the natural or legal person, authority, institution or any other entity that decides, autonomously or together with others, on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or by the law of the member states then the data controller or the specific criteria governing their designation may be set out by Union law or by the law of the member states.
* h) Order processor
An order processor is a natural or legal person, authority, institution or any other entity that processes the personal data on behalf of the data controller.
* i) Recipient
A recipient is a natural or legal person, authority, institution or any other entity to whom personal data is wheellosed, irrespective of whether this is a third party or not. However, authorities that may receive personal data within the framework of a specific investigation mandate in accordance with Union law or the law of the member states are not deemed to be recipients.
* j) Third parties
A third party is a natural or legal person, authority, institution or any other entity apart from the affected person, the data controller, the order processor and the persons who are authorised under the direct responsibility of the data controller, or the order processor, to process the personal data.
* k) Consent
Consent is every manner in which the affected person provides permission and clearly states their will in the form of a declaration or any other unambiguous action of conveying confirmation on a voluntary basis for the specific case, whereby the affected person confirms that they permit the processing of their respective personal data.
2. Name and address of the data controller
Data controller in the sense of the General Data Protection Regulation, or other data protection laws applicable in the member states of the European Union and other data protection provisions, is:
J. SCHNEEBERGER Maschinen AG
Geissbergstrasse 2
4914 Roggwil
Switzerland
Tel.: +41629184400
email: info@schneeberger.swiss
Website: www.schneeberger.swiss
3. Cookies
The internet pages of J. SCHNEEBERGER Maschinen AG use cookies. Cookies are text files that can be filed and stored on your computer via an internet browser.
Numerous internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identification for the cookie. It comprises a numerical sequence, which can be assigned though internet sites and servers to the concrete internet browser in which the cookie has been saved. This enables the visited websites and servers to distinguish the internet browser of the affected person from other internet browsers, which contain other cookies. A particular internet browser can be recognised and identified via the unique cookie ID.
Through the use of cookies, J. SCHNEEBERGER Maschinen AG can provide more user-friendly services to visitors to this website, which would not be possible without setting cookies.
Cookies can be used to optimise the information and services presented on our website for the specific user. As already mentioned, cookies enable us to recognise the users of our website. The purpose of this is to make the use of our website easier for the users. For example, the user of a website that uses cookies is not required to re-enter their access data every time they visit the site, because this will be done by the website and the cookie stored on the user's computer system. Another example, is the shopping basket cookie used in the online shop. The online shop makes a note of the items that a customer has placed in their virtual shopping basket through the use of a cookie.
The affected person is able to prevent the setting of cookies by our website at any time with the requisite settings in their internet browser, and thereby permanently inhibit the setting of cookies. Furthermore, any cookie previously set can be deleted via the internet browser or another software program at any time. This is possible in all popular internet browsers. If the use of cookies is deactivated by the person affected in their internet browser, it may not be possible to fully utilise all functions of our website under certain circumstances.
4. Acquisition of general data and information
The website of J. SCHNEEBERGER Maschinen AG acquires various general data and information every time an affected person or an automated system calls up the website. This general data and information is stored in the server log files. The data acquired may include the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which the accessing system arrived on our website (so-called referrer), (4) the sub-pages that are called up on our website by the accessing system, (5) the date and time of access to the website, (6) an Internet Protocol Address (IP Address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information that facilitates defence in the event of attacks of our information technology systems.
When using this general data and information, J. SCHNEEBERGER Maschinen AG draws no conclusions regarding the affected person. Rather, this information is in fact required in order to (1) deliver the contents of our website correctly, (2) optimise the contents of our website and our advertising for this, (3) guarantee the continuous functionality of our information technology systems and the technology of our website, and (4) so that we can provide the necessary information to the law enforcement authorities for the purpose of prosecution in case of a cyber attack. This anonymously acquired data and information is evaluated by J. SCHNEEBERGER Maschinen AG on the one hand statistically but is also processed with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the processed personal data. The anonymous data in the server log files is stored separately to all personal data provided by an affected person.
5. Registering on our website
The affected person has the option of registering on the website of the data controller by providing their personal data. The personal data that is transmitted to the data controller depends on the respective input screen that is used for registration. The personal data entered by the affected person is acquired and stored exclusively for internal use by the data controller and for their own purposes. The data controller can initiate the passing on of the personal data to one or more order processors, for example a mailing service provider, who will also use the data exclusively internally and for the purpose of the data controller.
When registering on the website of the data controller, the IP address assigned to the affected person by the Internet Service Provider (ISP), as well as the date and time of registration will also be stored. The storage of this data takes place because it is only in this way that misuse of our services can be prevented. Furthermore, if necessary this data also facilitates the detection of committed offences. As such, the storage of this data is necessary to safeguard the data controller. This data is never passed on to third parties unless a legal obligation exists to pass this on, or if this is necessary for prosecution purposes.
The registration of the affected person with the voluntary provision of personal data enables the data controller to offer the affected person contents or services that can only be offered to registered users due to the nature of the matter. Registered persons are entitled to have the personal data they provided at the time of registration amended or deleted from the data inventory of the data controller in full at any time.
On request, the data controller shall inform any affected person of the personal data that is stored about them at any time. Furthermore, the data controller shall correct or delete the personal data on request or notification by the affected person, unless statutory storage periods prevent this. All employees of the data controller are available to the affected person as points of contact in this regard.
6. Subscribing to our newsletter
On the website of J. SCHNEEBERGER Maschinen AG, users are given the option of subscribing to our company newsletter. The personal data that is transmitted to the data controller with subscription to the newsletter can be determined from the input screen used for this.
J. SCHNEEBERGER Maschinen AG informs its customers and business partners at regular intervals of the company offers and services via a newsletter. Our company newsletter can only be received by affected persons if (1) the affected person has a valid email address and (2) the affected person has registered for receipt of the newsletter. For legal reasons, a confirmation email will be sent to the email address initially provided by an affected person for receipt of the newsletter, within the framework of a double opt-in process. This confirmation email serves to ensure that the owner of the email address, as the affected person, has authorised receipt of the newsletter.
Upon registration for the newsletter, we also save the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the affected person at the time of registration, as well as the date and time of registration. The acquisition of this data is necessary in order to track any (possible) misuse of the email address of an affected person at a later point in time, and therefore serves to legally safeguard the data controller.
The personal data acquired within the framework of registration for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may receive information by email if this is necessary for operation of the newsletter service or an associated registration, for example with changes to the newsletter service or with a change to the technical conditions. The personal data acquired within the framework of the newsletter service is not passed on to third parties. Affected persons can cancel their subscription to our newsletter at any time. It is possible for affected persons to withdraw their consent to the storage of personal data provided for receipt of the newsletter at any time. Every newsletter contains a link provided for the purpose of withdrawing consent. Furthermore, it is possible to de-register for the receipt of the newsletter at any time directly on the website of the data controller, or to inform the data controller of de-registration in another way.
7. Newsletter tracking
The newsletter of J. SCHNEEBERGER Maschinen AG contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format, that facilitate log file logging and log file analysis. In this way, statistical evaluation of the success or failure of online marketing campaigns can take place. Using the embedded tracking pixel, J. SCHNEEBERGER Maschinen AG is able to detect whether and when an email has been opened by an affected person, and which links have been called up in the email of the affected person.
The personal data acquired by means of the tracking pixels contained in the newsletters is stored and evaluated by the data controller, in order to optimise the newsletter dispatch and to better align the contents of future newsletters with the interests of the affected person. This personal data is not passed on to third parties. Affected persons are entitled at all times to withdraw their respective consent to this, provided separately within the framework of the double opt-in process. Following the withdrawal of consent, this personal data is deleted by the data controller. J. SCHNEEBERGER Maschinen AG automatically considers de-registration of the newsletter subscription to be a withdrawal of consent.
8. Contact options via the website
On the basis of statutory provisions, the website of J. SCHNEEBERGER Maschinen AG contains information that enables you to quickly get in touch with our company electronically and communicate with us directly. This information also includes a general electronic mail address (email address). If an affected person gets in touch with the data controller by email or via a contact form then the personal data transmitted by the affected person will be automatically saved. Such personal data transmitted by the affected person to the data controller on a voluntary basis is stored for the purpose of processing the inquiry or for getting in touch with the affected person personally. This personal data is not passed on to third parties.
9. Comments function in the blog on the website
J. SCHNEEBERGER Maschinen AG offers the users of a blog, located on the website of the data controller, the opportunity to leave individual comments to particular blog contributions. A blog is a portal managed on a website and is generally publicly accessible, in which one or more people, known as the blogger or web blogger, can post articles or thoughts in so-called blog posts. The blog posts can generally be commented on by third parties.
If an affected person posts a comment in a blog published on this website, information on the time of the submission of the comment as well as the username (pseudonym) selected by the affected person will be saved and published beside the comment posted. Furthermore, the IP address provided by the Internet Service Provider (ISP) of the affected person will also be logged. This saving of the IP address is carried out for safety reasons and for the case where the affected person infringes the rights of a third party through their comment or posts illegal content. The saving of this personal data is therefore carried out in the interests of the data controller so that in they can exculpate themselves if necessary in the event of a legal infringement. This personal data collected is not passed on to third parties insofar as this is not legally mandated or serves as legal defence for the data controller.
10. Subscription to comments in the blog on the website
The comments posted in the J. SCHNEEBERGER Maschinen AG blog can be subscribed to by third parties as a matter of principle. In particular it is possible that a commentator can subscribe to the comments that follow their comment in response to a specific blog entry.
Insofar as an affected person elects for the opportunity of subscribing to comments, the data controller will send an automated confirmation email in order to check by means of the double-opt-in process that the owner of the email address provided has really consented to this. This option to subscribe to comments can be withdrawn at any time.
11. Routine deletion and blocking of personal data
The data controller only processes and stores personal data of the affected person for the period required in order to realise the purpose of storage, or if this is prescribed by the European lawmakers and regulators, or by another legislator in laws or provisions that the data controller is subject to.
If the storage purpose no longer exists or a statutory storage period prescribed by the European lawmakers and regulators, or by another legislator expires then the personal data will be routinely blocked or deleted in accordance with the legal provisions.
12. Rights of the affected person
* a) Right to confirmation
Every affected person has the right granted by the European lawmakers and regulators to demand confirmation from the data controller regarding whether they are processing personal data pertaining to the affected person. If an affected person wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time in this regard.
* b) Right to information
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to free information at any time from the data controller regarding any personal data stored about them personally, and to receive a copy of this information. Furthermore, the European lawmakers and regulators have granted the affected person the right to the following information:
* the purpose of processing
* the categories of personal data that are processed
* the recipients or categories of recipient that the personal data has been or is being wheellosed to, in particular with recipients in third countries or with international organisations
* if possible, the planned duration of storage of the personal data, or if this is not possible then the criteria that determine this duration
* the existence of a right to correction or deletion of personal data that pertains to the affected person, or to the restriction of processing by the data controller, or a right to object to this processing
* the existence of a right to appeal to a regulatory authority
* if personal data is not acquired from the affected person: all available information regarding the origins of the data
* the existence of automated decision-making including profiling, in accordance with Article 22, sections 1 and 4 of the GDPR and - at least in these cases - meaningful information regarding the logic involved, as well as the implications and intended impacts of such processing for the affected person
Furthermore, the affected person has the right be informed as to whether personal data has been transmitted to a third country or an international organisation. If this is the case then the affected person also has the right to information regarding the appropriate guarantees provided in relation to the transmission.
If an affected person wishes to exercise this right to information, they can contact an employee of the data controller at any time in this regard.
* c) Right to correction
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand the immediate correction of incorrect personal data pertaining to them. Furthermore, the affected person also has the right to demand that incomplete personal data be completed - also with a supplementary explanation - with consideration to the purposes of processing.
If an affected person wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time in this regard.
* d) Right to deletion (right to be forgotten)
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand that the data controller immediately delete any personal data pertaining to them, insofar as one of the following reasons applies and insofar as processing is not necessary:
* The personal data was acquired for such purposes as are no longer applicable, or processed in such a way that is no longer necessary.
* The affected person withdraws their consent to processing in accordance with Art. 6 section 1, letter a GDPR or Art. 9 section 2 letter a GDPR, and if no other legal grounds for processing exist.
* The affected person lodges their withdrawal of consent to processing in accordance with Art. 21 section 1 GDPR and no overriding justified grounds for processing exist, or the affected person lodges their withdrawal of consent to processing in accordance with Art. 21 section 2 GDPR.
* The personal data was processed unlawfully.
* Deletion of the personal data is necessary in order to satisfy a legal obligation in accordance with Union law, or the law of the member states applicable to the data controller.
* The personal data has been acquired in relation to a service provided by the information society in accordance with Art. 8 section 1 GDPR.
If one of the aforementioned reasons applies and an affected person wishes to initiate the deletion of personal data that is stored by J. SCHNEEBERGER Maschinen AG, they can contact an employee of the data controller at any time. The employee of J. SCHNEEBERGER Maschinen AG will ensure that the deletion request is satisfied immediately.
If personal data has been published by J. SCHNEEBERGER Maschinen AG and if our company is obligated to delete the personal data as the data controller in accordance with Art. 17 section 1 GDPR, J. SCHNEEBERGER Maschinen AG shall implement appropriate measures with consideration to the available technology and the costs of implementation, also of a technical nature, to inform other bodies responsible for data processing, which are processing the published personal data, that the affected person has demanded the deletion of this personal data by the other bodies responsible for the data processing, including all links to this personal data and all copies and duplicates of this personal data, insofar as processing is not necessary. The employee of J. SCHNEEBERGER Maschinen AG shall initiate the necessary measures in individual cases.
* e) Right to restriction of processing
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to demand the restriction of processing if one of the following preconditions exists:
* The correctness of the personal data is disputed by the affected person, whereby this restriction applies for a period that enables the data controller to check the correctness of the personal data.
* Processing is unlawful, the affected person rejects the deletion of their personal data and instead demands that use of the personal data be restricted.
* The data controller no longer requires the personal data for the processing purposes, however the affected person requires it in order to assert, exercise or defend against legal claims.
* The affected person has the right to object to the processing per Art. 21 section 1 GDPR and it has not yet been determined, whether the justified reasons of the data controller outweigh the justified reasons of the affected person.
If one of the aforementioned preconditions exists and an affected person wishes to demand the restriction of personal data that is stored by J. SCHNEEBERGER Maschinen AG, they can contact an employee of the data controller at any time. The employee of J. SCHNEEBERGER Maschinen AG shall initiate the restriction of processing.
* f) The right to data portability
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to receive the personal data pertaining to them, which the affected person previously provided to a data controller, in a structured, conventional and machine-readable format. Furthermore, they also have the right to demand that this data be transmitted without hindrance to another data controller by the data controller to which they initially provided the personal data, insofar as processing was based on consent in accordance with Art. 6 section 1 letter a GDPR or Art. 9 section 2 letter a GDPR, or on a contract in accordance with Art. 6 section 1 letter b GDPR and processing takes place with the aid of an automated process, insofar as processing is not required in order to perform a task that lies in the public interest or that takes place within the framework of exercising official authority, where this has been transferred to the data controller.
Furthermore, the affected person has the right, when exercising their right to data portability in accordance with Art. 20 section 1 GDPR to demand that the personal data be transmitted directly from one data controller to another data controller, insofar as this is technically feasible and if this does not infringe on the rights and freedoms of other persons.
The affected person can contact an employee of J. SCHNEEBERGER Maschinen AG at any time in order to exercise their right to data portability.
* g) Right to objection
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to object at any time to the processing of personal data pertaining to them for reasons that arise due to their specific situation, where processing takes place on the basis of Art. 6 section 1 letters e or f GDPR. This also applies to profiling based on these conditions.
If an objection is lodged, J. SCHNEEBERGER Maschinen AG will no longer process the personal data unless we can verify compelling legitimate grounds for the processing, that outweigh the interests, rights and freedoms of the affected person, or if processing serves the assertion, exercising or defence of legal claims.
If J. SCHNEEBERGER Maschinen AG processes personal data for the purposes of direct advertising, the affected person has the right to object at any time to the processing of the personal data for the purposes of this type of advertising. This also applies to profiling, insofar as this is connected to such direct advertising. If the affected person lodges an objection with J. SCHNEEBERGER Maschinen AG regarding processing for the purposes of direct advertising then J. SCHNEEBERGER Maschinen AG shall no longer process the personal data for these purposes.
Furthermore, the affected person has the right, for reasons that arise from their specific situation, to lodge an objection to the use of the personal data pertaining to them by J. SCHNEEBERGER Maschinen AG for scientific or historic research purposes or for statistical purposes in accordance with Art. 89 section 1 GDPR, unless such processing is necessary in order to perform a task that lies in the public interest.
The affected person can contact any employee of J. SCHNEEBERGER Maschinen AG directly at any time in order to exercise their right to objection. The affected person is also entitled to exercise their right to object in relation to the use of services of the information society, notwithstanding directive 2002/58/EC, with automated processes whereby technical specifications are used.
* h) Automated decision-making in individual cases including profiling
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to avoid being subjected to a decision that is based exclusively on automated processing - including profiling - which has a legal affect on them or significantly affects them in a similar way, unless the decision (1) is necessary in order to conclude or realise a contract between the affected person and the data controller, or (2) is permissible on the basis of the legal provisions of the Union or the member states applicable to the data controller and this legal provision contains appropriate measures to safeguard the rights and freedoms, as well as the justified interests of the affected person, or (3) takes place with the express consent of the affected person.
If the decision (1) is necessary in order to conclude or realise a contract between the affected person and the data controller, or (2) takes place with the express consent of the affected person, J. SCHNEEBERGER Maschinen AG shall implement appropriate measures in order to safeguard the rights and freedoms, as well as the justified interests of the affected person, which include at least the right to obtain human intervention on the part of the data controller, to express their own point of view and to contest the decision.
If the affected person wishes to exercise rights in relation to automated decisions, they can contact an employee of the data controller at any time in this regard.
* i) Right to withdraw consent in relation to data protection
Each person affected by the processing of personal data has the right granted by the European lawmakers and regulators to withdraw their consent to the processing of their personal data at any time.
If the affected person wishes to exercise this right to withdraw consent, they can contact an employee of the data controller at any time in this regard.
13. Data protection with applications and application procedures
The data controller acquires and processes personal data from applicants for the purposes of conducting the application procedure. This processing may also take place via electronic channels. This is the case in particular if an applicant transmits their application documents to the data controller via electronic channels, for example by email or via a web form provided on the website. If the data controller concludes an employment contract with an applicant then the transmitted data will be saved for the purposes of establishing the employment relationship with consideration to the legal regulations. If the data controller does not conclude an employment contract with the applicant then the application documents are automatically deleted two months after the rejection decision has been issued, unless other justified interests of the data controller stand against deletion. Other justified interests in this regard are for example the burden of proof in conjunction with processes in accordance with German general equal treatment law (AGG).
14. Legal basis for processing
Art. 6 I lit. a GDPR serves as the legal basis for our company’s processing procedures, whereby we obtain consent for a certain processing purpose. If the processing of personal data is necessary in order to implement a contract to which the affected person is a contracting party, for example the data processing required in order to deliver goods or provide any other form of service or counter-performance, processing takes place on the basis of Art. 6 I lit. b GDPR. The same applies to processing procedures that are necessary in order to perform pre-contractual measures, for example in the event of inquiries regarding our products or services. If our company is subject to a legal obligation, which results in a necessity to process personal data, for example to fulfil fiscal obligations, then processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary in order to protect the vital interests of the affected person or another natural person. This would be the case for example if a visitor to our company were to sustain an injury and it were consequently necessary to inform a doctor, hospital or another third party of their name, age, health insurance details or other vital information. In this case, processing would be based on Art. 6 I lit. d GDPR. Finally, processing could be based on Art. 6 I lit. f GDPR. Processing procedures that take place on this legal basis, to which none of the previous legal bases apply, arise if processing is necessary in order to protect a justified interest of our company or a third party, insofar as this interest is not outweighed by the interests, basic rights and basic freedoms of the affected party. We are permitted to perform such processing procedures in particular because these have been specifically admitted by the European lawmakers. The legislation considers that a justified interest could be assumed if the affected person is a customer of the data controller (recital 47 clause 2 GDPR).
15. Justified interests in processing, which are pursued by the data controller or a third party
If the processing of personal data is based on Article 6 I lit. f GDPR then our justified interest is the performance of our commercial activity to the benefit of the well-being of all our employees and our shareholders.
16. Duration of storage of personal data
The criterion for the duration of storage of personal data is the respective statutory retention period. After the retention period has expired, the corresponding data is routinely deleted insofar as it is no longer required for contract fulfilment or contract initiation.
17. Legal or contractual regulations for the provision of personal data