As Kögel Trailer GmbH is processing your personal data, this document provides you with information about your rights under the Personal Data Protection Act

Controller / protection of personal data

Kögel Trailer GmbH
represented by the management:

Markus Siegner (Chief Executive Officer), Christian Spengler (CFO), Thore Bakker (CSO) 

Am-Kögel-Werk 1
89349 Burtenbach
Deutschland
tel: +49 8285 88-0
fax: +49 8285 88-17905
mail: info@koegel.com
web: www.koegel.com

The data protection officer can be contacted at datenschutz@koegel.com

Category/source of personal data

As part of the contractual relationship and for the initiation of the contract, we process the following data
personal data:

Corporate customers:

• Contact details (e.g. first and last names of the current and, if applicable, previous contact persons and
  degrees, corporate client’s (or employer’s) name and address, telephone number with extension,
  corporate email address)
• Job-related information (e.g. position or job title, department)

Private customers:

• Master data (title, first/last name, name affixes, date of birth if applicable)
• Contact details (e.g. name and private address (if applicable, floor, district, federal state), mobile and landline telephone number, e-mail address, fax number)
• Different delivery/invoicing address (e.g. name and address (if applicable floor, district, federal state), if applicable telephone number, if applicable e-mail address)
• Order history
• If applicable, bank details (within the scope of a SEPA direct debit mandate also first name/surname of the account holder)
• If applicable, preferred payment system, information on creditworthiness and credit behavior

We generally receive your personal data from you as part of the contract initiation process or during the ongoing contractual relationship. In the IT environment, Kögel Trailer GmbH relies, among other things, on products from the Microsoft Corporation (such as
e.g. M365, Onedrive, MS Teams). The following categories of data may be processed in the course of using the IT systems:

• Functional data (data absolutely necessary for the provision of services)
• Content data (content data that is processed within the scope of the services/service)
  become)
• Diagnostic & log data (technically logged data used for maintenance,
  troubleshooting and occasionally for further development)

These categories of data are collected directly from you. We will be happy to provide you with further information on data processing in specific IT systems on request. We process the following personal data as part of our online meetings using Microsoft Teams:

• Communication data (e.g. your e-mail address, if you provide it personally)
• Log files, log data
• Metadata (e.g. IP address, time of participation, etc.)
• Profile data (e.g. your user name, if you provide this yourself)

We would like to point out that we are not responsible for further data processing, for example in connection with accessing the MS Teams website and/or installing the MS Teams app.

Microsoft reserves the right to process customer data for its own business purposes. We have no influence on this data processing by Microsoft. To the extent that Microsoft Teams processes personal data in connection with its business purposes, Microsoft is an independent controller for these data processing activities and as such is responsible for compliance with all applicable data protection regulations. If you require information about the processing by Microsoft, please refer to the relevant Microsoft statement.

Purposes and legal bases of data processing

Your personal data are processed in compliance with the requirements of the GDPR, BDSG and any other relevant legislation.

Your personal data will be processed exclusively for the implementation of pre-contractual measures (e.g. for the preparation of offers for products or services) and for the fulfillment of contractual obligations (e.g. for the implementation of our service, the supplier contract or for order / order / payment processing) (Art. 6 para. 1 lit. b GDPR) or if a legal obligation exists.
there is an obligation to process the data (e.g. due to tax law requirements) (Art. 6 para. 1 lit. c GDPR). The personal data was originally collected for these purposes.

Of course, your consent to the processing of your personal data may be for specific purposes as defined in the General Data Protection Regulation [Article 6(1)(a) GDPR]. You will be informed prior to giving consent of the purpose for processing your personal data and your right to withdraw your consent in accordance with Article 7(3) of the GDPR.

Of course, your consent to the processing of your personal data may be for specific purposes as defined in the General Data Protection Regulation [Article 6(1)(a) GDPR]. You will be informed prior to giving consent of the purpose for processing your personal data and your right to withdraw your consent in accordance with Article 7(3) of the GDPR.

Kögel Trailer GmbH is also interested in maintaining the customer relationship with you and sending you information and offers about our products/services by e-mail or contacting you by telephone in this regard. We therefore process your data in order to send you relevant information and offers or to contact you by telephone (Art.
6 para. 1 lit. f GDPR).

Your personal data will only be processed for background checking purposes under the conditions provided in Article 10 of the GDPR.

Data storage periods

Your personal data will be deleted either as soon as it is no longer needed for the purposes listed above or when you withdraw your consent. The data will only remain stored after the contractual relationship has been terminated, where we are required or entitled to do so. Regulations that oblige us to store the data may be found, for example, in the German Commercial Code (Handelsgesetzbuch) or in the German Tax Code (Abgabenordnung). The retention period can be up to ten years. In addition, the company is required to comply with statutory retention periods.

Recipients/categories of recipients of personal data

Our company takes care that your personal data are shared only with those departments and individuals that require them to fulfil contractual and legal obligations.

In certain cases, service providers (including suppliers such as Liqui Moly) support our specialist departments in the performance of their tasks. The necessary data protection contracts have been concluded with all service providers. In addition, we are required by law to transfer certain information to public authorities, such as Tax authorities, law enforcement agencies and customs authorities.

Transfer of personal data to a third country/purpose of transfer

Personal data are transferred to third countries (countries outside of the European Union or the European Economic Area) only when it is necessary for performing a contract, in a supplier relationship or when the law requires it, or if you consent thereto.

When selecting service providers, an attempt is made to use European service providers (service providers within the European Economic Area). However, this is not always possible - for example in the case of Microsoft. If service providers from third countries are used, care is taken to ensure that the configuration is as restrictive as possible. (In the case of Microsoft, for example, data processing in Europe is agreed. In addition, the configuration is restricted by IT experts and individual processing operations are
coordinated with the data protection officer).

We transfer your personal data to (a) service provider(s) or to group companies (Microsoft) outside the European Economic Area, namely to the United States of America. Compliance with the level of data protection is ensured by
Standard contractual clauses guaranteed.

Rights of data subjects

Your rights as a data subject are standardized in Art. 15 - 22 GDPR. This includes:

• The right to information (Art. 15 GDPR)
• The right to rectification (Art. 16 GDPR)
• The right to erasure (Art. 17 GDPR)
• The right to restriction of processing (Art. 18 GDPR)
• The right to object to processing (Art. 21 GDPR)
• The right to data portability (Art. 20 GDPR)

To assert these rights, please contact: datenschutz@koegel.com. The same applies if you have any questions about data processing in our company or wish to withdraw your consent. You can also lodge a complaint against data processing with a data protection supervisory authority.

If your personal data are being processed for the purpose of protecting our legitimate interests, you can object thereto for reasons relating to your specific circumstances. This applies also to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
legal claims.

If your personal data are processed for direct marketing purposes, you have the right to object without giving any reason, which includes profiling if this is linked to direct marketing. We will not process your personal data for direct marketing purposes if you object thereto.

Obligation to provide data

You are obliged to provide certain personal data in order to enter into or process a contractual relationship.

This is necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. It is not possible to execute the contract without providing this data.

Automated individual decisions

We do not use purely automated processing methods for decision-making.