Our handling of your data and your rights
Information in accordance with Art. 13 and 21 of the General Data Protection Regulation (DSGVO).
With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and how it is used depends largely on the respective existing relationship between you and AMAZO-NAS GmbH. Therefore, not all sections of this information will apply to you.
In addition, this data protection information may be updated from time to time. The most current version can be found on this page at any time.
Person responsible
The responsible person in the sense of the DSGVO is
AMAZONAS GmbH
Am Kirchenhölzl 15
82166 Gräfelfing, Germany
You can reach our data protection officer at:
Data Protection Officer of AMAZONAS GmbH
c/o activeMind AG
Potsdamer Str. 3
80802 Munich
e-mail: datenschutz@amazonas.eu
Phone: +49 (0)89 / 91 92 94 - 900
We process your data for the following purposes and on the following legal basis:
We process personal data in accordance with the provisions of DSGVO and the Federal Data Protection Act (BDSG):
For the fulfillment of contractual obligations (Art. 6 para. 1 letter b) DSGVO).
The processing is necessary for the performance of a contract with you. If you inquire us regarding the establishment of business relations, the data processing is carried out upon your request and is necessary for the performance of pre-contractual measures.
Due to legal requirements (Art. 6 para. 1 letter c) DSGVO).
We are subject to various legal obligations that entail data processing. These include, for example, tax laws, as well as statutory accounting, the fulfillment of requests and requirements of supervisory or law enforcement authorities, as well as the fulfillment of tax control and reporting obligations.
In addition, the disclosure of personal data may become necessary in the context of official/court measures for the purpose of gathering evidence, criminal prosecution or enforcement of civil claims.
In the context of the balancing of interests (Art. 6 para. 1 lit. f) DSGVO).
Where necessary, we process your data beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Examples of such cases are:
- If you contact us by e-mail or telephone, the data you enter will be stored for the purpose of individual communication with you,
- assertion of legal claims and defense in legal disputes,
- storage of further contacts in our systems for communication.
Who receives your data?
Within our company, employees receive your data for contact with you and contractual cooperation (incl. the fulfillment of pre-contractual measures).
Your data will only be passed on to service providers (order processors) if it is necessary for the fulfillment of our contractual tasks (e.g. support/maintenance of EDP/IT applications, accounting, data destruction). All service providers are obliged to treat your data confidentially on the basis of an order processing agreement.
With regard to the transfer of data to recipients outside our company, it should first be noted that we only transfer necessary personal data in compliance with the applicable data protection regulations.
Under these conditions, recipients of personal data may be, for example:
- Public bodies and institutions (e.g. tax authorities, law enforcement agencies) if there is a legal or official obligation,
- credit and financial services institutions (processing of payment transactions)
- Tax advisors, auditors and payroll tax auditors (statutory audit requirement).
Will data be transferred to a third country or to an international organization?
Your data will only be processed within the European Union and countries within the European Economic Area (EEA).
How long will your data be stored?
We process and store your personal data as long as this is necessary for the fulfillment of our contractual and legal obligations. If the data is no longer required for the fulfillment of contractual or legal obligations, it is regularly deleted.
Exceptions to the above-mentioned deletion criteria are made for data
- which are required for the fulfillment of legal storage obligations, e.g. the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods specified there for storage or documentation are generally six to ten years,
- for the preservation of evidence within the framework of the statutory limitation provisions. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
If the data processing is carried out in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists. The aforementioned exceptions apply here.
What data protection rights do you have?
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.
With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.
In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DSGVO).
Is there an obligation for me to provide data?
Within the framework of the contractual relationship, you can provide the personal data that is required for the commencement, implementation and termination of the contractual relationship and for the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will not be able to contact you, conclude the contract with you or carry it out.
Information about your right to object according to Article 21 of the General Data Protection Regulation (DSGVO)
Individual right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) of the DSGVO (data processing on the basis of a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Recipient
The objection can be declared informally to the data controller or the data protection officer. You will find the contact details at the top of this page..