We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and all other relevant laws (e.g. higher education laws, etc.). -Consent (Art. 6 para. 1 lit. a DSGVO) If you have given us consent to process your personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke this consent at any time with effect for the future in accordance with Art. 21 DSGVO. The revocation is only effective for future processing.

• Fulfilment of contractual obligations (Art. 6 para. 1 lit. b DSGVO) We process your data to implement our contractual relationship with you. The purposes of the data processing depend in detail on the specific product and the contractual documents.
• Fulfilment of legal obligations (Art. 6 para. 1 lit. c DSGVO) We process your data to fulfil a legal obligation to which we are subject as the responsible party.
• Safeguarding vital interests (Art. 6 para. 1 lit. d DSGVO) We process your data to protect vital interests of the data subject or another natural person.
• Balancing of interests (Art. 6 para. 1 lit. f DSGVO) Furthermore, processing may also take place on the basis of a balancing of interests to protect the legitimate interests of the controller or third parties. Our interest in the respective processing results from the respective purposes and such as efficient task fulfilment, sales, avoidance of legal risks. As far as the specific purpose allows, we adhere to the principle of data minimisation and process your data in pseudonymised or anonymised form. Your data will only be passed on to the extent permitted by a legal basis. Within our company, only those persons and departments (e.g. IT, sales, HR, marketing, possibly the examination office, lecturer) receive your personal data that require it to fulfil our contractual and legal obligations.

Within our SOPRO Group, your data will be transferred to certain companies if they perform data processing tasks centrally for the companies affiliated in the group (e.g. disposal of files). Furthermore, personal data may be transferred to recipients outside the company if this is necessary for the fulfilment of contractual and legal obligations as the person responsible, such as:

• Processors used by us (Art. 28 DSGVO), in particular in the area of IT services, logistics, affiliated companies of the SOPRO Group and printing services, who process your data for us in accordance with your instructions.
• Jointly responsible with us (Art 26 DSGVO) as far as it is necessary for the fulfilment of the task.
• Public agencies and institutions (e.g. Federal Statistical Office, State Education Authority, etc.)

1.2 Rights of the parties concerned

You can assert the following data subject rights with the person responsible for processing the personal data (see point 1 above):

• Art. 15 GDPR - Right of access The data subject shall have the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed; if this is the case, he or she shall have the right of access to those personal data.
• Art. 16 GDPR - Right of rectification The data subject shall have the right to obtain from the controller the rectification without delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to obtain the completion of incomplete personal data, including by means of a supplementary declaration.
• Art. 17 GDPR - Right to erasure The data subject shall have the right to obtain from the controller the erasure without delay of personal data concerning him or her. However, this is only possible if the personal data concerning him or her are no longer necessary, are being processed unlawfully or if consent has been withdrawn in this regard.
• Art. 18 GDPR - Right to restrict processing The data subject has the right to obtain from the controller the restriction of processing. The right to restriction of processing includes the possibility for the data subject to prevent further processing of personal data concerning him or her for the time being. Restriction occurs primarily during the review phase of other rights that the data subject may have.
• Art. 19 GDPR - Right to notification The controller shall notify all recipients to whom personal data have been disclosed of any rectification or erasure of the personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. The controller shall inform the data subject of those recipients if the data subject so requests.
• Art. 20 GDPR - Right to data portability The right to data portability includes the possibility for the data subject to receive personal data concerning him or her from the controller in a common, machine-readable format in order to have it forwarded to another controller, if necessary. According to Article 20 (3) sentence 2 of the GDPR, however, this right is not available if the data processing serves the performance of public tasks.
• Art. 21 GDPR - Right to object The right to object includes the possibility for data subjects to object to the further processing of their personal data in a specific situation, insofar as this is justified by the performance of public tasks or public as well as private interests.
• Art. 22 GDPR - Right to automated decisions in individual cases including profiling The data subject has the right not to be subject to a decision based solely on automated processing, including profiling. For more information, see the text of the law.
• Art. 77 GDPR - Right to complain to a supervisory authority In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is based.

1.3 Competent supervisory authority

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
https://datenschutz.hessen.de/service/beschwerde-uebermitteln

All other data protection authorities in the respective EU member states can be found at the following link: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

1.4 Duration of storage

To the extent necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) or other legally prescribed periods. The periods specified there for storage or documentation are up to 30 years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are usually three years, but in certain cases can be up to thirty years.

1.5 Transfer of personal data to third countries

If we transfer personal data to service providers or group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding corporate data protection rules or EU standard contractual clauses (incl. transfer impact assessment)) are in place.

1.6 Providing personal data

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide such personal data that is required for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.

1.7 Automated decision making

Zur Begründung, Erfüllung oder Durchführung der Geschäftsbeziehung sowie für vorvertragliche Maßnahmen nutzen wir grundsätzlich keine vollautomatisierte Entscheidungsfindung gemäß Art. 22 DSGVO. Sollten wir diese Verfahren in Einzelfällen einsetzen, werden wir Sie hierüber gesondert informieren bzw. Ihre Einwilligung einholen, sofern dies gesetzlich vorgegeben ist.

1.8 Personal data for profiling

If we process your data in part automatically with the aim of evaluating certain personal aspects (such as so-called "profiling" pursuant to Art. 4 No. 4 GDPR), we will inform you separately in advance.

Below you will find further information pursuant to Art. 13 and 14 DSGVO for the individual processing of data subjects' data within the different processing activities of our company.

If you contact us by e-mail, telephone or fax, your enquiry, including all personal data arising from it, will be stored and processed by us for the purpose of processing your request, your order or our enquiry with you as a supplier. We do not pass on this data without your consent.

3.1 Categories of personal data

We only process data that is related to the establishment of the contract or the pre-contractual measures. This can be general data about you or persons in your company (name, address, contact details, etc.) as well as, if applicable, further data that you provide to us in the context of the establishment of a contractual arrangement.

3.2 Origin of the personal data

We process personal data that we receive from you in the course of contacting you or establishing a contractual relationship or in the course of pre-contractual measures.

3.3 Recipients of the personal data

We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3.4 of this data protection information sheet. Your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are internet service providers and providers of customer management systems and software. Otherwise, data is only passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for the processing and thus the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information.

Under these conditions, recipients of personal data may be:

• Tax advisor
• Public authorities and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation
• Recipients to whom the transfer is directly necessary for the purpose of establishing or fulfilling a contract
• Other data recipients for whom you have given us your consent to the transfer of data

3.4 Purpose and legal basis for data processing

We process personal data for the fulfilment of business transactions. Your personal data will be processed in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, implementation or fulfilment of a contract or for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or implementation of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b G. If you give us express consent to process personal data for specific purposes (e.g. forwarding to third parties, evaluation for marketing purposes or advertising by e-mail), this processing is lawful on the basis of your consent pursuant to Art. 6 (1) a GDPR. Consent given can be revoked at any time with effect for the future (see section 9 of this data protection information). If necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfilment of legal obligations according to Art. 6 para. 1 lit. c GDPR. In addition, processing may be carried out to protect the legitimate interests of us or third parties as well as to defend against and assert legal claims in accordance with Art. 6 para. 1 lit. f GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.

3.5 Duration of storage

Your personal data will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

The processing is carried out for the purpose of carrying out the "Show your teeth" campaign and for handing over the Sopro trainee starter set. The information you provide completely voluntarily will be required and used solely for the purpose of carrying out this promotion, for notification and for carrying out the handover. The data will not be passed on to third parties and will be deleted from the database after the end of the campaign in accordance with data protection regulations. See "Duration of storage". The following data is processed in the course of registration:

• Craft business name
• Craft business address (street, postcode, town)
• Name of the contact person responsible for this registration
• Position of the contact person responsible for this registration
• E-mail address of the contact person
• Telephone number of the contact person
• Name/first name of the trainer in the craft enterprise
• Additional: Position of the contact person responsible for this registration (optional)
• Name/first name of the trainer in the craft enterprise (optional)

4.1 Duration of storage

Your personal data will be stored for the duration of the implementation of this action and beyond for a period of 6 months. Unless there is a legal obligation to store this data beyond this period. The personal data will only be used for the purpose described and will not be passed on to third parties.

4.2 Legal basis for processing

The legal basis for processing in the form described above is Art. 6 (f) ("legitimate own interests").

We use an external IT platform to organise and conduct our online seminars. This platform is operated on our behalf in the form of "commissioned processing pursuant to Art. 28 GDPR" by our partner:

Geib Events Stefan Geib & Torsten Hasenclever GbR
Hauptstraße 21
65345 Eltville-Rauental

provided to you. We process your personal data in order to be able to conduct our online seminars and to be able to communicate with you with regard to seminar participation.

5.1 Categories of personal data

In the case of a seminar open to the public, events are made available without further access restrictions via our website (www.sopro.com) and/or via a "Facebook channel" in the form of a data stream. Registration is not required for participation. However, should the user value a reminder service in the future, an e-mail address can be deposited for the registration of this service. In the case of a "closed online seminar", registration and booking is done with the help of a user account.

When setting up a user account (e.g.: via https://sopro-profiakademie.com/account), the following data is collected:

• First name (optional)
• Last name (optional)
• E-mail (mandatory)

The e-mail address is only required in this context for the "reminder service".

As part of the settlement of our fee-based online seminars:

• Salutation
• Title (optional)
• First name
• Last name
• Telephone number (optional)
• E-mail
• Company name and address (street, number, postcode, town):

In the context of issuing and delivering certificates/confirmations of participation:

• Salutation
• Title
• First name
• Last name

Seminar data

• Title of the event
• Date and duration of the event
• Description
• IP addresses of the seminar participants
• Device/hardware information

5.2 Text, audio and video files

Within the framework of our online seminars, you have the possibility to participate in them by means of a chat function. In this case, your text entries are processed in order to display and record them in the virtual seminar room. You also have the option of actively participating during a seminar with your webcam or microphone. In this case, the data from the microphone / webcam of your end device will be processed during the seminar. The use of the chat and / or the microphone / webcam function is voluntary.

5.3 Origin of personal data

Your personal data is collected directly from you.

5.4 Legal basis for data processing

The legal basis for data processing when conducting our online seminars is Art. 6 para. 1 no. 1b GDPR (contract performance).

5.5 Duration of storage

Your personal data will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

If you register for an event or apply to attend training courses or training sessions, the general event data (date, location) will first be collected and stored together with the following personal data. This data is assigned to the events you have booked.

6.1 Categories of personal data

The personal data relevant for your event can be found on the corresponding registration form. In individual cases, you have the option of receiving a personalised garment in addition to the certificate after successfully completing participation (certification/re-certification, etc.). For this purpose, it is necessary to provide the clothing size. The submission of the clothing size is voluntary and has no influence on the certification process. In addition, we process photos/videos and quotes of your person taken during the event for advertising purposes if consent is given in accordance with Art. 7 GDPR.

6.2 Processing of personal data

• the data provided by you, which is collected in the course of seminar or training events, is processed and used in our company as follows:the data from the reporting forms are recorded and stored electronically
• the data from the reporting forms are transferred to our IT systems
• the reporting forms are subsequently stored for the purpose of fulfilling verification obligations
• only with the system professional: In the event that the certification/recertification is successfully completed, the person concerned can also receive a personalised garment in addition to the certificate. For this purpose, the person concerned can transmit the clothing size to Sopro GmbH. The transmission of the clothing size is voluntary and has no influence on the certification process.

6.3 Using personal data

Insofar as you have provided us with personal data, we use this data to

• to answer your enquiries
• to clarify questions in connection with the registration for events
• to send the invoice if the seminar is fee-based
• and possibly to send the seminar brochure and other advertising material, if you have given your explicit written consent for this
• if necessary, for the purposes of market research and quality management
• to inform the Sopro sales force about the number of participants at the respective event (number, company, person)

6.4 Intended use of the data at SystemProfessional

In the event that the certification/re-certification is successfully completed, the person concerned can also receive a personalised garment in addition to the certificate. For this purpose, the person concerned can transmit the clothing size to Sopro GmbH. The transmission of the clothing size is voluntary and has no influence on the certification process.

6.5 Photo and video recording

We process photos / videos and quotes of you taken during the event for advertising purposes (website, ProfiAkademie brochure digital and print, social media channels, internal documentation) if you have given your consent in accordance with Art 7 GDPR. If you do not agree to the use of pictures of you, you must inform the seminar leader before the event. The recipients of this data are thus internally the employees entrusted with public relations and external service providers for regional press as well as editorial offices and editorial systems of print and online media.

6.6 Categories of personal data

• First name
• Last name
• Company (optional)
• Event title

6.7 Photo metadata

• Date
• Time
• Aperture
• Exposure time
• Focal length
• ISO value
• Flash information
• Photographer information

6.8 Origin of the personal data

The recordings are made during an event.

6.9 Legal basis for data processing

The processing is carried out on the basis of the legitimate interest of the responsible party to document the event organised by it pictorially and to report positively on it to a wider public (Art 6 para. 1 lit. f GDPR). Publication and disclosure to third parties (e.g. to the press) is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR.

6.10 Duration of storage

The storage period in terms of publication on the internet always ends with the revocation of your consent. Otherwise, the duration of the photos published with your consent depends on the significance and the public's interest in information about the event. The storage period of individual image files (archive) is carried out internally at our company and lasts for a longer period of time so that we can protect our copyright legal claims and use the photos at a later date to present our company history in a chronicle.

6.11 Risks of your consent

Unsere Internetseiten werden auch von Suchmaschinen gefunden, so dass Sie davon ausgehen müssen, dass Ihr Foto auch über Suchmaschinen recherchiert und gefunden werden kann. Wir weisen weiter darauf hin, dass die Fotos bei der Veröffentlichung im Internet weltweit abrufbar sind. Eine Weiterverwendung dieser Fotos durch Dritte kann daher nicht generell ausgeschlossen werden. Auch wenn Ihr Foto von uns auf unserer Unternehmenswebsite gelöscht wurde, kann es vorkommen, dass es dennoch im Internet auffindbar bleibt. Es gibt spezielle Archivierungsdienste, deren Ziel es ist, den Zustand bestimmter Websites zu bestimmten Terminen dauerhaft zu dokumentieren. Dieses kann dazu führen, dass im Internet veröffentlichte Informationen auch nach ihrer Löschung auf der Ursprungsseite weiterhin andernorts aufzufinden sind. Soweit Abbildungen, auf denen Sie zu erkennen sind, an die Presse weitergegen sind, haben wir keinen Zugriff mehr auf die Verwendungen. Jedoch haben wir die Verwendungen durch unsere Nutzungsrechteeinräumung gegenüber den Verlagen auf die einmalige Verwendung im Rahmen der Berichterstattung über die Veranstaltungen begrenzt.

6.12 Origin of the personal data

Your personal data is collected directly from you.

6.13 Recipients of data

In principle, no data is passed on to third parties. In the event that events are organised with the support of or jointly with other companies, it may be necessary to pass on personal data for the purpose of running the event. These may be the following cooperation/service partners:

• Agencies
• Outfitter for workwear
• Hotels
• Cooperation partner
• Travel agencies
• System partner
• Further education institutions

In order to keep data to a minimum, only the data required for the respective purpose is transmitted. In addition, legal requirements may force us to transmit data to government agencies (e.g. in the context of criminal prosecution, in the course of tracing a chain of infection). You can object to this processing at any time and informally. You can send your objection informally to the e-mail address mentioned under point 4 or to us by post.

6.14 Legal basis for data processing

The processing of this data is based on Art. 6 para. 1 lit. a GDPR (your consent) and Art. 6 para. 1 lit. b GDPR (fulfilment of contract). As the use of our services is voluntary, we require your consent for the processing of your data. You give this consent when you register.

6.15 Duration of storage

Unless a more specific storage period has been specified within this data protection declaration, your personal data will remain with us until the purpose for the data processing no longer applies. However, at least for the duration of an existing contractual relationship. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons cease to apply.

We need your data to check your eligibility and to inform you about the possible prize. We also need them to enable you to claim the prize, in particular, for example, to book accommodation you have won, to send you the prizes, etc.. We also need your contact details to correspond with you if any queries arise regarding your eligibility or the processing of the prize. By participating in a competition, you expressly agree that the personal data required for the implementation of the competition may be passed on to cooperation/service partners (service providers, workwear outfitters, hotels, travel agencies, system partners, further training institutions, etc.) within the framework of the provisions of data protection law (with a view to keeping data to a minimum). Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

7.1 Categories of personal data

7.1.1 Participants

• First name
• Last name
• E-mail
• Phone number (optional)

The personal data relevant to your event can be found on the relevant entry form. The winner of a prize letter or competition will be published on the basis of consent in the media and social channels listed below. For this purpose, photographs and film footage of the company and you as the winner will be taken by our company and, if applicable, by the press. Your name and statements made in an interview may be published.

• Publication on the website
• In the social media channels (Facebook, YouTube, Twitter, etc.)
• As a presentation for trade fairs and similar events
• As part of a report also in the local press
• In publications (both online and in print) created in the context of the competition e.g. information brochures, project reports

7.2 Origin of the personal data

Your personal data will be collected directly from you 6.3 Legal basis of data processing We process personal data based on the consent of each participant in accordance with Art. 6(1) lit.a EU-GDPR. In all other cases, the processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR).

7.3 Duration of storage

Your data will only be used for the purpose of the competition and will be deleted within 3 months after the closing date of the last competition week, unless we are legally obliged to store it for a longer period.

By participating in a survey, you expressly agree that the personal data required to carry out the survey may be passed on to cooperation/service partners (service providers, workwear outfitters, hotels, travel agencies, system partners, further education institutions, etc.) within the framework of the provisions of data protection law (with a view to keeping data to a minimum). Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

8.1 Categories of personal data

The personal data relevant for the survey can be found in the corresponding document.

8.2 Origin of the personal data

Your personal data is collected directly from you.

8.3 Legal basis for data processing

We process personal data on the basis of the consent of each participant in accordance with Art. 6(1) lit.a EU-GDPR. In all other cases, the processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR).

8.4 Duration of storage

Your personal data will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after the evaluation of the survey has been completed and the prize has been settled). Mandatory legal provisions - in particular retention periods - remain unaffected.

9.1 Contact form

We offer a contact form on our website that you can use to request information about our products or services or to contact us in general. We have marked the data that you must provide in order to respond to a request as mandatory fields. Information on other data fields is voluntary. We need this information to process your enquiry, to address you correctly and to send you a reply. In the case of specific enquiries, the data is processed to fulfil a contract or to initiate a contract. In the case of general enquiries, processing is carried out on the basis of a balancing of interests. Your details will only be transmitted to our systems if you have previously and proactively declared your consent to this.

9.1.1 Categories of personal data

Required fields:

• First name
• Lastname
• Postcode, city, street, house number
• E-mail

Optional:

• Telephone number
• Company name
• Subject
• Message

9.1.2 Legal basis of the data processing

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), provided this has been requested and granted by you.

9.1.3 Duration of storage

Die von Ihnen im Kontaktformular eingegebenen Daten werden auf den Servern der Sopro Bauchemie GmbH gespeichert, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen wird oder der Zweck für die Datenspeicherung entfällt (z. B. nach abgeschlossener Bearbeitung Ihrer Anfrage). Zwingende gesetzliche Bestimmungen – insbesondere Aufbewahrungsfristen – bleiben unberührt.

9.2 Newsletter

We need your personal data to register you as a subscriber to our newsletter in our database so that we can send you the newsletters you have ordered. Your subscription can be cancelled at any time without giving reasons. See here: https://www.sopro.com/de-de/aktuelles/

9.2.1 Categorys of personal data

Required fields:

• E-mail

Optional:

• First name
• Lastname

9.2.2 Origin of personal data

Your personal data is collected directly from you.

9.2.3 Duration of storage

After collection, your data will be stored for the duration of your subscription to the newsletter and deleted after unsubscription.

9.2.4 Revocation

Die Einwilligung in die Übersendung des Newsletters kann jederzeit widerrufen werden. In jedem Newsletter befindet sich ein Link, über den man den Newsletter abbestellen kann. Alternativ können Sie auch das Formular im unteren Bereich unserer Homepage nutzen, um Ihr Newsletter-Abo zu beenden. Siehe hier: https://www.sopro.com/de-de/aktuelles/

9.3 Order data processing

We also work together with external partners. In this context, these partners provide commissioned processing within the meaning of Article 28 of the GDPR. In this respect, they are not third parties within the meaning of the GDPR. In the context of the technical provision of this website, we work with our partners

SinkaCom AG
Hamburger Allee 26-28
60486 Frankfurt am Main

and

dkd Internet Service GmbH
Kaiserstraße 73
60329 Frankfurt am Main

on the basis of an order processing agreement.

You can reach our WEB shops under the following URL:

Workwear - https://www.sopro-arbeitskleidung.com/

ProfiAkademy - https://www.sopro-profiakademie.com

10.1 How do we collect your data?

10.1.1 User Account

In order to be able to place orders via our WEB-Shop, each customer must set up a password-protected customer account. This contains an overview of orders placed and active order processes. If you are already registered as a customer in the online shop and wish to leave this area, you must log out. Please note that simply closing a browser window will not automatically log you out. Please also note that we cannot accept any liability for password misuse unless this is caused by ourselves.

10.1.2 Ordering procedure

All data entered by customers in the course of order processing is stored. This includes:

• First and last name
• Business address for invoice, delivery addresses
• E-mail address
• Sales tax ID (not a required field)
• Telephone number
• Confirmation that you are a business customer

Those data which are absolutely necessary for the execution of the order, delivery or order processing are passed on to our partner:

ZEGO Textilveredelungszentrum GmbH
Lilienthalstr. 2
63741 Aschaffenburg
Tel.: +49 (0)6021 59092-0

forwarded.

ZEGO Textilveredelungszentrum GmbH acts on our behalf. The basis of the cooperation is Art. 26 GDPR "Shared responsibility". The area of responsibility of ZEGO Textilveredelungszentrum GmbH begins with the receipt of the data required for the order process. Subsequently and for further order processing, ZEGO Textilveredelungszentrum GmbH assumes responsibility for the processing of personal data. In this case, processing also takes place on the basis of a contractual arrangement.

10.2 Categories of personal data

See ordering procedure

10.3 Origin of the personal data

Your personal data is collected directly from you.

10.4 Legal basis for data processing

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), provided this has been requested and granted by you.

10.5 Duration of storage

Your personal data will remain with us until you revoke your consent to storage until the purpose ceases to apply or until you request us to delete it. Mandatory legal provisions - in particular retention periods - remain unaffected.