data processing

The controller within the meaning of data protection law is
Merz Verpackungsmaschinen GmbH
Carl-Benz-Ring 42
35423 Lich

You will find further information about our company, details of the authorized representatives and other contact options in the imprint.

If we have received data from you, we will only process it for the purposes for which we received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

The legal basis for the processing of personal data is generally - unless there are specific legal provisions - Art. 6 GDPR. The following possibilities in particular come into consideration here:

• Consent (Art. 6 para. 1 lit. a) GDPR)
• Data processing for the performance of contracts (Art. 6 (1) (b) GDPR)
• Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
• Data processing to fulfill a legal obligation (Art. 6 para. 1 lit. c) GDPR)

If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

We process the data as long as this is necessary for the respective purpose.

Insofar as statutory retention obligations exist - e.g. under commercial law or tax law - the personal data concerned will be stored for the duration of the retention obligation. Once the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted.

At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing.

Of course, you can request information about the personal data we have stored about you at any time (see below) and, if it is not necessary, request that the data be deleted or that processing be restricted.

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent to do so.

Your personal data will be processed by us exclusively in data centers located in the Federal Republic of Germany.

You have the right to information about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.

Furthermore, you have the right to object to the processing within the framework of the legal requirements. The same applies to the right to data portability.

In particular, you have the right to object to the processing of your data in connection with direct advertising in accordance with Art. 21 (1) and (2) GDPR if this is based on a balancing of interests.

We have appointed a data protection officer in our company. You can reach him under the following contact options:

bits + bytes it-solutions GmbH & Co. KG
Hommeswiese 136
57258 Freudenberg
E-Mail: datenschutz@bits-bytes.de

According to Article 38 of the General Data Protection Regulation (GDPR), every data subject has the right to lodge a complaint with the

data protection officer and/or seek advice. The company data protection officer is obliged to maintain confidentiality and secrecy.

Employees have the right to contact the data protection supervisory authority and obtain information about their rights under the German Federal Data Protection Act (BDSG) and other data protection regulations, including the General Data Protection Regulation (GDPR). In addition, the supervisory authority is the point of contact for complaints regarding the processing of personal data.

Competent supervisory authority for Merz Verpackungsmaschinen GmbH:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: +49611-1408 0
Fax: +490611-1408 611
E-Mail: poststelle@datenschutz.hessen.de

You can find an overview of other data protection supervisory authorities here.