Data Protection Zett Umzüge GmbH

We take the protection of personal data seriously and comply with data protection regulations, in particular the EU General Data Protection Regulation ("DSGVO") and the German Federal Data Protection Act ("BDSG"). In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data collected about you and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services. To ensure that you are fully informed about the processing of your personal data in the context of the performance of a contract or the implementation of pre-contractual measures, please take note of the following information.

1. Responsible body in the sense of data protection law

zapf umzüge Freiburg
Zett Umzüge GmbH
Oltmannsstraße 34
79100 Freiburg

Telefon: +49 761 459900
E-Mail: freiburg(at)zapf.de

Our contact persons for data protection
Carina Riesterer & Sven Riesterer
E-Mail: datenschutz(at)zapf-freiburg.de

2. Categories of personal data

We only process data that is related to the establishment of the contract or the pre-contractual measures. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of the establishment of the contract.

3. Purposes and legal bases of processing

We process your personal data in accordance with the provisions of the European Data Protection Regulation (EU-DSGVO) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, implementation or performance of a contract or for the implementation of pre-contractual measures. Insofar as the provision of personal data is required for the initiation or execution of a contractual relationship or in the context of the execution of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b DSGVO. If you give us your express consent to process personal data for specific purposes (e.g., transfer to third parties, evaluation for marketing purposes or advertising), the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) a DSGVO. Consent given can be revoked at any time, with effect for the future (see section 8 of this data protection information).

If necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfillment of legal obligations pursuant to Art. 6 (1) lit. c DSGVO. In addition, processing may be carried out to protect the legitimate interests of us or third parties pursuant to Art. 6 (1) f DSGVO. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.

4. Receiver of the data

We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests. We may transfer your personal information to our affiliates to the extent permitted by the purposes and legal bases set forth in this document.

Your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 DSGVO. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are internet service providers and providers of customer management systems and software. Otherwise, data is only forwarded to recipients outside the company if this is permitted or required by law, if the forwarding is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation,
• Recipients to whom the transfer is directly necessary for the establishment or fulfillment of the contract, such as logistics companies.

5. Transmission to a third country

As a rule, data processing takes place in the European Union. A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization will only take place if this is necessary for the processing and thus the fulfillment of the contract or, at your request, for the implementation of pre- contractual measures, the transfer is required by law or you have given us your consent (e.g. customs documents Switzerland). 

6. Duration of data storage

As far as necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This also includes, among other things, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO), among other things. The retention and documentation periods prescribed there are two to ten years. Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years. 

7. Your rights

Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 DSGVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may need to retain certain data for a certain period of time in order to comply with legal requirements (see section 6 of this data protection information).

8. Right of objection according to art. 21 DSGVO

Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO, you have the right pursuant to Art. 21 DSGVO to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.

To protect your rights, please feel free to contact us. 

9. Necessity of the provision of personal data

As a rule, the provision of personal data for the purpose of establishing, implementing or fulfilling a contract or for the performance of pre-contractual measures is not required by law or contract. You are therefore not obliged to provide personal data. Please note, however, that these are usually required for the decision on the conclusion of a contract, the performance of the contract or for pre-contractual measures. If you do not provide us with personal data, we may not be able to make a decision within the scope of contractual measures. We recommend that you only ever provide personal data that is required for the conclusion of the contract, the fulfillment of the contract or for pre-contractual measures.

10. Automated decision making

For the establishment, fulfillment or implementation of the business relationship as well as for pre-contractual measures, we generally do not use fully automated decision-making pursuant to Art. 22 DSGVO. Should we use these procedures in individual cases, we will inform you separately or obtain your consent, if this is required by law.