With this document, we inform you as a customer/contract party/interested party of how Zapf Creation AG processes your personal data and of your rights under data protection law.
Zapf Creation AG
Mönchrödener Str. 13
We process the following personal data as part of the contractual relationship and prior to concluding a contract:
We generally receive your personal data prior to concluding a contract or during the ongoing contractual relationship. In exceptional cases, your personal data may also be collected by other bodies in specific constellations. This includes occasion-related queries for relevant information from information agencies, particularly regarding your credit rating and credit behaviour.
When processing your personal data, we always observe the provisions of EU‑GDPR, the German Federal Data Protection Act (BDSG (new)) and other applicable legal requirements.
Your personal data is processed exclusively in order to implement measures prior to concluding a contract, and to perform contractual obligations (Art. 6 para. lit. b) EU-GDPR), or if there is a legal processing obligation (e.g. due to requirements under tax law) (Art. 6 para. 1 lit. c) EU-GDPR).
Of course, your consent can also constitute a permission under data protection law (Art. 6 para. 1 lit. a) EU-GDPR). Before you give your consent, we inform you of the purpose of the data processing and of your right to object under Art. 7 para. 3 EU-GDPR). If your consent also relates to processing of special categories of personal data under Art. 9 EU-GDPR, we will inform you of this explicitly in advance.
In relation to uncovering criminal offences, your personal data is only processed according to the conditions of Art. 10 EU-GDPR.
We shall delete the data as soon as your data is no longer required for the above purposes, or if you have revoked your consent. The data is only saved after the end of the contractual relationship when we are legally obligated or authorised to do so. Provisions under which we are obligated to store data are e.g. in the Commercial Code or the Tax Code. These can result in a storage period of up to ten years. We might e.g. be authorised under our contract or according to Art. 18 EU-GDPR. In addition, the legal limitation periods must be observed.
In our company, we make sure that only departments and individuals that require your data to perform our contractual and statutory obligations are given access to your data.
In many cases, service providers support our departments in performing their tasks. All service providers have signed the required data protection contracts.
Your personal data is in part transferred to the following service providers for contract processing:
Your rights as the data subject are set out in Art. 15 - 22 EU-GDPR.
You have the right to lodge a complaint with a supervisory authority.
We only transfer data to third countries (outside the European Union or the European Economic Area), if this is required to perform the FOB/DDP order.
You are obligated to provide certain personal data to commence or conclude a contractual relationship. This is required in order to establish, perform and terminate the contractual relationship and to perform the contractual and legal obligations involved. Contract performance is not possible if this data is not provided.
We do not use any purely automated processing procedures to reach decisions.