Data Protection Information for Customers
Information on data protection regarding our processing of customer and prospect data in accordance with Articles 13, 14 and 21 of the Basic Data Protection Ordinance (DSGVO)
AutoGyro GmbH
Dear customer, dear prospective customer, dear prospective customer,
We hereby inform you about the processing of your personal data and your rights in this regard in accordance with Articles 13, 14 and 21 DSGVO. Which data are processed in detail and how they are used depends largely on the requested or agreed services.
1. Responsible party in the spirit of data protection law
AutoGyro GmbH
Dornierstraße 14
31137 Hildesheim, Germany
+49 5121 880 56-00
info@auto-gyro.com
www.auto-gyro.com
2. Contact data of our data protection officer
Dominik Fünkner
datenschutzbeauftragter@datenschutzexperte.de
3. The purposes and legal basis of the processing
We process your personal data in accordance with the provisions of the European Data Protection Ordinance (DSGVO) and the Federal Data Protection Act (BDSG) for the purpose of establishing, implementing and fulfilling the contract and for implementing pre-contractual measures. Insofar as the disclosure of personal data is required for the initiation or execution of contractual relationships or in the context of the execution of pre-contractual measures, the processing of Art. 6 para. 1 lit. b DSGVO is legal.
If you give us your express consent to the processing of personal data for specific purposes (e.g. forwarding of data to third parties, analysis of data for marketing purposes, advertising), the legality of such processing is given on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO. Consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
As far as necessary and legally permissible, we process your data beyond the actual contractual purposes for the fulfilment of legal obligations (Art. 6 Para. 1 lit. c DSGVO). In addition, processing may be carried out by us or by third parties to safeguard legitimate interests (Art. 6 para. 1 letter f DSGVO); we will inform you of this separately, stating the legitimate interest, insofar as this is prescribed by law.
4. Categories of personal data
We process data in connection with the conclusion of the contract or the pre-contractual measures. This may be general data about you or your company (such as your name, address and contact details) and, if applicable, other data that you provide to us in connection with the establishment of the contract.
5. Sources of data
We process personal data which we receive from you within the framework of contacting or establishing the contractual relationship or within the framework of pre-contractual measures or which you provide via our[www.aeroexpo.online].
6. Recipient of the data
We pass on your personal data within our company exclusively to those areas that require this data to fulfil contractual and legal obligations or to implement our legitimate interest.
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in Section 3 of the data protection information.
Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 DSGVO. In these cases, we ensure that the processing of personal data is carried out in accordance with the Basic Data Protection Regulation. The category of recipients in this case is our host provider.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be, for example:
Public authorities and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) in the event of a legal or official obligation.
Recipients to whom it is directly necessary to pass on the data in order to form or fulfil the contract, e.g. international sales & maintenance partners, flight schools.
Other recipients of data may be those bodies for which you have given us your consent to the transfer of data.
7. Transfer to a third country
Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organisation if this is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent. In such cases, recipients may include international sales partners, maintenance bases or flight schools within the scope of your inquiry.
8. Duration of data storage
If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract or to fulfil the contractual purposes.
In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the Tax Code (AO). The periods for storage and documentation specified there range from two to ten years.
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB) can generally amount to three years, but in certain cases also up to thirty years.
9. Your rights
Any data subject has the right of access under Article 15 DSGVO, the right to correction under Article 16 DSGVO, the right to cancellation under Article 17 DSGVO, the right to limitation of processing under Article 18 DSGVO, the right to notification under Article 19 DSGVO and the right to data transfer under Article 20 DSGVO.
In addition, there is a right of appeal to a data protection supervisory authority pursuant to Art. 77 DSGVO if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled pursuant to Art. 7 DSGVO to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may be required to retain certain data for a certain period of time in order to comply with legal requirements.
Right of objection
Insofar as the processing of personal data concerning you takes place on the basis of Art. 6 para. 1 lit. f DSGVO to protect legitimate interests, you have the right pursuant to Art. 21 DSGVO to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.
To protect your rights, you can contact us at any time using the above data.
10. Necessity of providing personal data
As a rule, the provision of personal data for the establishment, fulfilment or implementation of pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide personal data. However, the provision of personal data is generally necessary for the decision to conclude or fulfil a contract or for pre-contractual measures. You should and must always provide only those personal data which are necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures. If you do not provide us with personal data, we may not be able to make a decision within the framework of contractual measures.
11. Automated decision making
For the establishment or implementation of the business relationship as well as for pre-contractual measures we do not use fully automated decision making according to Art. 22 DSGVO. Should we use these procedures in individual cases, we will inform you separately or obtain your consent, insofar as this is required by law.