Mandatory data protection information

I. Introduction

We, Trusetal Verbandstoffwerk GmbH, Konrad-Zuse-Straße 15, 33758, Schloß Holte-Stukenbrock, tel.: +49 5207 991688-0, info@tshs.eu as responsible body, would like to explain to you below which data from you we process and how we process it.

II. Datenschutzbeauftragter

Our data protection officer Mr Thomas Werning is available for questions regarding data protection.

He can be reached at:
werning.com GmbH – Dieselstraße 12 – 32791 Lage,
Email: datenschutz@tshs.eu – Tel.: +49 5232 980-4700

With this data protection information, we as the responsible body meet our information obligation in accordance with art. 12-14 GDPR.

III. Information on data collection and processing

You will find information below about which personal data (this is all data that identifies you as a natural person (hereinafter referred to as “affected person”) or makes you identifiable) can be collected.

This is, for example:

• Customer master data on contract implementation/fulfilment of the service, name, address, email address, data in connection with the payment processing, correspondence (e.g. exchange of letters or email with you), advertising and sales data (e.g. for information on new offers of potential interest via post or also via email, with corresponding consent)
• Data from contact initiation, such as name, telephone number, email address
• Supplier data, such as name, telephone number, email address
• Employee data such as name, address, bank data, religious affiliation, personnel number, social security number, log data arising during use of the IT systems, as well as additional and special categories of personal data
• Job application data such as name, address, email address, marital status, religious affiliation
• Data due to video surveillance

IV. Right of appeal

If you believe that the processing of the personal data concerning you violates the General Data Protection Regulation, you have a right of appeal to the data protection supervisory authority responsible for us, which is the State Officer for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/ as well as to any other data protection supervisory authority.

V. Purposes of the processing

1.    Customer data/interested parties

Purpose of the processing

We process data that we obtain in the context of transacting our business relationship with you. We obtain the data directly from you, either in the case of queries from interested parties and contact requests, or for order placement or order processing (see item “Information on data collection and processing”).

Legal basis:

The data collection and data processing are necessary for implementation of the contract and are based on art. 6 para. 1 (b) GDPR. The use for direct advertising is based on art. 6 para. 1 (f) GDPR. It is our legitimate interest to make you aware of special offers by way of direct advertising. Data is not transmitted to third parties, except where required by law, such as to the tax authority in the context of tax laws. The data will be deleted as soon as it is no longer needed for the purpose of its processing or after the expiry of statutory retention periods (such as accounting records relevant with regard to tax and commercial law: 10 years; commercial and business letters: 6 years; records on suppliers, type, quantity, purchase, delivery: 3 years).

You have the right at any time to object to the use of your data for purposes of direct advertising. You are additionally entitled to request information on the data about you stored with us as well as to request correction of incorrect data or deletion of data in the case of inadmissible data storage. In addition, you have the right of appeal with a supervisory authority (see item “Right of appeal”).

Duration of data storage

After providing the contractually owed service, your personal data will be stored for 10 years for the purpose of the statutory warranty, for 10 years to fulfil warranty conditions, for 10 years for the purpose of the implementation (at the time of conclusion of the contract or desired at a later time) of follow-up orders, and 10 years for purposes according to tax law.

Deletion of data

Your personal data will be deleted no later than the expiry of the time periods indicated above.

2.    Suppliers

Purpose of the processing

We process data that we obtain in the context of transacting our business relationship with you. We obtain the data directly from you in the context of order placement or order processing (see item “Information on data collection and processing”).

Legal basis:

The data collection and data processing are necessary for implementation of the contract and are based on art. 6 para. 1 (b) GDPR. Data is not transmitted to third parties, except where required by law, such as to the tax authority in the context of tax laws. The data will be deleted as soon as it is no longer needed for the purpose of its processing or after the expiry of statutory retention periods (such as accounting records relevant with regard to tax and commercial law: 10 years; commercial and business letters: 6 years; records on suppliers, type, quantity, purchase, delivery: 3 years).

You are entitled to request information on the data about you stored with us as well as to request correction of incorrect data or deletion of data in the case of inadmissible data storage. In addition, you have the right of appeal with a supervisory authority (see item “Right of appeal”).

3.    Employee data

See separate template to be given to employees.

4.    Newsletter

Purpose of the processing

If you want to receive the newsletter offered on the website, we require an email address from you. Registration for the newsletter is carried out using a double opt-in method, that is, after registering, you receive an email with which you must confirm your registration. This method prevents an unauthorised person from registering with your email address. Logging (storage of the time of the registration and confirmation and the IP address) via your registration to the newsletter will be carried out. The logging is used to demonstrate that the registration process was conducted in accordance with legal requirements.

You can at any time withdraw your consent to the storage of the email address (and optionally first name and surname for the purpose of being addressed personally) and its use to send the newsletter with associated performance measurement. A link for unsubscribing is provided at the end of each newsletter. In order for us to be able to prove that consent was previously given in the case of an unsubscribed email address, we may store it for up to 2 years before we delete it.

Legal basis for sending the newsletter and the associated performance measurement:

This is carried out on the basis of consent by the recipients according to art. 6 para. 1 (a) GDPR, art. 7 GDPR together with section 7 para. 2 no. 3 UWG (Act against Unfair Competition) and on the basis of the statutory permission according to section 7 para. 3 UWG.
In addition: art. 6 para. 1 (f): Our legitimate interest in performance measurement arises from identifying the reading habits of our users based on opening the newsletter, times of opening and links that are clicked on, in order to be able to create and send them interest-based and useful content as a result.

The legal basis for logging is art. 6 para. 1 (f) GDPR. Our legitimate interest arises from the fact that we use a secure and user-friendly newsletter system that is useful for sending newsletters and protects the personal data of newsletter subscribers. In addition, it allows us to have proof of consent.

You are entitled to request information on the data about you stored with us as well as to request correction of incorrect data or deletion of data in the case of inadmissible data storage. In addition, you have the right of appeal with a supervisory authority (see item “Right of appeal”).

5.    Job applications

Purpose of the processing

Job applications via email or post: If you submit an application to us because of a job posting or submit an unsolicited application, we will collect your personal data such as first name, surname, address, telephone number, email address, attachments (cover letter, CV, credentials, photo) and store it for the duration of the selection process.

Your data will be used exclusively by persons from the human resources department or executive management authorised to do so for processing in the context of the selection process. Your personal data will not be forwarded to third parties.

If the specific position which you are applying to has already been filled otherwise but you are eligible for cooperation later on or cooperation in a partner company or subsidiary based on your profile, we will obtain your express consent before continued storage or forwarding of the application, unless you have already consented to such storage and/or forwarding in your application.

If you submit an unsolicited application to us via our general contact email address, the contents of your application email may be seen by personnel not authorised to do so. It is stipulated that the application documents are to be immediately forwarded unopened to the human resources department and the incoming email deleted. If you would like to exclude this, please contact us by telephone prior to your unsolicited application so that the contact data can be communicated to the right contact person, or send an email to karriere@tshs.eu. Only authorised employees from the human resources department and executive management have access to this mailbox.

The legal basis is art. 6 para. 1 (b) GDPR, for the processing of precontractual measures.

Unless you notify us otherwise, the data will be deleted no later than 6 months after conclusion of the application procedure or destroyed in the case of applications sent via post. Due to the long application and selection periods in the case of trainees, we store their data in Germany for up to 18 months.

You are entitled to the following rights, if the respective statutory preconditions are met: Right to information about your data that we have stored; correction, deletion, limitation of the processing of your data or objection to the processing, as well as data portability. In addition, you of course have the option at all times of requesting the deletion or destruction of all of your application documents by emailing us at: karriere@tshs.eu.

6.    Facebook fan page

Please follow the link to our data privacy statement on our website.

7.    Server data collection

Please follow the link to our data privacy statement on our website.

8.    Video surveillance

Purpose of the processing

The purpose of our video surveillance is the prevention of vandalism, protection against theft, exercising of our property rights, protection of persons and property, protection against industrial espionage, access control, and burglary. We, as the responsible body, process personal image data that we collect in the context of video surveillance on company premises. The storage period is a maximum of 4 months.

The legal basis is art. 6 para. 1 (f) GDPR. Our legitimate interest is burglary prevention and the protection of our property and access control.

This data will be forwarded only to investigative authorities in the event of criminal offences.

You have the right to request a confirmation from us as the responsible body whether personal data concerning you is processed: If this is the case, you have the right to information about this personal data, the right to request correction of the data if it is incorrect, and the right to request deletion of the data in the event of inadmissible data storage. In addition, you have the right of appeal with a supervisory authority (see item “Right of appeal”).

If you have any questions about this, you may contact our data protection officer at datenschutz@tshs.eu.

VI. Intention for processing in third countries

If there is in particular the intention of processing personal data in a third country, statements are to be made on the presence or absence of an adequacy decision by the Commission. If there is no such adequacy decision, the website operator must describe in approximate terms which reasonable and suitable guarantees (in particular those that are technological and organisational in nature) are planned for the data transmission. He/she must offer the option of obtaining a copy of the explanations regarding these guarantees. More information can be found in art. 13 para. 1 (f) GDPR. The reference to processing in a third country that is described will exist in particular if the selected service supplier has its registered office in a third country, if the supplier collects the data or stores the data collected via the website on its own servers and can access it or uses servers of a third party and thus can access the usage data.

VII. Categories of recipients

In the context of providing services for special areas, we use service companies who are separately obligated to maintain non-disclosure and data privacy where access to personal data cannot be excluded.

These categories of recipients are:

• Processors we have appointed (art. 28 GDPR), in particular in the area of IT services, taxes, logistics and printing services, who process your data bound by directives for us.
• Public bodies and institutions (finance authorities) if there is a legal or official obligation.
• Other bodies for whom you granted us your consent to data transfer.

Forwarding to authorities is carried out only if there are overriding statutory provisions.

VIII. Advertising and right of objection

Surnames, first names and addresses are additionally collected for advertising purposes (sending offers, information on additional services). You may object to the processing for advertising purposes at any time without indicating reasons using the following contact information: info@tshs.eu or datenschutz@tshs.eu.

IX. Objection to data storage

Legitimate corporate interests are pursued with the data processing for the purpose of (at the time of conclusion of the contract or desired at a later time) implementation of follow-up orders for 10 years, from the standpoint of data protection law. You may object to this processing at any time using the following contact information:

Trusetal Verbandstoffwerk GmbH
Konrad-Zuse-Str. 15
33758 Schloß Holte-Stukenbrock
Email: info@tshs.eu – Tel.: +49 5207 991688-0 – Fax: +49 5207 991688-28

X. Obligation to provide information

The conclusion of a contract is generally not possible without correct information from you.

XII. Currentness of and change to this mandatory information

We reserve the right to adapt the contents of this mandatory information at any time. This is generally carried out in the case of further development or legal adaptation. The current mandatory information can be found via a link (which is included in emails, offers, order confirmations, invoices, etc.) to our website.

This declaration was last updated in: May 2024.

Further information on the handling of personal data is available at https://www.tshs.eu/en/data-protection.html.