Data protection information for business contacts of HML Haseneder Maschinenbau e.K.Version May 2018 The following information provides you with an overview of the processing of your personal data with us and your rights in accordance with the General Data Protection Regulation (DSGVO) . 1.Identity of the person responsible for data protection The person responsible for data processing can be found in the signature of your contact person.2. Contact details of the data protection officerFor questions and information concerning the handling of your personal data, you can contact the data protection officer of HML Haseneder Maschinenbau e.K. contact.HML Haseneder Maschinenbau e.K. Mr. Thomas Haseneder / ppa Sales ManagementContact: t.haseneder@hml-hm.com 3. Collection and processing of your data provided - purpose and legal basis. We collect and process your data for the purpose of establishing a contractual relationship and for processing orders. The legal basis for this processing is Art. 6 (1) lit. b) GDPR (execution of a pre- contractual action or performance of a contract). In addition, we will use your specified contact details for sending so-called PCN (Product Change Notification) / PTN (Product Termination Notice). This is done to fulfill a contractual obligation under Art. 6 para. 1 lit. b) GDPR and / or to safeguard our common legitimate interests, Art. 6 (1) lit. f) GDPR. The legitimate interest consists in the maintenance of secondary contractual obligations, as well as their early inclusion, so as to establish a planning security for you.If necessary, we process your data beyond the actual purpose of the contract for the protection of legitimate interests, Art. 6 Abs.1 lit. f) GDPR, for the further development and improvement of our offers and for business management. In addition, there is a legitimate interest in the form of risk management within the corporate group. In the context of the legitimate interest in accordance with Art. 6 (1) lit. f) DSGVO, we also use your data to inform you about comparable offers and products. 4. Recipients The HML Haseneder Maschinenbau e.K. uses specialized technical service providers for order processing in the context of the technical processing of your personal data. These service providers are carefully selected and are legally and contractually committed to ensuring a high level of data protection. The order processing of your data is carried out according to Art. 28 DSGVO.To carry out your orders, we commissioned shipping companies. These, like us, are legally obliged to ensure and comply with a high level of data protection. For other purposes than those mentioned here, we only pass on your personal data to third parties, insofar as there is a legal obligation in the form of a priority legal provision (eg in the case of auditing) . 5. Data security The personal data collected and stored by us are treated confidentially and protected against loss and changes as well as unauthorized access by third parties through appropriate technical and organizational measures. 6. Duration of storage Your personal data is stored with us as long as it is necessary to fulfill the contractual obligations and to achieve the contractual purpose. In addition, retention obligations and deadlines have been passed by lawmakers or supervisory authorities. Upon expiry of the retention obligations and deadlines, your data will be deleted as part of a routine procedure. Should data not be subject to the named retention obligation, these will be deleted as soon as their storage is no longer necessary for the purpose. It should be noted that the business relationship can develop into a perpetual obligation, which is created over several years. A retention obligation after reaching the contractual or legal obligation may result as follows: Commercial and tax retention periods. The deadlines for storage and / or documentation specified therein are up to 10 years after termination of the business relationship or upon conclusion of the individual order. Preservation of evidence within the statute of limitations according to §§ 195 ff. BGB. The statutory limitation period is 3 years. However, limitation periods may be up to 30 years. 7. Your rights In the presence of legal requirements, you have the right to obtain information about personal data or data processing concerning you (Article 15 GDPR), correction, deletion and restriction of personal data or data processing (Articles 16 to 18 GDPR) and Transfer of personal data (Art. 20 DS ) In addition, if the statutory requirements under Art. 21 GDPR are met, you are entitled to a right of objection to data processing that is based on a "legitimate interest" of the person responsible pursuant to Art. 6 para. 1 lit. f) DSGVO.To exercise all these rights or if you wish to revoke a given consent to the processing of your personal data, in whole or in part, with effect for the future, please send us an e-mail to: t.haseneder@hml- In accordance with Art. 77 (1) GDPR you also have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if: You are of the opinion that the processing of your personal data violates the GDPR. The supervisory authority responsible for data protection: The State Commissioner for Data Protection and Freedom of Information Saxony Sächsischer Datenschutzbeauftragter Postfach 12 00 16 01001 Dresden