Processing of your personal data

Who is responsible for data processing and who is the data protection officer?

Responsible for the data processing is

LEWA GmbH
Ulmer Straße 10
71229 Leonberg
Germany

Managing Directors: Tsunehisa Suita (CEO), Dr.-Ing. Martin Fiedler, Stefan Glasmeyer

Phone  +49 7152 14-0
Fax      +49 7152 14-1303
E-Mail  dsm@lewa.de

Our data protection officer Dieter Grünke, audius GmbH can be reached at the a.m. address or at datenschutzbeauftragter@lewa.de.

All contact details and further information on data protection can also be found at www.lewa.com/en/privacy 

Which data categories do we use and where do they come from?

The processed categories of personal data include in particular your master data (such as first name, last name, name addition, company), contact data (such as address, (mobile) telephone number, e-mail address) and other data from the contractual relationship (e.g. offer data, order data, billing data).

Your personal data are usually collected directly from you within the framework of the contractual relationship. In addition, we may have received data from third parties (e.g. credit reference agencies).

For which purposes is your data processed?

General, business-related communication

  • Telephone, e-mail, letter, fax and social networks
  • Preparation of contracts and their handling
  • Visitor management during a visit in our house

Business initiation and support for sales purposes

  •  Creation of a customer profile and contact history
  •  Assignment and processing of your inquiries 
  •  Creation and sending of offers for products and services
  •  Assignment to the responsible field representative by postal code
  •  Data transfer to branches or sales partners responsible for you for the best possible customer service
  •  Conducting credit checks

Marketing 

  •  Conduct online and offline promotional activities for products and services of LEWA Group companies, affiliates and licensed merchandise
  •  Carrying out customer satisfaction surveys
  •  Newsletter dispatch, interest-based approach based on industry and function
  •  Trade fair and event invitations

Order processing and service 

  • Contract fulfillment including project management and commissioning
  • Procurement of materials and services to fulfill the contract
  • Provide online product-related information from the lifecycle
  • Processing via online shop systems 

Recruiting 

  • To process applications for vacancies
  • Conducting aptitude tests and job interviews 

Legal basis for data processing

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant laws.

First and foremost, the processing of data serves to fulfill a contract of which the contracting party is the data subject or to carry out pre-contractual action. The primary legal basis for this is Article 6 (1) (b) GDPR. Possibly, we use your separate personal consent acc. Art. 6 para. 1 a) and 7 GDPR  as data protection permission.

We also process your data in order to fulfill our legal obligations, in particular in the field of tax law. This is done on the basis of Art. 6 para. 1 c) GDPR.

As far as necessary, we also process your data on the basis of Art. 6 para. 1 f) of the GDPR in order to protect the legitimate interests of us or third parties (e.g. authorities). This applies in particular to the investigation of criminal offenses or internal communication and other administrative and marketing purposes.

We also process your data for direct mailing and for existing customers to send information about similar products or services by email, which you can always object to. The legal basis for this is Art. 6 para. 1 f) GDPR.

Should we wish to process your personal data for a purpose not mentioned above, we will inform you in advance.

Whom do we transfer your data?

Within our company, only the persons and entities (eg technical departments) receive your personal data, as far as needed to fulfill our contractual and legal obligations.

Outside our company, your data is passed on to companies of the LEWA-NIKKISOGroup or, as far as necessary, to the commercial agencies or external service providers commissioned by LEWA GmbH. Furthermore, credit bureaus and collection agencies can get the data. The legal basis for this is Article 6 (1) (f) GDPR and Article 6 (1) (b) GDPR.

Insofar as external service providers receive personal data, we urgently require legal, technical and organizational measures to comply with data protection regulations.

A data transfer to a third country only takes place  where a responsible company of the LEWA-NIKKISO group takes care of your business relationship and order processing..

Any further disclosure of your personal data to third parties will only be carried out with your consent, unless there is a legal obligation to do so or to protect the rights, property and safety of LEWA GmbH.

Which data protection rights can you assert as a data subject?

You can request information about the data stored at the above mentioned address. . In addition, under certain circumstances, you may request the correction or deletion of your data. You may also be entitled to a restriction on the processing of your data and to the right to disclose the data you provided in a structured, common and machine-readable format.

Right of Objection

You have the right to object to the processing of your personal data for direct marketing purposes without giving any reason. Furthermore, you have the right to object to any processing that we make on the basis of a consent granted by you.

If we process your data in order to safeguard legal interests, you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing for the purposes of asserting, pursuing or defending legal claims.

Where can you complain?

You have the option of complaining to the above data protection officer or to a data protection supervisory authority. The data protection supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

PO Box 10 29 32
70025 Stuttgart
Germany

How long will your data be stored?

We will delete your personal information as soon as it is no longer necessary for the above purposes and we are no longer required to do so by law. This is regularly the result of legal proof and retention obligations, which are regulated inter alia in the Commercial Code and the Tax Code. The storage periods are thereafter up to ten years. In addition, personal data may be retained for the period in which claims can be asserted against us (statutory limitation period of three or thirty years).

Is your data transmitted to a third country?

Data transfer to a third country only takes place to the extent indicated above.

Are you required to provide your data?

In the context of the contract or pre-contractual measures, you must provide the personal data necessary for the establishment, execution and termination of the contract and the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will not be able to execute the contract with you or process your order.

To what extent do individual automated decisions or pro-filing measures take place?

Your data will not be used by us for automated decision-making or personal profiling.