1. Responsible person

The entity responsible for data processing is:

Telephone: +49 (0) 2862 5879 50
Fax: +49 (0) 2862 5879 529
Email: info@komplett-konzept.de

Represented by the management Stephanie Parlitz

2. Type of data processed

We process personal data that we receive in connection with inquiries, offers, orders, purchase agreements, services, goods purchases, deliveries, complaints or other business relationships.

This may include, in particular:

• Title, first name and last name
• Company name and contact person
• Billing and delivery address
• E-mail address
• Telephone number
• Payment and bank details
• Order, quotation, contract and invoice data
• Delivery and shipping information
• Communication content, e.g. via email, telephone, contact form or WhatsApp
• possibly further information required for the performance of the contract

For orders placed via external platforms or marketplaces, we may obtain the data provided there from the respective platform operator, insofar as this is necessary for contract processing.

3. Purposes of data processing

The processing is carried out in particular for the following purposes:

• Handling of requests
• Preparation of offers
• Execution and handling of purchase, service and work contracts
• Payment processing
• Invoicing and accounting
• Shipping, delivery and freight forwarding
• Handling of complaints, returns and warranty claims
• Customer service and business communication
• Compliance with legal retention and documentation obligations
• Enforcement or defense of legal claims

4. Legal basis for processing

The processing of personal data is based on:

• Article 6 paragraph 1 letter b GDPR , insofar as the processing is necessary for the implementation of pre-contractual measures or for the performance of a contract.
• Article 6 paragraph 1 letter c GDPR , insofar as we are legally obliged to process data, in particular due to tax and commercial law retention obligations.
• Article 6 paragraph 1 letter f GDPR , insofar as the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, e.g. for efficient business operations, communication with business partners, debt collection or documentation of business transactions.
• Article 6 paragraph 1 letter a GDPR , provided you have given us your explicit consent.

5. Recipients of personal data

Personal data will only be disclosed to the extent necessary for processing the respective transaction, if there is a legal obligation to do so, or if corresponding consent has been obtained.

Recipients may include, in particular:

• Shipping service providers, parcel services and freight forwarders
• Payment service providers, banks and financial service providers
• Tax advisors, accountants and auditors
• IT service providers, hosting providers and shop system service providers
• Email and communication service provider
• Platform and marketplace operators, insofar as the order or inquiry is made via this platform
• Authorities, courts or other public bodies, insofar as there is a legal obligation to do so.
• Lawyers or debt collection agencies, insofar as this is necessary for the enforcement or defense of legal claims.

Service providers who process personal data on our behalf are obligated to maintain confidentiality and data protection in accordance with legal requirements.

6. Transfer to third countries

Personal data will only be transferred to countries outside the European Union or the European Economic Area if this is necessary for the execution of the contract, if you have given your consent, or if suitable data protection guarantees exist.

This can be the case, in particular, with international shipping, international communication, or when using certain IT or platform service providers.

Further information on individual third-party providers, in particular Google services, can be found in our privacy policy.

7. Storage duration

We only store personal data for as long as is necessary for the respective purposes.

Where statutory retention obligations exist, the data will be stored for the legally prescribed periods. Business letters and business communications can generally be kept for six years, and documents relevant under tax and commercial law for ten years.

After the respective retention periods have expired, the data will be deleted unless there is a further legal obligation or a legitimate interest in storing it, e.g. for the establishment, exercise or defense of legal claims.

8. Obligation to provide the data

Providing certain personal data is necessary so that we can process requests, create offers, conclude contracts and process orders.

Without the necessary data, processing the request or executing the contract may not be possible.

9. Rights of data subjects

Within the framework of the legal requirements, you have the following rights:

• Right to information pursuant to Article 15 GDPR
• Right to rectification pursuant to Article 16 GDPR
• Right to erasure pursuant to Article 17 GDPR
• Right to restriction of processing pursuant to Article 18 GDPR
• Right to data portability pursuant to Article 20 GDPR
• Right to object pursuant to Article 21 GDPR
• Right to withdraw consent pursuant to Art. 7 para. 3 GDPR
• Right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR

To exercise your rights, simply send a message to: info@komplett-konzept.de

10. Right to object

If we process personal data on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

In the event of an objection, we will no longer process the data in question unless there are compelling legitimate grounds for the processing or the processing serves the purpose of establishing, exercising or defending legal claims.