DATA PROTECTION
Die Griffel & Co GmbH, Forsmannstr. 8 b, 22303 Hamburg, jg@griffel-co.com ("we", "our", "us") takes the protection of personal data (hereinafter also "data") very seriously. Of course, we comply with all legal provisions, in particular the European General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG).
1.DATA PROCESSING AT GRIFFEL & CO GmbH
When providing our services under an agency agreement, we may collect and process personal information about you, your customers and employees. In particular, these are contact details (including, inter alia, address, E-mail address and telephone number), contract data as well as invoice and payment data. The processing of this data is required to execute the contract between us. The legal basis is Art. 6 para. 1 lit. b DS-GMO.
If we perform certain services for you, such as acting as External Press Office for you, we may transfer your employees' personal information, their role as contact persons, or third parties to journalists or other members of the press. We have a legitimate interest in performing the tasks assigned to us in the best possible way and in providing the services agreed with you. In each case, we make a balance of interests and decide whether processing of personal data based on Art. 6 para. 1 lit. f DS-GMO is allowed.
We only pass on personal data to recipients as far as this is necessary in the context of the agency contract. Typically, the recipients are editorial staff, individual journalists and other press representatives. We also use various IT and administrative service providers who can come into contact with the data. These service providers process your data exclusively according to our instructions and not for our own purposes. If data is processed in a third country, this is done on the basis of appropriate security measures in accordance with statutory provisions.
If you provide us with personal data that we are to process for you on behalf of you, then we kindly ask you to inform us accordingly, so that we may be able to conclude a contract processing agreement with you.
We store your data and the data of third parties provided by you only as long as necessary for the execution of the agency contract or on the basis of our legitimate interests. Insofar as a statutory retention obligation exists (for example, the six- or ten-year retention period for tax-relevant or tax-relevant documents and subordinates pursuant to § 257 HGB and § 147 AO), we store the data concerned to fulfil the statutory obligation for the prescribed duration.
2.YOUR RIGHTS TO PRIVACY
As a person affected by data processing, you have the following rights under the DS-GVO, which you can assert to us at any time
- Right to information (Article 15 of the GDPR): This is the right to clear, transparent and easily understandable information on whether and, if so, what data we process about you
- Right to rectification (Art. 16 DS-GVO): You have the right to rectify information that is no longer relevant to you without delay and to demand the completion of your incomplete personal data. If required by law, we will also inform third parties of this correction if we have provided data to them.
- Right to Deletion (Article 17 GDPR): This is also known as the "Right to be forgotten" and allows you to request the deletion, erasure or removal of certain information we have stored about you by contacting us. This right is not absolute and only applies in certain circumstances.
- Right to Restrict Processing (Art. 18 GDPR): This is also known as the "Right to restrict", and gives you the right to restrict the processing of your personal data in certain circumstances by contacting us. It’s an alternative to requesting the erasure of data. This right is not absolute and only applies in certain circumstances
- Right to Data Transferability (Art. 20 DS-GVO): You have the right to receive your personal data in an accessible and transferable format so that you can reuse it for your own purposes with third parties. However, this is not an absolute right and there are exceptions.
- Right to Data Transferability (Art. 20 DS-GVO): You have the right to receive your personal data in an accessible and transferable format so that you can reuse it for your own purposes with third parties. However, this is not an absolute right and there are exceptions.
If you do not agree with how we process your data, you also have a right of appeal to a competent supervisory authority (article 77 DS-GVO). In particular, the Hamburg Commissioner for Data Protection and Freedom of Information is responsible
Right to object to the processing (Article 21 DS-GVO)You also have the right to object to data processing, provided that the processing of your data on the basis of a balance of interests (Article 6 (1) f DS-GVO) takes place