Information in accordance with Art. 13 GDPR

1. Information in accordance with Art. 13 GDPR

1.1. Name of the processing activity

This data protection notice occurs in connection with the processing resulting from the promotion, distribution and implementation of our business activities (manufacture, distribution, delivery of confectionery).

1.2. Name and contact details of the person responsible

Hitschler International GmbH & Co. KG, An der Hasenkaule 10, 50354 Hürth, e-mail: info@hitschler.de, Tel.: 0221 46016-53 is responsible for data collection

1.3. Contact details of the data protection officer

is the data protection officer
Dr. iur. Andreas Pinheiro, LL.M.
Berrenrather Str. 274, 50937 Cologne
Company ap data protection

1.4. Origin of personal data

hitschler International GmbH & Co. KG processes personal data that it receives from you as part of its business relationship.

In addition, hitschler International GmbH & Co. KG processes personal data that it has legitimately obtained and is permitted to process from publicly accessible sources (e.g. commercial and association registers, press, media).

1.5. Purposes and legal basis of processing

1.5.1. The following categories of data are processed:

• Personal details (name, address, telephone number, email, date of birth)
• Order data (e.g. delivery order),
• Payment details
• Data from the fulfillment of our contractual obligation (e.g. [])
• Advertising and sales data
• Supplier data (e.g. external DL)

1.5.2. Purposes and legal basis of processing

hitschler International GmbH & Co. KG processes personal data (Art. 4 Para. 2 GDPR) on the basis of Art. 6 Para. 1 Sentence 1 Letter b GDPR. The processing serves to carry out our contracts or pre-contractual measures with you and to carry out your order, as well as all activities necessary for the operation and management of our food business. The relevant details regarding the purpose of data processing can be found in the respective contract documents and terms and conditions.

In addition to the actual fulfillment of the contract, hitschler International GmbH & Co. KG processes personal data in accordance with Art. 6 Para. 1 Sentence 1 Letter f GDPR. This is permitted to the extent that the processing is necessary to protect our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms which require the protection of personal data do not outweigh these. Such a legitimate interest exists in

1. Carrying out payment processing via external service providers
2. Assertion of legal claims and defense in legal disputes
3. To advertise your own products within the permitted legal framework (e.g. advertising to existing customers or recommendation advertising (flyers) that is not relevant under data protection law)
4. Ensuring the company's IT security and IT operations
5. To prevent and investigate crimes, in particular we use data analyzes to identify evidence of fraud or misuse.

In addition, hitschler International GmbH & Co. KG processes personal data in accordance with Article 6 Paragraph 1 Letter c of the GDPR to the extent that this is necessary for the fulfillment of legal obligations to which it is subject as a company. The purposes of processing include, for example, commercial and tax retention obligations in accordance with Section 257 of the Commercial Code (HGB) and Section 147 of the Tax Code (AO).

1.5.3. Purposes and legal bases of processing (video conferences (VKS))

If you have given hitschler International GmbH & Co. KG your consent to process your personal data for participation in a separate seminar, web seminar or VK, the lawfulness of this processing is based on your consent (Art. 6 Para. 1 S . 1 letter a GDPR). Consent given can be revoked at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

hitschler International GmbH & Co. KG processes personal data (Art. 4 Para. 2 GDPR) on the basis of Art. 6 Para. 1 Sentence 1 Letter b GDPR. The processing serves to carry out our contracts or pre-contractual measures with you and to carry out your order, as well as all activities necessary for the operation and management of our company. In this case, the implementation of the seminar, VK or training is part of a contract concluded with you, which we thereby fulfill. The relevant details regarding the purpose of data processing can be found in the respective contract documents and terms and conditions.

1.5.4. Processing of your data during video conferences (VKS)

You can register for the web seminar, seminar or VK by emailing us, leaving your name and email. We verify your identity via a personal query via email.

You will then receive a personal invitation link from us to your email inbox. At the time of the event, you can participate in the event in the web application by clicking on the link. Your email address is also visible to other participants. However, the address is not used for any other purpose. As the organizer, we will only invite you into the waiting area if your booking has been confirmed.

The traffic data (email address, if applicable name or pseudonym) is always transmitted to the VKS platform. This is used to identify the participant. In this regard, we rely on our legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

The content data (conversations, video recordings) are stored [encrypted only] on the VKS operator's servers. If the transmission is fully encrypted, no transfer takes place. Furthermore, we also refer to our legitimate interest in a functioning IT landscape, as long as the VKS provider provides suitable guarantees to protect the data.

The event takes place via the Teams service (Microsoft Deutschland GmbH, a subsidiary of Microsoft Inc.). In this regard, we refer to the data protection declaration of our IT service provider.

https://www.microsoftvolumelicensing.com/Downloader.aspx?DocumentId=17880

1.6. Recipients or categories of recipients of the personal data

Within hitschler International GmbH & Co. KG, those departments that need it to fulfill the contractual and legal obligations of hitschler International GmbH & Co. KG have access to your data. Processors employed by hitschler International GmbH & Co. KG (Article 28 GDPR) may also receive data for these purposes.

Recipients in the following categories will receive your data:

• IT services (e.g. hosting our email account)
• Logistics (e.g. to ensure the storage and delivery of our goods)
• Sales and marketing (e.g. when creating marketing campaigns in the case of recruiting existing customers)
• Courts, bailiffs and authorities (e.g. when applying for a payment order (court) or when enforcing an enforceable title (bailiff))
• Lawyers (e.g. to assert one's own claims or to defend against third-party claims or lawsuits)
• Tax advisor (in the case of tax advice or preparation of annual financial statements)

1.7. Transfer of personal data to a third country

It is planned to transfer your personal data to Microsoft, a company whose parent company is based in the USA. It cannot be ruled out that the mother may have access to your data.

There is no adequacy decision from the EU Commission for the level of data protection in the USA.

hitschler International GmbH & Co. KG has additional suitable or appropriate guarantees for the intended data transfers to third countries in the form of contracts with SDKs (standard data protection clauses) in accordance with Art. 26 GDPR. Microsoft guarantees that data will not be passed on to authorities without exhausting legal recourse. More information is available here: https://www.microsoftvolumelicensing.com/Downloader.aspx?DocumentId=17880

1.8. Duration of storage of personal data

We delete your personal data as soon as they are no longer required for the purposes mentioned above. It may happen that data is stored for the period in which legal claims are asserted against us (regular statutory limitation period 3 years § 195 BGB, up to 30 years § 197 BGB).

We also store your data to the extent we are legally obliged to do so. We are subject to corresponding proof and retention obligations:

• the tax code: 10 years for tax purposes (§ 147 AO) (e.g. customer data and billing data for tax purposes)
• the requirements of Section 257 of the German Commercial Code (HGB): 6 years for documentation in accordance with commercial law requirements (e.g. documents and emails or order and order documents in communication)

1.9. Rights of those affected

According to the General Data Protection Regulation you have the following rights:

If your personal data is processed, you have this Right information to receive information about the data stored about you (Art. 15 GDPR).

If incorrect personal data is processed, you are responsible Right to rectification to (Art. 16 GDPR).

If the legal requirements are met, you can Deletion or restriction of processing demand as well contradiction object to the processing (Articles 17, 18 and 21 GDPR).

If you have consented to the data processing or there is a contract for data processing and the data processing is carried out using automated procedures, you may be entitled to this Right to data portability to (Art. 20 GDPR).

If you make use of your rights mentioned above, the responsible body will check whether the legal requirements for this are met.

If you believe that data processing violates applicable data protection law, you have this Right to complain to a data protection supervisory authority . You can reach the supervisory authority responsible for our company using the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, PO Box 20 24 44, 40102 Düsseldorf

1.10. Obligation to provide data

In order to conclude the contract [please add a reference to the contract and, if necessary, additional legal regulations], it is necessary that you provide [list of personal data] to hitschler International GmbH & Co. KG.

Without this data, hitschler International GmbH & Co. KG will generally have to refuse to conclude the contract or will no longer be able to carry out an existing contract and may have to terminate it.

1.11. Special case: Obligation to provide information in the event of a later change of purpose

No change of purpose

1.12. Indication of the existence of an automatic decision including profiling

hitschler International GmbH & Co. KG processes your data automatically with the help of third parties (such as Shopify and Google Analytics) with the aim of evaluating certain personal aspects (profiling). We use profiling in the following cases:

- In order to be able to provide you with targeted information and advice about products, we use evaluation tools. These enable needs-based communication and advertising, including market and opinion research]

2. Information about your right to object according to Art. 21 GDPR

1. For reasons arising from your particular situation, you have the right at any time to object to the processing of personal data concerning you, which is carried out on the basis of Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR (data processing based on a balance of interests). to lodge an objection. This also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR, which hitschler International GmbH & Co. KG used for advertising purposes.

If you file an objection, the hitschler International GmbH & Co. KG We will no longer process your personal data unless hitschler International GmbH & Co. KG can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. In individual cases the hitschler International GmbH & Co. KG Your personal data to conduct direct advertising. You have the right to object at any time to the processing of data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. If you object to the processing for direct advertising purposes, this will be done hitschler International GmbH & Co. KG no longer process your personal data for these purposes.

The objection can be made informally and should, if possible, be directed

will be sent to:

hitschler International GmbH & Co. KG, An der Hasenkaule 10, 50354 Hürth, info@hitschler.de, 0221 46016-53