GDPR: Information

Information according to the EU General Data Protection Regulation (GDPR)

The following information is prepared for our customers as well as our suppliers, service providers and other business partners.

Information according to Art. 13 of the General Data Protection Regulation (GDPR)

Collection of Personal Data from the Data Subject

Identity of the Controller

See Legal notice.

Data Protection Officer Contact Information

You can reach the Data Protection Officer in charge at:

Data Protection Officer of the LUMEN Gesellschaft mit beschränkter Haftung, Nährmittel- und Maschinenfabrik
Petzmannsberg 11
95326 Kulmbach
Keyword Datenschutz or datenschutz(at)lumen.de.

Data Categories and Data Source

We process address, identification and contract data as well as sales figures information of our customers in connection with our business relationship with them. This also includes personal data such as names, addresses, email addresses, phone and fax numbers, date of birth, VAT IDs as well as place of birth, nationality and personal ID information.

Purpose of the Processing and Legal Basis

The purpose of the processing is the unambiguous identification of the customer as as well as the initiation, realization, management and handling of contracts, evaluation of creditworthiness and guarantees, customer service, issuing of invoices/ credit notes, management and enforcement of claims, and compliance with legal obligations. In some instances we also engage data processors. Legal basis: Art. 6 Para. 1(b) and (c) of the GDPR.

Further processing of the above-mentioned data is also undertaken in order to safeguard our own legitimate interests or those of a third party, for the purposes of enhancing our market development, for distribution analyses, sales management, calculation of commissions of our sales personnel, decision-making related to marketing and sales activities, market research, customer support, validity checks of the total sales reports, and review and settlement of conditions. Legal basis: Art. 6 Para. 1(f) of the GDPR.

Categories of Data Recipients

Group of Companies

The tasks in conjunction with the above information are performed in part centrally at IREKS GmbH as the data processor for the companies associated with IREKS GmbH within the meaning of Sect. 15 of the German Stock Corporation Act (AktG) that transmit data to IREKS GmbH for this purpose. These include for example IRUSO GmbH, LUMEN GmbH, Nährmittel- und Maschinenfabrik, J. Ruckdeschel & Söhne GmbH & Co. KG, Dreidoppel GmbH, STAMAG Stadlauer Malzfabrik GesmbH, IREKS NEDERLAND B.V., IREKS BELGIUM B.V., IREKS U.K. Ltd.

 

Other recipients

According to the GDPR, personal information can also be transmitted to third parties, for example to authorities in order to comply with legal reporting obligations.

Duration of Data Retention

We store the data for the duration of the respective business relationship with the customer and until the expiry of the limitation periods of any claims resulting from it and of the legal retention periods.

Data Protection Rights of the Data Subject

Pursuant to Art. 15 – 22 of the GDPR, where the legal preconditions are met, you have the following rights: Right of access, right to rectification, right to erasure, right to restriction of processing and right of data portability. In addition, pursuant to Art. 13 Para. 2(b) in connection with Art. 21 of the GDPR, you have the right to object to processing of your data under Art. 6. Para. 1(f).

Right to Lodge a Complaint

Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in charge of our company, if you consider that the processing of your personal data infringes the regulation.

Information according to Art. 14 of the General Data Protection Regulation (GDPR)

Collection of Personal Data not from the Data Subject

Identity of the Controller

See Legal notice.

Data Protection Officer Contact Information

You can reach the Data Protection Officer in charge at:

Datenschutzbeauftragter der LUMEN Gesellschaft mit beschränkter Haftung, Nährmittel- und Maschinenfabrik
Petzmannsberg 11
95326 Kulmbach
Keyword Datenschutz or datenschutz(at)lumen.de.

Data Categories and Data Source

We receive the information on which customers purchased which of our products in what quantities from our business partners (sales agents or distributors of products that we offer) on a regular basis or upon request. The information that is thereby transmitted is the customer master data (company / customer name, customer ID, in some instances contact information of the company) as well as sales data such as product ID, product name and quantities of the products of the respective business partner that were delivered to the customer within the time period in question. Such a transmission can also take place via the respective central offices for organized customers.

Purpose of the Processing and Legal Basis

We process the above-mentioned customer master data in order to create a verified, precise and current address data record for points of sale as basis for the data processing operations described below. These operations serve the purpose of coordinating field sales visits between us, our business partners and you as a user of our products as well as for the purposes of recording, billing and settling of agreements between the sales agent and us or the customer in conjunction with the purchase of our products or the assessment of the profitability of the business relationship. These operations are also undertaken for the purposes of enhancing our market development, for distribution analyses, sales management, calculation of commissions of our sales personnel, decision-making related to marketing and sales activities, market research and customer support, validity checks of the total sales reports, and review and settlement of conditions.

Legal basis: Art. 6 Para. 1(b) or (f) of the GDPR, because the collection, storage and processing of data is necessary for the performance of our contract with our business partners and customers. Besides, further data processing is justified pursuant to Art. 6 Para. 1(f) of the GDPR because it is necessary for the purposes of our legitimate interests or those of a third party.

Categories of Data Recipients

Group of Companies

The tasks in conjunction with the above information are performed in part centrally at IREKS GmbH as the data processor for the companies associated with IREKS GmbH within the meaning of Sect. 15 of the German Stock Corporation Act (AktG) that transmit data to IREKS GmbH for this purpose. These include for example Dreidoppel GmbH, STAMAG Stadlauer Malzfabrik GesmbH, IREKS NEDERLAND B.V., IREKS BELGIUM B.V., IREKS U.K. Ltd.

 

Other recipients

According to the GDPR, personal information can also be transmitted to third parties, for example to authorities in order to comply with legal reporting obligations.

Duration of Data Retention

We store the data for the duration of the respective business relationship with the customer and until the expiry of the limitation periods of any claims resulting from it and of the legal retention periods.

Data Protection Rights of the Data Subject

Pursuant to Art. 15 – 22 of the GDPR, where the legal preconditions are met, you have the following rights: Right of access, right to rectification, right to erasure, right to restriction of processing and right of data portability. In addition, pursuant to Art. 14 Para. 2(c) in connection with Art. 21 of the GDPR, you have the right to object to processing of your data under Art. 6. Para. 1(f).

Right to Lodge a Complaint

Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in charge of our company, if you consider that the processing of your personal data infringes the regulation.

 


Last update: May 2018