Data protection information

Thank you for your interest in our company. Protecting and safeguarding your privacy is a high priority for us. We would therefore like to take this opportunity to inform you about how we process your personal data. It is understood that we comply with the legal provisions of the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act  (BDSG), the German Telecommunications and Telemedia Data Protection Act  (TTDSG) and other data protection regulations.

Please note the explanations/definitions of terms at the end of the text.

The terms used in the data protection information, insofar as they are defined in the GDPR, are used in accordance with the definition given there.

If the processing of personal data is not absolutely necessary, we respect the freedom of individuals to decide for themselves whether they wish to provide personal information. We do not use techniques to (secretly) identify you or create personal profiles!

We only collect personal data to a limited extent and where necessary for

• Provision of our services,
• Contract execution (including initiation, conclusion, fulfilment and termination of a contract),
• Processing and answering enquiries (contact forms),
• To safeguard our business,
• To improve our offer,
• To prevent, detect and investigate potentially prohibited or illegal activities and to enforce our Terms and Conditions.

So that you can be fully familiar with our processing of your personal data, we have endeavoured to compile this information as comprehensively and clearly as possible. We would like to assure you that we make every technical and organisational effort to protect your data.

1 Responsible party, data protection officer

The person responsible is:
DSD Steel Group GmbH

Henry-Ford-Straße 110, 66740 Saarlouis, Germany
Phone: +49 6831 18-0, e-mail: info@dsd-steel.com

Contact details data protection officer:

DSD Steel Group GmbH
for the attention of the Data Protection Officer
Henry-Ford-Strasse 110, 66740 Saarlouis, Germany

or by e-mail to: dsb[at]dsd-steel.com

Reporting centre for the event or suspicion of data protection incidents:
E-mail: datenschutz(at)dsd-steel.com

2 Preamble, summary

We only process personal data if the processing is necessary (e.g. to provide our services) and if we are legally permitted to do so. Personal data will be deleted as soon as possible and will never be used or passed on for advertising purposes without legal grounds, in particular your consent.

If you do not find the information here sufficient or understandable, please do not hesitate to contact our data protection team.

E-mail contact to the data protection team: datenschutz(at)dsd-steel.com

3 Protection of personal data

Personal data such as name, address, telephone number, e-mail address or other individual details are stored securely by us. This also means that the persons who come into contact with such data are obliged and instructed in data protection. Personal data that does not have to be published by law or contract is treated confidentially. Confidential data will only be passed on to third parties if

• such is necessary for the performance of agreed services or
• it has been expressly authorised in advance or
• we are legally obliged to do so.

4 General purpose and scope of processing

Personal data is collected sparingly and for a specific purpose.

We process personal data in order to

• to get in touch with the persons concerned;
• initiating, implementing, handling and enforcing contracts;
• legal or statutory obligations;
• to defend itself against claims arising from infringements of (intellectual property) rights and to ward off dangers;
• to prevent the unlawful or improper use of our website and to take action against it;
• to optimise our offer or adapt it to user requirements, and
• if necessary, about changes, improvements, innovations to the range of services or events,

if and as long as we are authorised to do so.

Personal data will only be processed for the intended purpose. We will only use data for other purposes or link it to other data if you have given us your prior consent or if there is another legal basis for doing so.

5 Data security

We have taken technical and organisational measures to ensure that our data processing systems are protected against unauthorised access. Personal data is also protected against unauthorised access by third parties.

Various security measures are used to protect data against loss, misuse and manipulation. If you have any questions, please contact our data protection team.

E-mail contact to the data protection team: datenschutz(at)dsd-steel.com

6 Data modification and deletion; processing duration

Incorrect or invalid data can be changed at any time.

Within the framework of the applicable legal provisions, you have the right to change, delete or restrict (block) the processing of your personal data stored by us at any time. If there is no legal obligation or legal requirement to the contrary, data to be deleted will be deleted, otherwise blocked.

If personal data is no longer required for the purposes for which it was collected, it will be deleted by us, unless statutory retention obligations prevent this, otherwise it will be blocked (unless you have expressly consented to a different type of use).

We carry out regular data backups; data is therefore only completely deleted with the next data backup.

Data that has been blocked instead of deleted can only be accessed within the framework of the regulations that made blocking necessary (i.e. if data may not be deleted due to a tax retention period, for example, the blocked data may only be used for this tax purpose).

7 Rights of data subjects

You have the following rights as a "data subject" whose data we process:

• Right to information  in accordance with Article 15 i. in conjunction with Article 12 (5) and (6) GDPR,
• Right to rectification  in accordance with Article 16 GDPR,
• Right to erasure  ("being forgotten") in accordance with Article 17 GDPR,
• Right to restriction of processing  in accordance with Article 18 GDPR,
• Right to data portability in accordance with Article 20 GDPR and

the following rights (cancellation, objection, complaint).

Right to withdraw consent : If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time in accordance with Article 7 (3) GDPR. Upon receipt of your revocation, we will cease data processing for the purposes for which you had given us your consent. The lawfulness of the processing prior to receipt of your revocation remains unaffected.

Right to object  (Article 21 GDPR): If we process your personal data in accordance with Article 6  (1) e) or f) GDPR, you have the right to object to this processing on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons. To exercise your right to object, simply send us an informal message stating which data processing you object to and, if applicable, the reasons for your objection.

Please address requests for information, cancellation and objection declarations to:

DSD Steel Group GmbH

Henry-Ford-Strasse 110, 66740 Saarlouis, Germany
Phone: +49 6831 18-0, e-mail: datenschutz(at)dsd-steel.com

No fees other than those of the basic tariffs are charged for exercising the right of cancellation or objection by telephone.

Right to lodge a complaint: In the event of complaints, data protection violations or if you are of the opinion that the processing of your personal data violates applicable law, you can contact the specialist department(s), the management, our data protection officer (see section 1 above) or our data protection team at any time:

E-mail: datenschutz(at)dsd-steel.com

We will respond to your request as quickly as possible. Of course, you also have the option of lodging a complaint with a supervisory authority in accordance with Article 77 GDPR. The supervisory authority responsible for us is

Independent Data Protection Centre Saarland
The State Commissioner for Data Protection and Freedom of Information
Fritz-Dobisch-Strasse 12, 66111 Saarbrücken, Germany
Internet: https://www.datenschutz.saarland.de/

8 Automated decision-making

We do not carry out automated decision-making, including profiling, with your personal data.

However, we use so-called spam or junk filters in electronic communication to protect our systems. These filters use information such as sender, time, content, character set and origin to automatically filter out unwanted emails.

In this context, we process personal data on the basis of Article 6 (1) f) GDPR in order to protect ourselves against spam, fraudulent or malicious activities, such as phishing, or similar and, if necessary, to take action against them, which is also our legitimate interest.

If you have the feeling that your e-mails have not arrived or have been rejected, please contact us via another communication channel (telephone, fax or letter).

9 Changes to our data protection information

We reserve the right to adapt the respective data protection information so that it complies with current legal requirements or to describe changes to our services, e.g. when introducing new services. The current data protection information, which we have published here, always applies: https://www.dsd-steel.com/en/datenschutz.

10 Information for specific processing operations

A    Data protection information for the use of this website

B    Data protection information for communication with us

C    Data protection information for employees and the application process

D    Data protection information for the use of our social media presence

E    Data protection information for whistleblowers in accordance with the Whistleblower Protection Act

Questions about data protection

If you have any questions about data protection or believe that your data is not being processed correctly, please send us an e-mail to datenschutz(at)dsd-steel.com or contact our data protection officer directly (see above for contact details).

We will respond to your enquiry as quickly as possible.

Terms

DS-GVO
Regulation (EU) 2016/79 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation )

Third
a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller [...], are authorised to process personal data; (Article 4(10) of the GDPR)

Third country
a country (state) outside the EEA

Receiver
a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. [...]; (Article 4(9) of the GDPR)

EU
European Union

EEA
European Economic Area: EU, Iceland, Liechtenstein and Norway

international organisation
an international organisation [...] or any other body set up by an agreement concluded between two or more countries [...]; (Article 4(26) of the GDPR)

Personal data
any information relating to an identified or identifiable natural person [...] [...]; (Article 4(1) of the GDPR)

Profiling
any form of automated processing of personal data consisting of the use of personal data [...] to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements; (Article 4(4) of the GDPR)

Person responsible
the [...] legal person [...] who alone or jointly with others determines the purposes and means of the processing of personal data [...]; (Article 4(7) of the GDPR)

Status of the data protection information: April 2024