General Information for the Data Subjects About the Collection of Data from Customers, Potential Customers, Service Providers or Suppliers

Responsible Person

dSPACE GmbH, Rathenaustraße 26, 33102 Paderborn, (Germany)

+49 5251 1638-0, info@dspace.de, https://www.dspace.com

Legal representatives
Carsten Hoff

Data protection supervisor
Matthias Schütz, phone: +49 331 971899-61, e-mail: datenschutz@dspace.de

Information About the Data Processing

Aim of the Data Processing
We are processing your data, which is partially personal, to initiate, conduct, and conclude business, to prepare quotations and issue invoices, and to contact and inform customers as part of customer care efforts.

Legal Basis for the Data Processing
The processing is necessary in order to take steps prior to entering into a contract according to Art. 6 section 1 point (b) of the GDPR or for the purposes of the legitimate interests pursued by the controller according to Art. 6 section 1 point (f) of the GDPR, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Categories of Recipients
Internal recipients are Consulting, Contract Management, Accounting, Controlling, and Back Office. Furthermore, we use service providers (people involved in order processing) to fulfill our tasks, such as IT service providers and hosting service providers, and we transfer data to authorities or courts as part of our legal obligations.

Provider (data processor)
AEB Sanktions-/Compliance-Screening, Stuttgart
Dun&Bradstreet Deutschland GmbH, Darmstadt
Performance of credit checks to clarify payment terms prior to signing contracts with new customers.
The check is carried out only if justified in individual cases.

Data Transfer to a Third Country
We have no intention to transfer data to a third country.

Additional Obligations to Provide Information

Duration for which Personal Data is Stored
Personal data is stored according to the legal regulations, in particular, § 147 AO (German Tax Code, 10 years) and § 257 HGB (German Commercial Code, 6 years). Personal data is deleted as soon as the purpose for which it was collected no longer exists and if there is no obligation to store this data.

Rights of the Data Subjects
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her is being processed and which data is concerned (according to Art. 15 of the GDPR). This also includes the right to obtain from the controller the rectification of inaccurate personal data (Art. 16 of the GDPR), erasure of personal data (Art. 17 of the GDPR), and the right to obtain from the controller a restriction of processing personal data (Art. 18 section 1 of the GDPR). Furthermore, you have the right to object to the processing of personal data (Art. 21 of the GDPR) as well as a right to data portability (Art. 20 of the GDPR)

If you want to make use of these stated rights, contact our data protection supervisor or our office in Paderborn.

Right of Appeal
You have a right of appeal that must be directed to the responsible regulatory authority.

Obligation to Provide Personal Data
The data subject is obliged partially by law or by contract to provide personal data or the provision of personal data that is necessary to conclude a contract or to provide customer care, and communication. The data subject is then required to provide personal data.

Not providing this data results in a failure to conclude the contract or makes communication impossible.

Automated Decision
We do not apply automated decision taking or profiling.

More Information

You can contact our data protection supervisor or our office in Paderborn to request more information about the processing of personal data or you can personally read the information at one of our offices.