Klarstein.com

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within the context of email correspondence with Chal-Tec GmbH.

1. Name and Contact Details of Controller

The responsible party ("Controller") under data protection law (GDPR) is:

2. Contact Details of Data Protection Officer

You can reach our Data Protection Officer at:

3. Processing of Personal Data in Email Communication

3.1 Scope of Data Collection

When you contact us via email, we collect and process the personal data you voluntarily provide. This includes:

• Contact information (e.g., email address, phone number, physical address)
• Identification data (e.g., full name, company name, position)
• Content of the email message and any attached files/documents
• MetaData automatically generated during email transmission (e.g., IP address, date and time of sending)

3.2 Purpose of Processing

We process this data exclusively for the following purposes:

• To handle, process, and respond to your inquiry or communication
• For the preparation, implementation, or execution of business relationships or contracts
• To maintain administrative and business operations

4. Legal Basis for Processing

The legal basis for processing your personal data in email correspondence depends on the nature of the contact:

• Pre-contractual measures or contractual fulfillment: Art. 6 (1) lit. b GDPR (if the communication relates to negotiating or executing a contract).
• Legitimate interests: Art. 6 (1) lit. f GDPR (our legitimate interest in effectively communicating with prospective partners, customers, and business contacts).
• Legal obligation: Art. 6 (1) lit. c GDPR (if commercial or tax laws require retention of business correspondence).

5. Recipients of Personal Data

Within our organization, only authorized personnel who require your data to process your communication will have access to it. We may share data with external service providers (e.g., IT service providers, email hosting providers) acting strictly as data processors under controller-processor agreements compliant with Art. 28 GDPR.

6. Duration of Storage and Erasure

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected:

• General inquiries are erased once the respective conversation has ended and no further follow-up is anticipated.
• Emails subject to legal archiving obligations (e.g., commercial or tax law under German HGB/AO) will be retained for the mandatory statutory periods (typically 6 to 10 years).

7. Your Rights as a Data Subject

If the statutory requirements are met, you have the following rights regarding your personal data stored by us:

• Right of access (Art. 15 GDPR): Request confirmation and information about processed data.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): Request restricted processing under certain conditions.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): Object at any time to data processing based on legitimate interests.
• Right to withdraw consent (Art. 7 (3) GDPR): Revoke consent at any time for future processing.

You also have the right to lodge a complaint with a supervisory authority. For Chal-Tec GmbH, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).