Information on the collection and processing of personal data
Sungas s.à.r.l. (SUNGAS) would like to inform you as its customer in the following data protection declaration to what extent data is collected in connection with the conclusion and execution of the contract and for what purpose this data is used.
Furthermore, SUNGAS would like to show you the rights to which you are entitled in this context.
You have a contractual relationship with the
5-7 op Tomm
Tel: 00 352 789 964
What is personal data?
Personal data is any information relating to an identified or identifiable natural person. Personal data in connection with the execution of a contract are for example your name, your date of birth, your address, your telephone number or your e-mail address.
Who is responsible for processing your personal data?
The person responsible within the meaning of Article 4 No. 7 General Data Protection Regulation (GDPR) is SUNGAS, with whom you have established a contractual relationship and to whom you have made personal data available in the course of concluding the contract to process the contract.
What data do we collect and process?
In connection with the conclusion of the contract, we collect the following personal data (if available):
- Your gender (man/woman)
- Your first and last name
- Your date of birth
- Your address (street, postcode, city)
- Your phone number
- Your e-mail address
- Your bank details (depending on payment method)
- the address at which the contract is to be executed (liquid gas supply/maintenance)
- the container number of your liquified petroleum gas tank
What do we use the collected data for?
We use the data exclusively for the processing of the contractual relationship concluded with us. This includes all related processes, in particular the delivery of liquid gas, maintenance of the liquid gas system including liquid gas containers, invoicing and payment processing.
Do we pass on the collected data?
In those cases in which cooperation with third parties is necessary to fulfil SUNGAS' contractual obligations, we will pass on your personal data to the extent necessary. Insofar as these third parties are not independent persons in charge within the meaning of GDPR, this is referred to as order processing. When processing an order, SUNGAS, as the responsible party and customer, commissions another agency to carry out certain data processing procedures which SUNGAS would otherwise carry out itself. According to Art. 4 No. 2 GDPR, the "processing" must be interpreted widely and goes beyond the wording. This includes numerous actions in the handling of data, e.g. the collection, sorting or use of data.
However, the customer, i.e. SUNGAS, retains full data protection responsibility for the handling of your personal data in the external relationship, i.e. in relation to you. In this case, SUNGAS therefore remains the addressee of all rights affected (see below) and thus your contact person.
- Shipping companies and liquid gas suppliers, who need your personal data for the delivery of liquid gas or accessories, such as liquid gas tanks, etc. and process them within the scope of the preparation of your tour planning.
- IT service providers who may have access to your data, e.g. as part of maintenance procedures for the software and hardware used by SUNGAS.
- Credit agencies/collection service providers who receive your data in order to check your creditworthiness prior to conclusion of the contract for payment on account or to collect outstanding receivables, if you have not settled these despite a reminder from SUNGAS.
- SUNGAS service partners such as, for example, installers who are commissioned by SUNGAS to look after the installation of your liquid gas system on site. They require the personal data for the planning and processing of orders placed by SUNGAS.
- Other service providers (e.g. lawyers, tax consultants, auditors, commercial enterprises), insofar as the transfer is necessary for the execution of the services.
- Public authorities, e.g. tax offices, supervisory and regulatory authorities, insofar as we are legally obliged to do so or this is necessary for the execution of the contract concluded with you.
In order to safeguard your rights, we conclude the contract processing agreement provided for in Art. 28 GDPR with all contract processors.
In addition, your payment data will be transmitted to the relevant payment service provider, depending on the means of payment you have selected. The payment service provider is responsible for your payment data. You can obtain information in particular about the responsible office of the payment service providers.
What is the legal basis for collection and processing?
As we use the data exclusively for the purpose of processing the contractual relationship, we base the collection and processing on the legal basis of Article 6 Paragraph 1 lit. b) GDPR. If you agree to the use of your e-mail address to send a newsletter or product and service-related information, the processing is based on Article 6 paragraph 1 lit. a) GDPR.
How long do we store your data?
Your data will be collected with the conclusion of the contract via the contract form. We store your data for as long as is necessary for the complete processing of the contractual relationship (usually for a period of 10 years). Retention periods may result from mandatory statutory provisions (e.g. 10 years for invoices and correspondence from the contractual relationship), or from the requirement of proof even after the exchange of services has taken place due to statutory warranty periods, as well as limitation periods. After the discontinuation of the processing purpose (complete processing of the contract and fulfilment of the proof requirement) or expiry of the statutory retention periods, we will delete your data unsolicited.
What rights do you have?
Your rights as a person concerned result from chapter III of the GDPR. In particular, you have the following rights:
- You can demand in the extent of the art. 15 GDPR information from the responsible person about the kind and the extent of the raised, processed and stored personal data. Furthermore you have a requirement on communication of the information designated in art. 15 GDPR, in particular over the existence of a right of complaint with a supervisory authority and the duration of the storage.
- You may request the responsible person to rectify the personal data concerning you, whether incorrect or incomplete, art. 16 GDPR.
- Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data by the person responsible.
- Under the conditions of Art. 18 GDPR, you may request the person responsible to restrict the processing of your personal data.
- Under the conditions of Art. 20 GDPR, you may request the person responsible to transfer your personal data to another person responsible.
- Under the conditions of Art. 21 GDPR, you may object to the processing of your personal data.
Where can I assert my claims?
The addressee of the claims is the person responsible, i.e. SUNGAS. You can assert your claims using the e-mail address below.
Where can I exercise my right to appeal?
You can assert your right of appeal with the competent supervisory authority. The competent supervisory authority is the National Data Protection Commission. Contact information (as at 03/2019) can be found at https://cnpd.public.lu/de/particuliers/faire-valoir.html.hr. Kontaktinformationen (Stand 03/2019) finden Sie unter https://cnpd.public.lu/de/particuliers/faire-valoir.html.
What would be the consequences if you did not provide the requested personal data?
You are, of course, free not to disclose the personal data requested when the contract was concluded. In this case, however, we would like to point out that, in accordance with the principle of data economy, the information requested is limited to that which is necessary to fulfil the contractual relationship. Therefore, please understand that if you do not provide us with the requested personal data, it is not possible to conclude a contract with us.Who is the responsible data protection officer?
The SUNGAS data protection officer is
Kai Wiesemann SecurCon GmbH & Co. KG Ludwigstraße 12 58638 Iserlohn Tel +49 23 71 - 21 96 531 Fax +49 23 71 - 21 96 532 E-Mail: firstname.lastname@example.org https://securcon.de/