Information regarding transparency for customers, service providers and other data subjects affected by the processing of personal data
The following information provides an overview of how we process personal data and your rights under the data protection laws. The type of data processed and the manner in which the data is used depends predominantly on the basis of your contact and/or on the agreed-upon services. For this reason, not all the information below may apply to you.
1. Responsibility and contact
The controller is
TAMPICO INTERNATIONAL GmbH, Oedenberger Str. 34, 90491 Nuremberg, Germany, represented by Helmut U. Stummvoll, General Manager
Due to the size of the company it is not necessary to appoint a data protection officer.
2. Origin of data used
As part of our business activities we process personal data we receive from our customers or other data subjects including their legal representatives and from prospects or persons seeking information.
This includes personal particulars (name, contact information, address, telephone, fax, e-mail, date and place of birth, gender), data relating to orders or to our complying with our contractual obligations, promotion- and sales-related data, and/or data classified into similar categories.
In addition, we process other personal data originating in previous personal, telephone or written communications initiated by data subjects or by us including information transmitted by telephone, e-mail, fax, and/or over the Internet.
Also, we process personal data acquired legally from publicly accessible sources (trade register, press, media or the Internet) in compliance with applicable laws.
3. Purposes of and legal basis for processing personal data
We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (BDSG, Germany’s Data Protection Act) and any and all other applicable laws:
a) To prepare or perform a contract (Art. 6 1 (b) of the GDPR)
We process data to provide our services, trading and supply of foodstuff, as part of the fulfillment of our contracts with customers / suppliers or to take steps at the request of data subjects prior to entering into contracts. The purposes of our processing of personal data depend predominantly on the subject of the respective contract and may include demand analyses and consulting.
b) To pursue legitimate interests (Art. 6 1 (f) of the GDPR)
Where necessary, we process data to pursue our legitimate interests beyond the purpose of fulfilling our contracts.
Examples include:
advertising, reviewing and optimizing procedures for conducting demand analyses for addressing customers directly, asserting legal claims and the defense of legal disputes, ensuring the security of our IT system, taking measures related to the security of buildings and facilities (e.g., access controls), preventing and investigating crimes, taking measures to manage our business, and extending our services and products.
c) To comply with a legal obligation (Art. 6 1 (c) of the GDPR)
We are subject to diverse legal obligations including, but not limited to, complying with tax-related controlling and reporting obligations.
d) Based on consent (Art. 6 1 (a) of the GDPR)
If and when you consent to our processing of your personal data for specific purposes (e.g., mailing your application documents, providing your business card, consenting to the transmission of our newsletter), such processing is legal. You can revoke your consent effectively immediately; notification in this regard need not be formal.
4. Recipients of your personal data
Our company will grant access to your personal data to parties needing such data to comply with our company’s contractual and/or legal obligations. In addition, for these purposes we may provide your data to service providers and agents contracted by us if and when such service providers and agents maintain confidentiality and comply with our instructions regarding data protection.
If and when we share personal data with external parties, we comply with our obligation to keep confidential all of our customers’ and prospects’ data which comes to our attention. We may share information concerning you only if and when we are legally obligated to provide information or based on your consent. Processors contracted by us must guarantee compliance with confidentiality directives and with the provisions of the GDPR. Processors contracted by us include providers of printing services, data carrier destruction services, EDP/IT support and maintenance services, scanning services and payment services, as well as legal professionals and tax advisors.
5. Transmission of personal data to third countries / international organizations
Data is transmitted to countries which are not members of the European Union or the European Economic Area (third countries) only to the extent required to fulfill our contracts, as mandated by law (e.g., tax-related reporting obligations), when we have been provided with a consent declaration, or as part of contract-based processing. If and when required in individual cases, personal data may be transmitted to a provider of IT services in a third country to ensure the functionality of our IT operations. If and when we use service providers in a third country, they must comply with written instructions based on the agreement regarding EU standard contract clauses and with the level of data protection applicable in Europe.
6. Duration of data storage
We process and store personal data for as long as required to comply with our contractual and/or legal obligations. If and when your personal data no longer is needed to comply with our contractual or legal obligations we will erase it regularly unless we are obligated to process it further for a limited amount of time to meet our commercial- and tax-law related retention obligations as stipulated by the Handelsgesetzbuch (HGB, Commercial Code of Germany) or the Abgabenordnung (AO, Tax Code of Germany). The retention and documentation periods stipulated therein generally range from between two and ten years. In these cases, processing is restricted so that once the purpose of the processing no longer applies, only the purposes of retention specified in the laws listed above as examples can be achieved.
Furthermore, individual interests regarding data retention may override the obligation to erase such data. In these cases, processing also will be restricted so that once the purpose of the processing no longer applies, only the purposes of retention can be achieved. Examples include the retention of evidence in line with the legal statute of limitations. While under §§ 195 et seq. of the Bürgerliches Gesetzbuch (BGB, Civil Code of Germany) the statute of limitations can be up to 30 years, the regular statute of limitations is three years.
7. Data processing related to requests for information under Art. 15 of the GDPR
If you request information regarding your personal data under Art. 15 of the GDPR, we will process your personal data to comply with your request. To this end, we save your first name, last name, e-mail address and postal address. We process your personal data to meet our legal obligation as stipulated by Art. 15 of the GDPR, that is, our obligation to provide you with the information you have requested. The legal basis for this is Art. 6 1 (c) of the GDPR.
We will transmit your data to our Data Protection Officer or to an attorney we have contracted to provide us with legal consultation in this matter and jointly we will process and respond to your request for information. No other data will be transmitted to third parties in this context and no data will be transmitted to third countries.
As part of requests for information, we store personal data only as long as required to pursue the aforementioned purpose.
8. Job postings and unsolicited job applications
It is important to us that we protect personal data submitted to us as part of the job application process. The information provided below applies to job applications sent to us by mail or e-mail.
We process the personal information you provide to us in your application documents (applicant information), that is, your personal data (first and last name, date of birth, place of birth, address), communication data (telephone number, mobile phone number, e-mail address), education-related data (school, vocational training, community or military service, academic degrees), career data (certificates on education and work) and your photo so we can assess your potential for employment in our company (selection of applicants).
The legal basis on which we process your data is the consent you give us by implication when you submit your application documents (Art. 6 1 (a) of the GDPR). In addition, we process your data so we can make a decision regarding the establishment of an employment relationship based on § 26 of the amended version of the Bundesdatenschutzgesetz (Federal Data Protection Law).
We use the personal data you transmit to us exclusively to process your application for the posted vacancy. Your data only will be shared with staff members in our company who are involved in the application process. All of our staff members who are entrusted with processing data are obligated to keep all data confidential. We will not share your personal data with any third parties unless it is with your expressed previous consent or if we are obligated to do so by law and/or upon an order by an authority or court.
Your personal data will be erased automatically within four months after the specific application process has been concluded.
This rule does not apply if and when erasure is contradicted by any legal provision, if storage is necessary to uphold a line of argument, or if you expressly consented to an extended storage period.
The provision of your applicant information is voluntary. You can revoke your consent at any time. If and when you revoke your consent to the processing of your personal data, we will erase your information from our applicant database. If and when we are obligated to comply with any applicable retention periods or want to pursue legitimate interests to retain your data, we will restrict our processing of your data accordingly until your data is erased.
9. Your rights regarding data protection
Data subjects have the right to access (Art. 15 of the GDPR), rectify (Art. 16 of the GDPR), erase (Art. 17 of the GDPR), restrict the processing of (Art. 18 of the GDPR), object to the processing of (Art. 21 of the GDPR), and to the portability of (Art. 20 of the GDPR) their personal data. If and when you opt to exercise any of these rights, we will investigate whether the pertinent legal requirements have been met. In addition, data subjects have the right to file complaints with the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Department for Data Protection Supervision).
You can revoke your consent to our processing of your personal data at any time. The same applies to declarations of consent made vis-à-vis us before the GDPR came into force, that is, prior to May 25, 2018. Please note that such revocation applies to the future only. Any processing carried out before you submit your revocation will not be affected.
10. Obligation to provide your personal data
As part of your business relationship with us, you must provide us with the personal data required to establish, fulfill and terminate our business relationship and to meet the obligations connected therewith or obligations we are mandated by law to meet. In most instances, without the required personal data we are unable to enter into, fulfill, or terminate contracts.
11. Final provisions
Our business operations are conditional on the capturing and processing of data and where data is captured and processed, it must be protected and secured. For us, this is not only a legal obligation, it is a vested concern.
Please contact us at any time if you require information not included in this document or if you wish to receive more information. Our contact information is stated above.
Information regarding your right to object pursuant to Art. 21 of the GDPR
Right to object in individual cases
You have the right to object to our processing of your personal data on grounds relating to your particular situation at any time based on Art. 6 para. 1 (f) of the GDPR (data processing based on a balancing of interests).
If you object, we no longer will process your personal data unless we can prove compelling, legitimate reasons to do so that override your interests, rights and freedoms or if our processing of your personal data serves to assert, exercise or defend legal claims.
Right to object to the processing of personal data for purposes of direct marketing
In individual cases we process personal data for purposes of direct marketing. You have the right to object to your personal data being processed for these purposes at any time.
If you object to the processing of your personal data for purposes of direct marketing, we no longer will do so.
Recipient of your objections
You can send an informal notification of objection with the word Objection in the subject line and with your name and address to
TAMPICO INTERNATIONAL GmbH, Oedenberger Str. 34, 90491 Nuremberg, Germany, represented by Helmut U. Stummvoll, General Manager