Contact data storage

Information of the persons affected
(interested parties, customers, service providers, partners, intermediaries and suppliers) in the case of direct collection and data storage (Art. 13/14 GDPR)

Responsible person:

ERSAsoft GmbH, Krokusstr. 33, 82216 Maisach (Germany)
+49 (0) 8141 509 123-00, , www.ersasoft.de

Legal representative:

Rüdiger Specht, Tel: +49 (0) 8141 509 123-00, E-Mail:

Contact person for data protection:

Rüdiger Specht, Tel: +49 (0) 8141 509 123-00, E-Mail:

We would like to point out that no data protection officer must be appointed.

Information on processing activity

Type of data:

Contact data from research and publicly accessible sources, by using the contact form on the website, contacting by mail/telephone, data from trade fair contacts and business cards provided as well as recommendations.

Purposes of the processing activity:

Storage of prospective customer/supplier/customer information.
Establishing contact with the persons concerned in the area of B2B sales of products and services, for the provision of services as well as the marketing and sale of our own services and commissions in our own business areas.
Sending information to customers and interested parties about pre-contractual measures, services, products or the company and its employees.
Preparation and dispatch of offers and project data.

Legal basis of the processing activity:

• Based on your consent (Article 6 para. 1 s. 1 lit. a GDPR)
  If you have given us your consent to process personal data for certain purposes (e.g. passing on data within the association/company), the lawfulness of this processing is given on the basis of your consent.
• For the fulfilment of contracts and pre-contractual measures (Article 6 para. 1 s. 1 lit. b GDPR)
  The processing of personal data is carried out for the provision of services within the framework of the execution of our contracts with our customers or for the implementation of pre-contractual measures.
• Due to legal obligations (Article 6 para. 1 s. 1 lit. c GDPR) or public interest (Article 6 para. 1 s. 1 lit. e GDPR)
• As part of the balancing of interests (Article 6 para. 1 s. 1 lit. f GDPR)
  The processing is necessary to safeguard the legitimate interest of the person responsible or a third party pursuant to Article 6 para. 1 s. 1 lit. f GDPR and no interests or fundamental rights and freedoms of the person affected prevail (e.g. for advertising own products and/or services).

Source of personal data:

The respective responsible person processes personal data which he receives from you within the scope of the respective contractual relationship, contact forms and questionnaires (direct survey – Article 13 GDPR).
In addition, he processes personal data which he was permitted to obtain from publicly accessible sources (company directories, commercial register, Internet, press, social networks, notices, events and fairs or personal conversations and recommendations) (no direct survey – Article 14 GDPR).

Categories of recipients:

Internal (Sales, administration, management, logistics, ordering, order processing, further departments if necessary)

Categories of data:

B2B contact data (name, title, first name, telephone, fax, mobile phone, Internet address, e-mail, position, company, company address, number of employees, industry, type of customer, telephone (company), fax (company), contact history, consent, mailing list, offers and transactions, meeting reports).
In the case of suppliers: payment information, if applicable.
In the case of customers: contract data.

Data transfer to a third country:

A transfer to third countries outside the EU does not take place and is not planned.

Additional information obligations:

Personal data will be deleted if they are no longer required for contract fulfilment or contract initiation or if we no longer have a legitimate interest in storing them, or if you have consented to storage going beyond this in accordance with Article 6 para. 1 s. 1 lit. a GDPR. Data from business relationships will be stored until the expiry of the statutory storage obligation and deleted thereafter unless you have consented to storage going beyond this in accordance with Article 6 para. 1 s. 1 lit. a GDPR.

Rights of the person affected

Right of confirmation

You have the right to request confirmation from us as to whether personal data relating to you are being processed.

Right of information Article 15 GDPR

You have the right at any time to receive from us cost-free information about the personal data stored about you as well as a copy of this data.

Right of correction Article 16 GDPR

You have the right to request the correction of incorrect personal data relating to you. Furthermore, the person affected has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Right of deletion Article 17 GDPR

You have the right to demand that we delete your personal data immediately insofar as one of the statutory reasons applies and insofar as processing is not required.

Right of restriction of processing Article 18 GDPR

You have the right to demand that we restrict processing insofar as one of the statutory requirements is met.

Right of notification Article 19 GDPR

You have the right for us to notify all recipients, to whom personal data have been disclosed, of any rectification or erasure of the personal data or of any limitation of processing pursuant to Articles 16, 17 para. 1 and 18, unless this proves impossible or involves a disproportionate effort.

Right of data transferability Article 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format.
You also have the right to transfer this data to another person responsible to whom the personal data have been provided, without any hindrance on our part, provided that the processing is based on the consent pursuant to Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR or on a contract pursuant to Article 6 para. 1 lit. b GDPR and that the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to us.
Furthermore, when exercising your right of data transferability pursuant to Article 20 para. 1 GDPR, you have the right to obtain that the personal data be transferred directly from one responsible person to another responsible person, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.

Right of objection Article 21 GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6 para. 1 lit. e (data processing in the public interest) or f (data processing on the basis of a balancing of interests) of the GDPR.
This also applies to profiling based on these provisions within the meaning of Article 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Right of revocation of consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time with effect for the future.

If you wish to make use of your rights, please refer to the contact person mentioned above on the subject of data protection.

Right of complaint

You have a right of complaint to the competent supervisory authority responsible for data protection about our processing of personal data.

Obligation to provide personal data

You have no obligation to provide data.

Automated decision-making

No automated decision-making or profiling is taking place.

Thank you
Your team of ERSAsoft GmbH