Data Protection Notes according to Art. 13, Art. 14 and 21 GDPR (General Data Protection Regulation)
FLYERALARM ltd. shall be responsible for data collection and processing.
We generally only collect the data required for conclusion of the contract.
Indication of specific data is voluntary. There will be no negative consequences if the data are not provided. However, not providing them may make subsequent communication more difficult or cause delays.
Data processing to perform the contract:
We process the collected data purs. to art. 6 para. 1 lit. b GDPR for the purpose of performing the contract. This also comprises the connected customer support.
If necessary, personal data will be passed on to the companies within FLYERALARM that are involved in processing of this contract, e.g. banks for payment processing, suppliers, delivery services.
The data required to meet the contract will be saved by us as a customer account and may be deleted on request at any time. The data will not be deleted if any claims are still pending after the end of the contract and are to be debited. If there are any statutory retention periods, the affected data will be archived for the duration of these periods.
Data processing to maintain justified interests:
In exceptions, we process your personal data for the purpose of performing audits or compliance measures. Your personal data will be partially processed for optimisation of company-internal processes in this context for this reason. It is possible that external third parties may be given access to your personal data for this purpose.
The processing activities take place based on art. 6 para. 1 lit. f GDPR and in the interest of comprehensively ensuring legality of the data processing or the processes performed within the FLYERALARM companies.
Data processing based on consent:
If you have given your separate consent to be informed by us on the phone or by email concerning products and services of the FLYERALARM companies, the corresponding processing will take place based on art. 6 para. 1 lit. a GDPR. Your consent can be revoked at any time without this affecting the legality of the processing performed to date. If the consent is revoked, we will cease the corresponding data processing.
Data processing for direct advertising:
We process your data for the purpose of direct advertising, in particular for sending our advertisements by email and partially by mail. Data processing takes place based on art. 6 para. 1 lit. f GDPR and in the interest of informing you about new products and services. Every customer can object separately to this processing; objection will cause the end of processing for the purpose of direct advertising. If any data are stored only for direct advertising, they will be deleted after the objection is given.
We only submit your data to third parties (e.g., to banks for payment processing, lawyers for enforcing unpaid claims, selected print service providers, postal service providers to deliver your order) if a transmission right (e.g. under the above legal provisions) applies.
We may also pass your data on to external service providers (e.g. IT service providers, companies that destroy or archive data, print service providers) that support us in data processing in the scope of contract processing strictly bound to instructions.
We partially transfer your data to service providers abroad in the scope of contract processing. We have concluded the corresponding contract processing agreements and, as far as required, the EU standard agreements according to art. 46 para. 2 lit. c GDPR with the contract processors as an appropriate guarantee for legality of the data transfer. Upon your query, we will gladly allow you to view the contract or provide you with a copy.
We will not sell any personal data to third parties or market them otherwise.
Handling of data that are not directly collected from the data subject
In addition to the above data processing, we also process contact data that we have not collected directly from the data subject and store them with any existing data records if applicable.
It is also possible that a customer who places an order with us will indicate your address data because an order is to be delivered to you or other personal data that are to be processed in the scope of the printing order. We process these data in order to process the order. It is also possible that your data will be indicated as the billing address.
Reference to a right to object according to art. 21 GDPR
If data are collected based on art. 6 para. 1 lit. f (data collection to maintain legitimate interests), you have the right to object to processing at any time due to reasons resulting from your special situation. In that case, we shall no longer process the personal data except if there are verifiable compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. If possible, please send your objection to: email@example.com.
Reference to an objection right against direct advertising
We process your data for the purpose of direct advertising. You can object separately to this processing; objection will cause the end of processing for the purpose of direct advertising. If possible, please send your objection to: firstname.lastname@example.org.
Rights of the data subject:
Data subjects have the right to demand information about the personal data concerning them from the controllers, as well as to rectification of incorrect data or erasure if one of the reasons named in art. 17 GDPR is present, e.g. if the data are no longer needed for the pursued purposes. They also have the right to restriction of processing if one of the conditions named in art. 18 GDPR is present and the right to data portability in the cases of art. 20 GDPR. If data are collected based on art. 6 para. 1 lit. e (data processing for meeting authority tasks or protection of public interest) or lit. f (data collection to maintain legitimate interests), data subjects have the right to object to processing at any time due to reasons resulting from their special situation. In that case, we shall no longer process the personal data except if there are verifiable compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Right to complain to a supervisory authority:
Every data subject has the right to complain to a supervisory authority if he or she believes that processing of the data referring to him or her violates provisions under data protection law. The right to complain may specifically be asserted before a supervisory authority of the member state of the place of residence of the data subject or the location of the alleged violation. In the UK, the relevant supervisory authority is: